# changelog

author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-14
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
     - Stop ignoring the -o v4 option (bz 529407)
     - Allow network protocol roll backs when proto is set
        in the config file (bz 529864)


author: Steve Dickson <steved@redhat.com> 1.2.1-1
changelog:
  - Updated to latest upstream release 1.2.1
  - Updated to the latest pseudo root release (rel8).
  - Stop rpc.nfsd from failing to startup when the network
    is down (bz 532270)


author: Steve Dickson <steved@redhat.com> 1.2.1-3
changelog:
  - Updated to the latest pseudo root release (rel9).
  - mount.nfs: Retry v4 mounts with v3 on ENOENT error


author: Steve Dickson <steved@redhat.com> 1.2.1-4
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc6
    which fixes bz(479362) and contains the upstream pseudo 
    root release.


author: Steve Dickson <steved@redhat.com> 1.2.1-5
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-6
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc8
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-7
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6  (bz 556484)


author: Steve Dickson <steved@redhat.com> 1.2.2-3
changelog:
  - Allow mountd to not listen for RPC calls when v2/v3 disabled (bz 538922)
  - Added portmap to init script dependencies (bz 583007)
  - Added in the mount.nfs4 and umount.nfs4 man pages (bz 528951)
  - Did some initscripts improvement (bz 596095)
  - Added error message for an invaild mount option value (bz 588886)
  - Added error message for an invaild proto option value (bz 588879)


author: Steve Dickson <steved@redhat.com> 1.2.2-5
changelog:
  - Removed the inconsistent default anonuid/anongid values. (bz 566888)
  - Created the rpcuser group (bz 594206)


author: Steve Dickson <steved@redhat.com> 1.2.3-1
changelog:
  - Initscripts changes needed to support NFS over RDMA (bz 631012)
  - Initscripts changes needed for NFS to shutdown cleanly (bz 636513)
  - Initscripts changes needed for rpcbind to be running 
    when nfs is started (bz 641291)


author: Steve Dickson <steved@redhat.com> 1.2.3-6
changelog:
  - Added support for AD style kerberos to rpc.gssd (bz 671474)
  - Disabled the installing of the nfsidmap command


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Steve Dickson <steved@redhat.com> 1.2.3-16
changelog:
  - Enable the keyring based idmapping (bz 772496)
  - Correct nfs(5) man page on how TCP retries are done (bz 737990)
  - Fixed sigio problem in rpc.idmapd (bz 751089)
  - Only link in libtirpc to binaries that need it (bz 772050)
  - Increase the stdio file buffer size for procfs files (bz 736741)
  - Fixed gssd from picking the wrong creds (bz 738774)
  - Mounts fail with using -o bg,vers= options (bz 740472)


author: Steve Dickson <steved@redhat.com> 1.2.3-17
changelog:
  - Used correct locking file in nfs.init script (bz 772543)
  - Create a locking file for rpc.rquotad (bz 766472)
  - Normalized umount paths (bz 758000)
  - Fixed parsing error in nfsmount.conf code (bz 754666)


author: Steve Dickson <steved@redhat.com> 1.2.3-18
changelog:
  - Fixed nfs initscript to handle reloads correctly (bz 784022)
  - Add support for umlauts in group names in idmapper (bz 772619)
  - Stoppped racing exportfs in clusters (bz 800335)


author: Steve Dickson <steved@redhat.com> 1.2.3-19
changelog:
  - Fixed decode group names with spaces in idmapd (bz 787970)
  - Remove two unused gss commands (bz 738932)


author: Steve Dickson <steved@redhat.com> 1.2.3-22
changelog:
  - NFS initscript needs to do a rpcidmapd condrestart not a condstart (bz 809201)
  - Allow v2|v3 background mounts to retry when server is down (bz 740472) 
  - Fix the umounting of symbolic links (bz 801085)


author: Steve Dickson <steved@redhat.com> 1.2.3-26
changelog:
  - Fixed typo in the checking of nfsnobody (bz 816149)
  - Fixed the exporting of subdirectories (bz 816162)


author: Steve Dickson <steved@redhat.com> 1.2.3-29
changelog:
  - V4 mounts hang on exports to netgroups (bz 815673)
  - Strip the '[]' off of ipv6 addresses (bz 811882)
  - Removed a use_ipaddr race in mountd (bz 797209)


author: Steve Dickson <steved@redhat.com> 1.2.3-30
changelog:
  - gssd: Don't link with libgssapi_krb5 (bz 784909)
  - Fix referrals that use IPv6 addresses (bz 820737)
  - Add -l option to gssd to force legacy behaviour (bz 802469)
  - Add support to svcgssd to limit the negotiated enctypes (bz 802469)
  - Changed nfs.init to allow umounts to happen cleanly during 
    system shutdown (bz 856923)


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Changed the file mode on documentation files (bz 427827)
  - Chagned how the doc directories are created so they
    are owned by the package. (bz 211001)


author: Steve Dickson <steved@redhat.com> 1.1.1-4
changelog:
  - In idmapd.conf, commented out 'Domain' so DNS will be
    used to define the domainname. (bz 447237)


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Enable patch with fix for deadlock in trust domain lock and object lock
  - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042685 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Make pem's derEncodingsMatch function work with encrypted keys
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-11
changelog:
  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
changelog:
  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-8
changelog:
  - build using a bundled Berkeley DB with a unique name to avoid possible symbol
    collisions with binaries using different versions (mix multiple versions of
    any shared library in a single process, observe as wackiness ensues)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-18
changelog:
  - disable various language bindings when building the bundled DB library
  - remove unpackaged files from the buildroot in %install
  - don't install the compat version on arches where if we don't need one


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-24
changelog:
  - disable use of RPM's internal dependency generator, which was preventing
    the filtering out of glibc private dependencies (#112849)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-27
changelog:
  - only provide a -compat subpackage on platforms where glibc provides
    compat NSS modules (%{ix86})
  - make -compat depend on the same version of the non-compat package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-28
changelog:
  - set _filter_GLIBC_PRIVATE instead of overriding findrequires, so that file
    colors get marked correctly (originally #128436)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-30
changelog:
  - update to DB 4.3 (#140094)
  - add sample getent-based makefile as a doc file
  - pass S_IFREG to matchpathcon() to properly match contexts which are earmarked
    for only files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-36
changelog:
  - update to use DB 4.5.20
  - make our obsoletion of nss_db-compat a versioned one
  - mark the makefile %config(noreplace)
  - change buildroot to the prescribed value
  - change buildprereq to buildrequires to make rpmlint happy


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-39
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368501)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-42.el6_5
changelog:
  - turn off crypto, hash, queue, and replication support, which aren't used,
    reduces the package size, and sidesteps needing to patch anything for #347741
  - create and populate new db files, moving them in place afterward so that we
    never have a partially-built db file "live" (patch from Kelsey Cummings,
    CentOS #1987)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580192, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#705466)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Michal Schmidt <mschmidt@redhat.com> - 2.2.8-4
changelog:
  - Return support for crypto hw on s390.
  - Renamed to opencryptoki.
  - Simplified multilib by putting libs in subpackage as suggested by Dan Horák.


author: Dan Horák <dhorak@redhat.com> 2.3.1-1
changelog:
  - New upstream release 2.3.1. (#559364)
  - opencryptoki-2.3.0-fix-nss-breakage.patch was merged.
  - updated pkcsslotd initscript (#547324)
  - Resolves: #559364
  - Related: #547324


author: Dan Horák <dhorak@redhat.com> 2.4-2
changelog:
  - don't add root to pkcs11 group (#732756)
  - document implications of the pkcs11 group membership (#730903)
  - Resolves: #732756, #730903


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in 
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package 
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - buffer overflow patch from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-1
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style
  - rebased openldap to 2.4.19
  - rebased bdb to 4.8.24


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-7
changelog:
  - updated usage line in init script
  - changed return code when calling init script with bad arguments


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
changelog:
  - fixed broken link /usr/sbin/slapschema (#583568)
  - removed some static libraries from openldap-devel (#583575)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
changelog:
  - updated overlay list in config file (#586143)
  - config dir slapd.d added to package payload (#585276)
  - init script now creates only symlink, not harldink, in /var/run (#584870)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - rebase to 2.4.23 (Fedora 14) (#644077)
  - uses Mozilla NSS instead of OpenSSL for TLS/SSL
  - added LDIF (ldif.h) to the public API
  - removed embeded Berkeley DB
  - removed autofs schema (use up-to-date version from autofs package instead)
  - removed compat-openldap subpackage (use separate package instead)
  - fixes: ldapsearch -Z hangs server if starttls fails (#652823)
  - fixes: improve SSL/TLS log messages (#652819)
  - fixes: crash when TLS_CACERTDIR contains a subdirectory (#652817)
  - fixes: TLS_CACERTDIR takes precedence over TLS_CACERT (#652816)
  - fixes: openldap should ignore files not in the openssl c_hash format in cacertdir (#652814)
  - fixes: slapd init script gets stuck in an infinite loop (#644399)
  - fixes: Remove lastmod.la from default slapd.conf.bak (#630637)
  - fixes: Mozilla NSS - delay token auth until needed (#616558)
  - fixes: Mozilla NSS - support use of self signed CA certs as server certs (#616554)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#613966)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#667795)
  - fix: move libraries from /usr/lib to /lib (#548475)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-16
changelog:
  - fix: memleak in tlsm_auth_cert_handler (#717738)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#698921)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#701227)
  - fix: server scriptlets require initscripts package (#712358)
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712494)
  - fix: ldapsearch fails if no CA certificate is available (#713525)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-17
changelog:
  - fix: strict aliasing warnings during package build (#723487)
  - add partial RELRO support for libraries (#723999)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#729095)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#729087)
  - fix: TLS_REQCERT=never ignored when the certificate is expired (#722959)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#726984)
  - fix: OpenLDAP server segfaults when using back-sql (#727533)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#722923)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#723514)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-18
changelog:
  - fix: overlay refint option refint_nothing doesn't function correctly (#725479)
  - fix: Unwanted slash printed when installing openldap-servers (#732001)
  - manpage fix: TLS options in documentation are not valid for MozNSS (#684810)
  - fix: NSS_Init* functions are not thread safe (#731168)
  - manpage fix: errors in manual page slapo-unique (#723521) 
  - new feature: honor priority/weight with ldap_domain2hostlist (#730311)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-16.14
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-16.15
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Bill Nottingham <notting@redhat.com> - 2.1.4-6
changelog:
  - don't run by default
  - don't create/chmod directories in %post, just include them with the
    right perms
  - fix debuginfo
  - fix docs


author: Harald Hoyer <harald@redhat.com> - 2.1.5-1
changelog:
  - added selinux patch from Daniel Walsh
  - initscript now uses translated strings
  - version 2.1.5 with minor fixes


author: Harald Hoyer <harald@redhat.com> - 2.3.0-1
changelog:
  - version 2.3.0
  - reimported specfile
  - PIEd openswan
  - cleaned up initial config files and added include directives
    for easy config drop in


author: Harald Hoyer <harald@redhat.com> - 2.3.1-3
changelog:
  - added openswan-2.3.1-nat_t_aggr.patch
  - added openswan-2.3.1-iproute2.patch
  - added openswan-2.3.1-cisco.patch
  - NAT-T/XAUTH/AGGR-MODE is now possible with a Cisco VPN 3000


author: Harald Hoyer <harald@redhat.com> - 2.4.4-1.1
changelog:
  - version 2.4.4
  - fixes NISCC Vulnerability Advisory 273756/NISCC/ISAKMP
  - fixes NISCC Advisory 3756/NISCC/ISAKMP


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-3
changelog:
  - Removed _smp_mflags macro from from the spec file build section
  - Added BuildRequires for xmlto
  - Changed License from GPL to GPL+
  - removed klips ifdefs from spec file
  - Added patch to move example configs to doc dir
  - Added a patch to make the link to init script relative, 
    for chroot environments


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-4
changelog:
  - Removed use of xmlto and the BuildRequires
  - moved scripts from /usr/lib to /usr/libexec
  - removed man3 pages for libopenswan functions (we don't deliver)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-6
changelog:
  - Moved everything else out of /usr/lib
  - Added tmraz's patch to remove extra slashes in makefile
  - Removed macros from changelog entries


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.08-1
changelog:
  - Moved to latest upstream
  - Replaced the init script source file with a patch to the upstream one
  -    (no functional changes to the init script)
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.18-2
changelog:
  - Addressed some issues related to buzilla 447419
  - Added xmlto and bind-devel to BuildRequires 
  - Removed the patch openswan-2.6-noxmlto.patch
  - Removed the command "rm -rf programs/readwriteconf" from the spec file
    as readwriteconf is used with "make check" for debugging purposes.
  - Removed USE_LWRES=false from the spec file as it has been 
    obsolete in upstream (using bind-devel instead)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - new upstream release
  - Fix for CVE-2009-0790 DPD crasher
  - Fix remaining SADB_EXT_MAX -> K_SADB_EXT_MAX entries
  - Fix ipsec setup --status not showing amount of tunnels with netkey


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-2
changelog:
  - Applied patch to support NSS, currently disabled due to
    dependency on rh bz #491693
  - The patch also supports fips check integrity 
     (requires fipscheck-devel library)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-3
changelog:
  - Updated the Openswan-NSS porting to enable nss by default
  - The patch includes README.nss for information about NSS usage


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Updated the Openswan-NSS porting to enable nss and fipscheck by default
  - fipscheck requires fipscheck-devel library


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-5
changelog:
  - Added support for using PSK with NSS
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.22-1
changelog:
  - New upstream release
  - Added support for using PSK with NSS
  - Fixed several warnings and undid unnecessary debug messages
  - Updated README.nss with an example configuration
  - Moved README.nss to openswan/doc/
  - Improved FIPS integrity check functionality


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.23-1
changelog:
  - New upstream release
  - Supports smartcards now
  - Supports PSK with NSS
  - Supports libcap-ng for lowering capabilities of pluto process 
  - Updated README.nss


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-1
changelog:
  - New upstream release
  - Cisco interop patches
  - Improved init script
  - Fix to allow ";" in the ike/esp parameters
  - Fix to unset IKEv2 Critical flag for payloads defined in RFC 4306
  - Fix to Zeroize ISAKMP and IPsec SA's when in FIPS mode
  - Fix to the issue where Some programs were installed
    twice causing .old files
  - lwdns.req.log moved from /var/tmp/ to /var/run/pluto/ .
    This is to avoid an SElinux AVC Denial
  - Fix for the issueo where ipsec help shows the list twice
  - Fix for compile time warnings


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-2
changelog:
  - Modified summary in spec file
  - Replaced buildroot with RPM_BUILD_ROOT in spec file
  - Included html files in the doc package
  - Patch for disabling openswan startup at the system
    boot by default


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-3
changelog:
  Resolves: #568355 Implementation of new Diffie-Hellman groups 
                    described in RFC 5114
  Resolves: #568493 Pluto's child process can not add routes
  Resolves: #568648 some subcommand doesn't work
  Resolves: #568652 the transport mode doesn't work
  Resolves: #574833 Openswan client can not interop with 
                    Cisco VPN servers
  Resolves: #574839 ImplicitDSOLinking
  Resolves: #574841 Openswan Implementation issue related to 
                    hardcoded length of hash algorithms


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-4
changelog:
  Resolves: #579629
  Resolves: #584224
  Resolves: #586420
  Resolves: #592630
  Resolves: #594767
  Resolves: #579747
  Resolves: #587669


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-7
changelog:
  Resolves: #737973
  Resolves: #737975
  Resolves: #737976
  Resolves: #738385
  Resolves: #742632
  Resolves: #742070


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.9.3-1
changelog:
  - New upstream release
  - Fixes the folowing bugzilla.redhat.com tickets:
  - 563355 error in tuna --help output
  - 574950 cannot use cpu ranges in the tuna GUI
  - 559770 tuna backtrace when moving threads
  - 563352 tuna backtrace when no thread list is given for --priority
  - 563350 tuna backtrace when scheduler is mis-typed.


author: Stef Walter <stefw@redhat.com> - 0.16.1-1
changelog:
  - Update to upstream version 0.16.1
  - Setup source directories as appropriate for Shared System Certificates feature


author: Stef Walter <stefw@redhat.com> - 0.16.3-1
changelog:
  - Update to upstream version 0.16.3
  - Split out system trust module into its own package.
  - p11-kit-trust provides an alternative to an nss module


author: Stef Walter <stefw@redhat.com> - 0.17.5-1
changelog:
  - Make 'p11-kit extract-trust' call update-ca-trust
  - Work around 32-bit oveflow of certificate dates
  - Build fixes


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-2
changelog:
  - Reference authors from the project AUTHORS file instead of listing in description
  - Change Source0 to reference the project's Mercurial repo
  - Cleaned up the summaries and descriptions
  - Incorporate the results of Fedora package self-review


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-3
changelog:
  - Include an AUTHORS and license file in each package
  - Change the library package name to pacemaker-libs to be more
    Fedora compliant
  - Remove execute permissions from xml related files
  - Reference the new cluster-glue devel package name
  - Update the tarball from upstream to version c9120a53a6ae
    + High: PE: Only prevent migration if the clone dependancy is stopping/starting on the target node
    + High: PE: Bug 2160 - Dont shuffle clones due to colocation
    + High: PE: New implementation of the resource migration (not stop/start) logic
    + Medium: Tools: crm_resource - Prevent use-of-NULL by requiring a resource name for the -A and -a options
    + Medium: PE: Prevent use-of-NULL in find_first_action()
    + Low: Build: Include licensing files


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-0.4.c9120a53a6ae.hg
changelog:
  - Incorporate the feedback from the cluster-glue review
  - Realistically, the version is a 1.0.5 pre-release
  - Use the global directive instead of define for variables
  - Use the haclient/hacluster group/user instead of daemon
  - Use the _configure macro
  - Fix install dependancies


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-1
changelog:
  - Add dependancy on resource-agents
  - Use the version of the configure macro that supplies --prefix, --libdir, etc
  - Update the tarball from upstream to version 462f1569a437 (Pacemaker 1.0.5 final)
    + High: Tools: crm_resource - Advertise --move instead of --migrate
    + Medium: Extra: New node connectivity RA that uses system ping and attrd_updater
    + Medium: crmd: Note that dc-deadtime can be used to mask the brokeness of some switches


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-2
changelog:
  - Add versioned perl dependancy as specified by
      https://fedoraproject.org/wiki/Packaging/Perl#Packages_that_link_to_libperl
  - No longer remove RPATH data, it prevents us finding libperl.so and no other
    libraries were being hardcoded
  - Compile in support for heartbeat
  - Conditionally add heartbeat-devel and corosynclib-devel to the -devel requirements
    depending on which stacks are supported


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-3
changelog:
  - Update the tarball from upstream to version 38cd629e5c3c
    + High: Core: Bug lf#2169 - Allow dtd/schema validation to be disabled
    + High: PE: Bug lf#2106 - Not all anonymous clone children are restarted after configuration change
    + High: PE: Bug lf#2170 - stop-all-resources option had no effect
    + High: PE: Bug lf#2171 - Prevent groups from starting if they depend on a complex resource which can't
    + High: PE: Disable resource management if stonith-enabled=true and no stonith resources are defined
    + High: PE: Don't include master score if it would prevent allocation
    + High: ais: Avoid excessive load by checking for dead children every 1s (instead of 100ms)
    + High: ais: Bug rh#525589 - Prevent shutdown deadlocks when running on CoroSync
    + High: ais: Gracefully handle changes to the AIS nodeid
    + High: crmd: Bug bnc#527530 - Wait for the transition to complete before leaving S_TRANSITION_ENGINE
    + High: crmd: Prevent use-after-free with LOG_DEBUG_3
    + Medium: xml: Mask the "symmetrical" attribute on rsc_colocation constraints (bnc#540672)
    + Medium (bnc#520707): Tools: crm: new templates ocfs2 and clvm
    + Medium: Build: Invert the disable ais/heartbeat logic so that --without (ais|heartbeat) is available to rpmbuild
    + Medium: PE: Bug lf#2178 - Indicate unmanaged clones
    + Medium: PE: Bug lf#2180 - Include node information for all failed ops
    + Medium: PE: Bug lf#2189 - Incorrect error message when unpacking simple ordering constraint
    + Medium: PE: Correctly log resources that would like to start but can't
    + Medium: PE: Stop ptest from logging to syslog
    + Medium: ais: Include version details in plugin name
    + Medium: crmd: Requery the resource metadata after every start operation


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-4
changelog:
  - Include the fixes from CoroSync integration testing
  - Move the resource templates - they're not documentation
  - Ensure documentation is placed in a standard location
  - Exclude documentation that is included elsewhere in the package

  - Update the tarball from upstream to version ee19d8e83c2a
    + High: cib: Correctly clean up when both plaintext and tls remote ports are requested
    + High: PE: Bug bnc#515172 - Provide better defaults for lt(e) and gt(e) comparisions
    + High: PE: Bug lf#2197 - Allow master instances placemaker to be influenced by colocation constraints
    + High: PE: Make sure promote/demote pseudo actions are created correctly
    + High: PE: Prevent target-role from promoting more than master-max instances
    + High: ais: Bug lf#2199 - Prevent expected-quorum-votes from being populated with garbage
    + High: ais: Prevent deadlock - dont try to release IPC message if the connection failed
    + High: cib: For validation errors, send back the full CIB so the client can display the errors
    + High: cib: Prevent use-after-free for remote plaintext connections
    + High: crmd: Bug lf#2201 - Prevent use-of-NULL when running heartbeat


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-6
changelog:
  - Let snmp automatically pull in lm_sensors-devel if required
    and available on that arch (its not on s390x)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-0.1-00d9bcac8775.hg
changelog:
  - Related: rhbz#rhbz#543948
  - Update the tarball from upstream to version 00d9bcac8775
    + High: PE: Bug 2213 - Ensure groups process location constraints so that clone-node-max works for cloned groups
    + High: PE: Bug lf#2153 - Update regression tests
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes
    + High: PE: Bug lf#2209 - Clone ordering should be able to prevent startup of dependant clones
    + High: PE: Bug lf#2216 - Correctly identify the state of anonymous clones when deciding when to probe
    + High: PE: Bug lf#2225 - Operations that require fencing should wait for 'stonith_complete' not 'all_stopped'.
    + High: PE: Bug lf#2225 - Prevent clone peers from stopping while another is instance is (potentially) being fenced
    + High: PE: Correctly anti-colocate with a group
    + High: PE: Correctly unpack ordering constraints for resource sets to avoid graph loops
    + High: Replace stonithd with the new fencing subsystem
    + High: cib: Ensure the loop searching for a remote login message terminates
    + High: cib: Finally fix reliability of receiving large messages over remote plaintext connections
    + High: cib: Fix remote notifications
    + High: cib: For remote connections, default to CRM_DAEMON_USER since thats the only one that the cib can validate the password for using PAM
    + High: cib: Remote plaintext - Retry sending parts of the message that didn't fit the first time
    + Medium: PE: Bug lf#2206 - rsc_order constraints always use score at the top level
    + Medium: PE: Provide a default action for resource-set ordering
    + Medium: PE: Silently fix requires=fencing for stonith resources so that it can be set in op_defaults
    + Medium: ais: Some clients such as gfs_controld want a cluster name, allow one to be specified in corosync.conf
    + Medium: cib: Create valid notification control messages
    + Medium: cib: Indicate where the remote connection came from
    + Medium: cib: Send password prompt to stderr so that stdout can be redirected
    + Medium: extra: Add the daemon parameter to the controld metadata
    + Medium: fencing: Re-engineer the stonith daemon to support RHCS agents
    + Medium: tools: Make crm_mon functional with remote connections
    + Medium: xml: Bug bnc#552713 - Treat node unames as text fields not IDs
    + Medium: xml: Bug lf#2215 - Create an always-true expression for empty rules when upgrading from 0.6


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-1
changelog:
  - Related: rhbz#543948
  - Update the tarball from upstream to version 07ab245be519
    + High: crmd: Always connect to stonith
    + High: crmd: Ensure batch-limit is correctly enforced
    + High: crmd: Ensure we have the latest status after a transition abort
    + High: Fencing: Overhaul the fencing daemon
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes - improved
    + Medium: PE: Allow resource sets to be reused between ordering and colocation constraints
    + Medium: PE: Implement serializing order constraints that dont cause restarts or inhibit migration
    + Medium: PE: Include node attributes for the node to be fenced
    + Medium: PE: Make crm_simulate a full replacement for ptest
    + Medium: PE: Only complain about target-role=master for non m/s resources
    + Medium: PE: Prevent non-multistate resources from being promoted through target-role
    + Medium: PE: Simplify the rsc_order syntax - don't make funky inferences based on score
    + Medium: PE: Support serialized sets of resources
    + Medium: Tools: Bug lf#2286 - Allow the shell to accept template parameters on the command line
    + Medium: Tools: Bug lf#2307 - Provide a way to determin the nodeid of past cluster members
    + Medium: Tools: crm: add update method to template apply (LF 2289)
    + Medium: Tools: crm: direct RA interface for stonith class resource agents (LF 2270)
    + Medium: Tools: crm: don't remove sets which contain id-ref attribute (LF 2304)
    + Medium: Tools: crm: exclude locations when testing for pathological constraints (LF 2300)
    + Medium: Tools: crm: fix exit code on single shot commands
    + Medium: Tools: crm: fix node delete (LF 2305)
    + Medium: Tools: crm: implement -F (--force) option
    + Medium: Tools: crm: rename status to cibstatus (LF 2236)
    + Medium: Tools: crm: stay in crm if user specified level only (LF 2286)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.1-1
changelog:
  - Resolves: rhbz#559868
  - Split off the doc package as it has grown quite large
  - Split off the cluster test suite (CTS) so that it can be used by other projects
  - Update the tarball from upstream to version 46e288ab9014
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: Agents: Prevent shell expansion of '*' when there are files in /var/lib/heartbeat/cores/root
    + High: ais: Bug lf#2340 - Force rogue child processes to terminate after waiting 2.5 minutes
    + High: ais: Bug lf#2359 - Default expected votes to 2 inside Corosync/OpenAIS plugin
    + High: ais: Bug lf#2359 - expected-quorum-votes not correctly updated after membership change
    + High: ais: Bug rhbz#525552 - Move non-threadsafe calls to setenv() to after the fork()
    + High: crmd: Bug bnc#578644 - Improve handling of cancelled operations caused by resource cleanup
    + High: crmd: Make sure we wait for fencing to complete before continuing
    + High: crmd: Prevent use-of-NULL when non-DCs get stonith callbacks
    + High: Fencing: Account for stonith_get_info() always returning a pointer to the same static buffer
    + High: Fencing: Bug bnc#577007 - Correctly parse the hostlist output from stonith agents
    + High: Fencing: Correctly parse arg maps and do not return a provider for unknown agents
    + High: fencing: Fix can_fence_host_with_device() logic and improve hostlist output parsing
    + High: PE: Bug lf#2358 - Fix master-master anti-colocation
    + High: PE: Correctly implement optional colocation between primitives and clone resources
    + High: PE: Suppress duplicate ordering constraints to achieve orders of magnitude speed increases for large clusters
    + High: Shell: move scores from resource sets to the constraint element (lf#2331)
    + High: Shell: recovery from bad/outdated help index file
    + Medium: Shell: implement lifetime for rsc migrate and node standby (lf#2353)
    + Medium: Shell: node attributes update in configure (bnc#582767)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-2
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590992
  - Rebase on new upstream release
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Don ot be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544,
           lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-6
changelog:
  - Update tarball to upstream version: b933cbea41b5
  - Resolves: rhbz#708797
  - Resolves: rhbz#451848
  - Resolves: rhbz#708722
  - Resolves: rhbz#720136


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-1
changelog:
  - Update tarball to upstream version: 148fccf
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/148fccf...a12de08
  - Add libqb-devel as a build dependancy
  - Resolves: rhbz#782255 rhbz#754216 rhbz#729035
  - Related:  rhbz#790627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-2
changelog:
  - Update patch level to upstream version: c26e624
  - Resolves: rhbz#720214 rhbz#720218 rhbz#754216 rhbz#789397
    For full details, see:
      https://github.com/ClusterLabs/pacemaker/compare/c26e624...148fccf


author: David Vossel <dvossel@redhat.com> - 1.1.7-3
changelog:
  - Add libqb-devel as a dependancy of pacemaker-libs-devel
  - Medium: PE: Report resources as active in correct data about resource location
    Resolves:  rhbz#799070
  - Low: Tools: Bug rhbz#801351 - Fix crm_report help text
    Resolves: rhbz#801351


author: David Vossel <dvossel@redhat.com> - 1.1.7-5
changelog:
  - Use default value for HB_DAEMON_DIR define when clusterglue does not provide one.
    Resolves: rhbz#808557


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <andrew@beekhof.net> 1.1.10-1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

  - Resolves: rhbz#891766
  - Resolves: rhbz#902407
  - Resolves: rhbz#908450
  - Resolves: rhbz#913093
  - Resolves: rhbz#951340
  - Resolves: rhbz#951371
  - Related: rhbz#987355


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-3
changelog:
  + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-4
changelog:
  + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.73-1
changelog:
  - Cluster name is now viewable on RHEL 6
  - Cluster.conf is now removed on destroy
  - Misc man page & usage updates
  - When removing the last resource from a group, remove any constraints still
    remaining on group


author: Chris Feist <cfeist@redhat.com> - 0.9.74-1
changelog:
  - pcs cluster edit should now work properly
  - Allow removal of group and resources inside group with
    pcs resource delete <group name>


author: Chris Feist <cfeist@redhat.com> - 0.9.75-1
changelog:
  - Removing a resource that is part of a resource set is now allowed
  - When you try to remove a group from a master that has more than one
    resource you now recieve a helpful error
  - Unclone works on clones where constraints have been added
  - Removing a group with constraints now works properly
  - Master/Slave groups now have constraints properly removed before being
    deleted


author: Chris Feist <cfeist@redhat.com> - 0.9.76-1
changelog:
  - Renamed resource group remove/delete to ungroup
  - Fixed moving resource masters
  - Allow cloing/mastering last resource in a group


author: Chris Feist <cfeist@redhat.com> - 0.9.77-1
changelog:
  - Fixed managing/unmanaging groups/clones/masters of resources
  - Fixed issue when using --group when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.78-1
changelog:
  - Fixed error codes and stdout/stderr output on errors from pcs resource
    enable/disable
  - Automatically add interval to operations which don't specify an interval


author: Chris Feist <cfeist@redhat.com> - 0.9.79-1
changelog:
  - Fixed OCF_CHECK_LEVEL operation setting in resource update
  - Return proper error codes when stopping/starting/enable/disabling resources
  - Return proper error code on auth


author: Chris Feist <cfeist@redhat.com> - 0.9.80-1
changelog:
  - More fixes for OCF_CHECK_LEVEL issues
  - Fix traceback when adding a resourcew with a provider that doesn't exist
  - Create proper two_node cluster when only two nodes are specified in cluster
    setup
  - Give useful error when bad options are used with 'op'


author: Chris Feist <cfeist@redhat.com> - 0.9.81-1
changelog:
  - Fix issues when updating resource with multiple operations with the same
    action
  - Fixed constraint rules and improved usage documentation


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.2
changelog:
  - Fixed bug causing an issue when adding stonith level without --force
  - Added ability to create/edit/remove uidgid for corosync in cluster.conf
  - Fixed bug which wouldn't allow a user to standby nodes
  - Resolves: rhbz#1038479 rhbz#1038478 rhbz#1032161


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1099314


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-4
changelog:
  - qt4.(sh|csh): place-holders only, don't define QTDIR (and QTLIB)
    as that (potentially) conflicts with qt-3.x.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-7
changelog:
  - rework %post/%postun, mostly to placate rpmlint
  - drop Prefix:
  - drop use of qt4.(sh|csh), they're empty atm anyway
  - use Source'd designer.desktop (instead of inline cat/echo)
  - symlinks to %_bindir: qmake4, designer4, qtconfig4
  - drop qtrc, qt4 doesn't use it.
  - -docs subpkg for API html docs, demos, examples.
  - BR: libXcursor-devel libXi-devel (fc5+)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-10
changelog:
  - cleanup/simplify license bits, include LICENSE.QPL
  - drop unused -styles/-Xt subpkg reference
  - drop unused motif extention bits
  - drop initialpreference from .desktop files


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-11
changelog:
  - drop optional ld.so.conf.d usage, make mandatory
  - make %_bindir symlinks to all %qtdir/bin stuff (even qt3to4)
  - pkgconfig files: hardlinks -> relative symlinks, strip -L/usr/lib/mysql
    and -L%{_builddir}/qt-x11-opensource-src-%version/lib
  - cleanup/simplify Summary/%description entries
  - $RPM_BUILD_ROOT -> %buildroot, $RPM_BUILD_DIR -> %_builddir


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-14
changelog:
  - remove MapNotify from .desktop file(s).
  - install -m644 LICENSE.*
  - -docs: don't mark examples as %doc
  - drop unused %debug macro


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org> - 4.1.2-15
changelog:
  - Rename -docs to -doc.
  - Files in the -doc subpackage are no longer in %doc.
  - Move qtdemo to the subpackage -doc.
  - Fix symlinks in %{_bindir}.
  - Only modify mkspecs/linux-g++*/qmake.conf, instead of all mkspecs/*/qmake.conf.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-16
changelog:
  - set/use RPM_OPT_FLAGS only for our platform
  - (really) don't give %_bindir symlink for qt3to4 another "4" suffix
  - don't add 4 suffix to uic3, rcc (they don't conflict with qt(3)-devel)
  - -devel: add  linguist.desktop
  - -doc: move assistant here, Provides: %{name}-assistant, add assistant.desktop
  - -doc: add qtdemo.desktop
  - -doc: Requires qt4 (instead of qt4-devel)
  - assistant4.patch: search for assistant4 instead of (qt3's) assistant in $PATH 
  - -qtconfig: add qtconfig.desktop
  - updated %sumaries to mention where (some) tools are, including assistant, linguist,
    qtdemo


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-17
changelog:
  - .desktop: Qt -> Qt4, and Comment= (where missing)
  - -devel: include -designer here, Obsoletes/Provides: %name-designer.
     It's small, simplifies things... one less subpkg to worry about.
  - -doc: include %qtdir/doc symlink here
  - -docdir %_docdir/%name-doc-%version


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-18
changelog:
  - %_bindir symlinks: qtconfig4 -> qt4config, qtdemo4 -> qt4demo
  - -libdir %qtdir/%_lib, simplifies %_lib != lib case
  - -docdir %_docdir/%name-%version
  - build shared versions of libQtAssistantClient,libQtUiTools too
  - strip extraneous -L paths, libs from *.prl files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-20
changelog:
  - fix some unowned dirs
  - try harder to purge %builddir from .pc,.prl files
  - -docdir %_docdir/%name-doc-%version, since we use %doc macro in main pkg
  - -doc: own %qt_docdir
  - use qt4-wrapper.sh to ensure launch of qt4 versions of apps that
    (may) overlap with those from qt3 
  - use %qtdir/%_lib in ld.so.conf.d/*.conf files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-1
changelog:
  - 4.1.3
  - %qtdir/lib/*.pc -> %qtdir/%_lib/*.pc 
    (hopefully, the last hardcoded reference to %qtdir/lib)


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org>
changelog:
  - Fix the last reference to %{qtdir}/lib: use lib instead of "lib".
  - Fix the ownership of subpackages: they need to own parents of directories they install files in.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-5
changelog:
  - strip -lXi from .pc files (#193258)
  - simplify sql plugin builds via %buildSQL macro
  - -libdir %qt_libdir


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-8
changelog:
  - qmake.conf: undefine QMAKE_STRIP to get useful -debuginfo (bug #193602)
  - move (not symlink) .pc files into %_libdir/pkgconfig


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-2
changelog:
  - -devel: include -debug libs (bug #196513)
  - -devel: move libQtDesigner here
  - -config: mash into main pkg, should be multilib friendly now


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-3
changelog:
  - -debug: drop, adds nothing over -debuginfo, make lib..._debug 
    symlinks instead (bug #196513)
  - assistant.desktop: fix tooltip (bug #197039)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.2.tp1
changelog:
  - -system-nas-sound, BR: nas-devel (bug # 197937)
  - -qdbus (fc6+, BR: dbus-devel >= 0.62)
  - -glib (BR: glib2-devel)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.6.20060821
changelog:
  - update to 4.2.0-snapshot-20060821 (same as today's qt-copy)
  - -no-separate-debug-info
  - - ./configure -xfixes, BR: libXfixes-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-0.9.20060927
changelog:
  - update to qt-4.2.0-snapshot-20060927
  - update QDBus executable names
  - -x11: exclude plugins/designer (which belong to -devel)
  - BuildConflicts: qt4-devel
  - drop -fno-strict-aliasing hack (fc5+)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-5
changelog:
  - fixup qconfig-multilib.h (#223663)
  - qt4.(sh|csh): define QMAKESPEC (#223663)
  - null'ify QMAKE_LIBDIR_QT, leave QMAKE_INCDIR_QT alone for now. (#230224)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-7
changelog:
  - fixup qconfig-multilib.h for powerpc/powerpc64 (#223663)
  - include qt-copy's 0154-qdbuscpp2xml-moc_path.diff (#230875)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-1
changelog:
  - qt-4.2.3
  - multilib: move all arch-specific mkspecs bits to %qt4_prefix/mkspecs (#223663)
  - +%_sysconfdir/rpm/macros.qt4
  - +%config %qt4_sysconfdir/Trolltech.conf


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-8
changelog:
  - QFileDialog file wrapping patch (qt#153635, rh#236908)
  - License: GPL, dropping LICENSE.QPL (#237702)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.3.0-0.3.snapshot20070423
changelog:
  - update to qt-4.3.0-snapshot-20070423
  - build with SSL support (BR openssl-devel)
  - drop upstreamed mysql_config.patch


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-7
changelog:
  - prepare for possible rename qt4 -> qt (+Provides: qt4)
  - make _qt4_* macro usage consistent (with %check's)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-9
changelog:
  - multilib broken: qconfig.h (#248768)
  - +%_qt4_demosdir,%_qt4_examplesdir
  - + Qt.pc, provide pkgconfig access to qt4 macros/variables


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-2
changelog:
  - License: GPLv2 (see also GPL_EXCEPTIONS*.txt)
  - omit needless %check
  - (re)add package review comment/reference


author: Than Ngo <than@redhat.com> - 4.3.1-4
changelog:
  - fixed bz241452, add qtdemo/qtconfig icons
  - fixed bz249242, designer4 - segmentation fault on s390x


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-7
changelog:
  - include qt4-logo icon, used by qtdemo/qtconfig (#241452)
  - linguist.desktop: use new linguist4 icons
  - -devel,-x11: %post/%postun scriptlets (icons, mimetypes)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.2-1
changelog:
  - qt-4.3.2
  - (re)fix ppc64 segfaults, ppc64 fix upstreamed (previous patch was 
    inadvertantly not applied) (#246324)


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-6
changelog:
  - qt-copy 20080130 patch set (helps address previous 0180-window-role BIC)
  - Trolltech.conf: (default) fontsize=10
  - License: GPLv2 with exceptions or QPL


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-8
changelog:
  - qt-copy patches 20080219
  - drop -optimized-qmake, for now, to avoid qmake segfaults (gcc43 issue?)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.3.rc1
changelog:
  - qt-4.4.0-rc1
  - -xmlpatterns (and drop -no-exceptions)
  - -reduce-relocations, -dbus-linked, -openssl-linked
  - -no-nas
  - -no-phonon (-no-gstreamer), -no-webkit (for now, at least until
    conflicts with WebKit-qt and kdelibs4 are sorted out)
  - %_qt4_bindir -> %_bindir, avoid qt4-wrapper hackage (#277581, #422291)
  - qtconfig.desktop: NoDisplay=true (#244879)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.4.0-0.4.rc1
changelog:
  - updated patch for #437440 ([as-IN] Consonant combination issue) by Pravin Satpute
  - port the patch to Qt 4.4 (the code moved to harfbuzz) and reenable it


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.6.rc1
changelog:
  - -webkit (include in -x11 subpkg), drop separate -webkit-devel
  - omit qt4-wrapper.sh deps (since it's not used atm)
  - qt-copy-patches-20080429
  - Obsoletes/Provides: WebKit-qt(-devel) <|= 1.0.0-1  (#442200)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-6
changelog:
  - qt-copy-patches-20080606
  - drop BR: libungif-devel (not used)
  - move libQtXmlPatters, -x11 -> main
  - move qdbuscpp2xml, qdbusxml2cpp, xmlpatters, -x11 -> -devel


author: Than Ngo <than@redhat.com> 4.4.3-2
changelog:
  - bz#468814, immodule selection behavior is unpredictable without QT_IM_MODULE,
    patch from Peng Wu
  - backport fix from 4.5


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.3-10
changelog:
  - drop qt-x11-opensource-src-4.3.4-no-hardcoded-font-aliases.patch (#447298),
    in favor of qt-copy's 0263-fix-fontconfig-handling.diff


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.4.rc1
changelog:
  - saner versioned Obsoletes
  - -gtkstyle, Obsoletes: qgtkstyle < 0.1
  - enable phonon support and associated hackery


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.5.rc1
changelog:
  - revert license, change won't land until official 4.5.0 release
  - workaround broken qhostaddress.h (#485677)
  - Provides: qgtkstyle = 0.1


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-2
changelog:
  - License: LGPLv2 with exceptions or GPLv3 with exceptions
  - BR: gstreamer-devel
  - drop qgtkstyle patch (no longer needed)
  - -x11: move libQtScriptTools here (linked with libQtGui)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-7
changelog:
  - include more phonon bits, attempt to fix/provide phonon bindings
    for qtscriptgenerator, PyQt, ...


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-4
changelog:
  - qt-doc noarch
  - qt-demos, qt-examples (split from -doc)
  - (cosmetic) re-order subpkgs in alphabetical order
  - drop unused profile.d bits


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-8
changelog:
  - fix invalid assumptions about mysql_config --libs (bug #440673)
  - fix %files breakage from 4.5.1-5


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-2
changelog:
  - take current qt-copy-patches snapshot (20090626)
  - disable patches which are already in 4.5.2
  - fix the qt-copy patch 0274-shm-native-image-fix.diff to apply against 4.5.2


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-6
changelog:
  - use linker scripts for _debug targets (#510246)
  - tighten deps using %{?_isa}
  - -x11: Requires(post,postun): /sbin/ldconfig


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-12
changelog:
  - use platform linux-g++ everywhere (ie, drop linux-g++-64 on 64 bit),
    avoids plugin/linker weirdness (bug #478481)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-20
changelog:
  - use internal Qt Assistant/Designer icons
  - -devel: move designer.qch,linguist.qch here
  - move ownership of %_qt4_docdir, %_qt4_docdir/qch to main pkg


author: Than Ngo <than@redhat.com> - 4.5.3-2
changelog:
  - cleanup patches
  - if ! phonon_internal, exclude more/all phonon headers
  - qt-devel must Requires: phonon-devel (#520323)


author: Than Ngo <than@redhat.com> - 4.6.0-0.2.beta1
changelog:
  - subpackage sqlite plugin, add Require on qt-sqlite in qt-x11
    for assistant
  - build/install qdoc3 again


author: Rex Dieter <rdieter@fedoraproject.org> - 4.6.0-4
changelog:
  - Fix crash when QGraphicsItem destructor deletes other QGraphicsItem (kde-qt cec34b01)
  - Fix a crash in KDE/Plasma with QGraphicsView. TopLevel list of items (kde-qt 63839f0c)


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-11
changelog:
  - drop optional ld.so.conf.d usage, make mandatory
  - make %_bindir symlinks to all %qtdir/bin stuff (even qt3to4)
  - pkgconfig files: hardlinks -> relative symlinks, strip -L/usr/lib64/mysql
    and -L%{_builddir}/qt-x11-opensource-src-%version/lib
  - cleanup/simplify Summary/%description entries
  - $RPM_BUILD_ROOT -> %buildroot, $RPM_BUILD_DIR -> %_builddir


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org>
changelog:
  - Fix the last reference to %{qtdir}/lib: use lib64 instead of "lib".
  - Fix the ownership of subpackages: they need to own parents of directories they install files in.


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.1
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.2
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - restructured the package to come from CVS
  - renamed it
  - added oot's lvs daemon
  - added the perl client_monitor tool from Lars Marowsky-Bree
  - put stubs in for the GUI
  - buffed up the Makefile


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added a send_arp tool to the package
  - removed the /etc/lvs.cf entry (it was dumb here)
  - strip all binaries too
  - added nanny to package


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Minor updates to doc files and man pages.
  - Added headers and history to some source files
  - Created nanny.h file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that RPM_BUILD_ROOT != / when installing
  - handle case if httpd not installed during %install
  - handle gzipped man pages


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Changed pulse call to send_arp to /usr/sbin
  - Suppress sock error on unconfigured tunl device
  - Bumped version


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added NAT/direct routing/tunneling to the web interface
  - fixed up the web documents to tell the web browsers that
    caching them would be a BAD idea
  - Added some prettify stuff


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Added send/expect parsing to lvs, lvsconfig, and nanny.
  - Updated nanny man page and sample.cf file


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Bumped version to reflect Bryce's changes to install scripts
  - Added persistent netmask to lvsconfig and lvs and sample.cf


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed segfault problem in nanny
  - Minor changes reporting the phase out of the old GUI
  - Bumped version number
  - Changed spec file to include web in GUI RPM


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed passthrough of routing type options
  - Fixed man pages to reflect routing type options
  - Changed formatting of sample.cf file and included comments
  - Bumped version number


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - *NO* "echo's" in spec files!
  - made /etc/lvs.cf a %config so it'll get backed up on upgrades
  - cleaned up some useradd/groupadd errors


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - New version of pulse with enhanced signals
  - New service = xxx parameter in config system
  - New man pages and doc updates


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added password services to web control
  - Altered pulse to provide a signal escalator between nobody root
    as we now have a "use a uid/gid < 100" limitation that
    apache's suexec doesn't cater for
  - Added default password to web (null)
  - minor spec file changes


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected memory errors in parser
  - Updated fos
  - Improved (but have not finished) pulse changes
  - Bumped version to reflect parser change


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected signaling, heartbeat, and failover in pulse
  - Bumped version to reflect a stable release
  - Note: pulse USR1/2 disabled in this checkin


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added fos to file list
  - moved apache & php requires to gui package
  - reordered the install of killapache to make strip not puke


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Improved take control heartbeat login in pulse
  - Enhanced old GUI README to notify user of special conditions
  - Bumped version


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed killapache
  - changed sample httpd shutdown to use proper init scripts
  - Keith fixed MORONIC spelling error in pulse.c :)
  - moved the GUI README into the %doc list


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Security exposure raised by ISS regarding the passwd.php3
    file fixed by replacing the external call to htpasswd with
    php3s own crypt function (see parse.php3 change_password)
  - Rebuilt packages and generated errata.


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - changed the password updating/setting policy.  Made all password actions
    root operations via a root owned shell tool (piranha-passwd)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - core item ipvsadm has been updated to use ipvs-0.9.12-2.2.14
  - Minor tweeking of directory scruture
  - gui files no longer included in rpm builds
  - added a load of patches from the bugzilla archives
  - made kernel diffs
  - made sure the rpms built and installed correctly


author: Philip Copeland <copeland@redhat.com>
changelog:
  - modified the piranha.spec.in file and Makefile to allow for
    release number updates (from editing the Makefile)
  - fixed a bug in redundancy.php3 which occurs when no lvs.cf file
    is present
  - made ipvsadm popt change (minor patch which shouldn't affect
    native redhat installed systems)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Fixed an incorrect pag redirection in the failover pages
  - added two missing subnet masks to the peristance netmask field


author: Philip Copeland <copeland@redhat.com>
changelog:
  - removed the 'accept' input button in control.php3 to
    better fit the documentation
  - Updated the lvserror.php3 to reflect another not so uncommon
    fault that may prevent correct running of the GUI
  - Tidied up some eyecandy


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Backed out some patches to pulse.c, fos.c, lvs.c, and nanny.c
  - Updated documentation
  - Changed "take control" heartbeat


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Merged Bryce's ipvsadm changes
  - Changed nobody to apache (if apache user apache exists)
  - Migrate existing lvs.cf file if appropriate
  - bumped version


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Removed ipvsadm inclusion in piranha RPM
  - Changed version to exceed last experiemental release
  - Corrected web reference in spec file
  - Cleaned up 7.x installationin spec and makefile
  - Bumped version (multiple times)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed piranha-gui startup script and piranha spec file
  - Fixed gui error screen to report correct file permission & ownership


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected netmask logic so it does not ref gethost call and is only
    used when value is non-zero.
  - Added netmask error code and return string
  - Fixed pulse's use of netmasks in ifconfig and sendarp calls
  - Put missing "if debug" blocks around debug output
  - If using FOS, assume active if no backup node specified in lvs.cf
  - Correct inconsistent use of --test-start, --nofork, --nodaemon, and
    --norun between pulse, nanny, fos, and lvs. Updated man pages too.
  - Removed ipvsadm build from Makefile
  - piranha requires ipvsadm 1.17+
  - parser now handles trailing \r chars (customer problem)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Made fast changes to the hard coded /usr/sbin/ipvsadm
    to be /sbin/ipvsadm. This should be in a define in a header file
    however because of time pressure I'm doing it this way first and
    fix it up next week.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Directives from der Boss, we must be able to run rpm -V successfully
  - Collapsed piranha piranha-gui piranha-docs into a single rpm


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Humm, killed off the piranha.desktop file as the GUI is web based not X11
    and this makes no sense to try and start from a menu item. A bookmark maybe.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Various tidyups/rpm fiddling in an effort to allow for building standalone
    outside of the buildsystem.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed parse.php3 so that it wouldn't issue the persistance option
    twice in the lvs.cf configuration file


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Removed nasty httpd.conf modifications in the
    rpm spec file. (An artifact of the old install
    system)
  - Dropped in an example script for use with the
    send_program function. Probably need to spend a
    week cooking up a library of 'common' scripts
    for use.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Bundled in some very simple template scripts with the
    documentation. Dropped in an example_script with the
    main dist. Bumped the version number (0.6.0-10)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a switchover for fos (virt/real address swapover
    to prevent the fos call to nanny checking the real IP
    instead of the VIP


author: Philip Copeland <bryce@redhat.com>
changelog:
  - control.php3 has for ages been calling /usr/sbin/ipvsadm.
    Unfortunately that changed to /sbin and was not updated
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56497
  - In the pulse.c code, too few elements were allocated
    for the arguments causeing an occasional segv.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in a patch for nanny.c from Wensong <wensong@gnuchina.org>
    which cleans up the run() function by splitting out two new
    funcions, adjustWeight(), and checkState().
  - I thought I'd removed the portion in the Makefile that tweaks with
    /etc/httpd/conf/httpd.conf but it was still there when I looked.
    Removed it.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in Wensongs quiesce server patch for nanny
  - Updated the web interface to also know about the quiesce option


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a patch I got from pzb for to be a good deal more sensible
    about how we detect if we're using FOS mode or LVS mode other than looking
    for a start or stop script (shudder)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Finally someone spotted the reason why the children don't die
    much happiness spread by Sebastien <sebastien.bonnet@experian.fr>
  - Added in additional patch from Sebastien for bugzilla #57654
    which I think is also a solution for #15911


author: Philip Copeland <bryce@redhat.com>
changelog:
  - send_arp,c, changed the
    sock=socket(AF_INET,SOCK_RAW,htons(ETH_P_RARP));
    back to
    sock=socket(AF_INET,SOCK_PACKET,htons(ETH_P_RARP));
    as I got reports that this wasn't working.
    It will work fine, just there will be noise that it's
    an obsolete interface


author: Philip Copeland <bryce@redhat.com>
changelog:
  - pulled in Wensong's memory leak patchs
  - Dropped the shared scsi portion in the web interface
    Note: FOS will vanish in piranha 0.7.0's interface, in
    theory that functionality will be taken over by clumanager
    which is part of the advanced server offering.
    In the future clumanager/piranha will merge (so I'm told)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed up piranha-passwd (#60440)
  - Updated the LVS-HOWTO docs (#60204)
  - fixed the silly misname of a directory in the httpd.conf (#60529)


author: Lon Hohberger <lhh@redhat.com> 0.7.9-1
changelog:
  - Force sending of last heartbeat before shutdown of backup
  so that the master re-arps the VIPs (#134007)


author: Lon Hohberger <lhh@redhat.com> 0.8.0-1
changelog:
  - Build for RHCS-4
  - Lots of php warning cleanups
  - rename lvs to lvsd so as not to conflict with 'lvs' command


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.3-1
changelog:
  - Document send_program in lvs.cf manpage (bz190022)
  - Fix lvsd where it segfaults when nanny dies (bz176913)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-3
changelog:
  - Removed .htaccess file, as equal configuration 
     already in /etc/sysconfig/ha/conf/httpd.conf
  - Added logrotate conf file


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-4
changelog:
  - Removed /etc/sysconfig/ha/example_script, as equal example is
     already in /usr/share/doc/piranha/docs/script_templates/* 
  - Update apache's modules, use libphp5 (instead of libphp4)


author: Marek Grac <mgrac@redhat.com> 0.8.4-8
changelog:
  - Resolves: #243278 - Fixes wrong init scripts
  - Resolves: #249312 - VIP doesn't go down
  - Resolves: #245788 - send_arp & incorrectly-formed ARP
  - Resolves: #338101 - php errors in piranha-gui


author: Marek Grac <mgrac@redhata.com>
changelog:
  - Resolves: #446802 - segfault if syslog message is longer 
                        than 80 characters


author: Lon Hohberger <lhh@redhat.com> 0.8.4-11
changelog:
  - Resolves: #238498  - need fallback service
  - Resolves: #243908  - nanny blocks signals in child processes


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Marek Grac <mgrac@redhat.com> 0.8.5-6
changelog:
  - Resolves: #604741 - piranha does not work with SELinux
  - Resolves: #593730 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.5-8
changelog:
  - "service pulse reload" is resulting in lvsd segfaulting
    Resolves: rhbz#703146
  - a failure to start a single nanny kills off *all* running nannys
    Resolves: rhbz#593728


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-9
changelog:
  - Resolves: #628872 - init script searches cwd which can cause SELinux denials
  - Resolves: #706881 - killing nanny/lvsd process should cause pulse to exit
  - Resolves: #708036 - too many VIPs can causes HTTP 414 error
  - Resolves: #729828 - add CIDR /23 netmask to drop-down menus


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-13
changelog:
  - Resolves: #788541 - add option for sync daemon mcast interface
  - Resolves: #717556 - add option for sync daemon id


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.3
changelog:
  - Fix crasher in text plugin after password prompt (bug 526652)
  - Actually apply the patch mentioned in 2009.29.09.2


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.5
changelog:
  - Prevent firstboot's X from crashing on radeon hardware. This should
    only affect multihead users, but for some reason it's getting some
    single head users as well.


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.7
changelog:
  - Fix emergency shell horkage (bug 526597)
  - Fix problem with details splash not showing up (bug 527426, bug 527254)


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.19
changelog:
  - Force raw mode on every text draw.  This works around a bug where
    some program at startup is kicking the terminal out of raw mode.


author: Ray Strode <rstrode@redhat.com> 0.8.3-2
changelog:
  - Fix lock tty patch from 0.8.2-2 to properly unlock tty
    Resolves: #590774
  - Fix up pkgwrangler niggles
    Resolves: 592305


author: Ray Strode <rstrode@redhat.com> 0.8.3-8
changelog:
  - Use monospace font in plymouth log viewer
    Resolves: #596332
  - Add window icon in plymouth log viewer
    Resolves: #605626


author: Ray Strode <rstrode@redhat.com> 0.8.3-13
changelog:
  - Built details plugin into binary, so there's always
    some splash available (fixes crash for users with
    separate /usr hitting escape early in boot up)
    Resolves: #612569


author: Ray Strode <rstrode@redhat.com> 0.8.3-14
changelog:
  - Use dark gray instead of black background in rings theme
    to prevent monitor sync issues on some hardware.
    Resolves: #620414


author: Ray Strode <rstrode@redhat.com> 0.8.3-16
changelog:
  - Fix up problem introduced in previous patch when kernel
    command line has no consoles
    Related: #615912


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-27.1
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1125325


author: Jeremy Katz <katzj@redhat.com> - 0.09-1
changelog:
  - Remove button module on suspend
  - Set default kernel in grub to current one when hibernating 
    so that resume works


author: Phil Knirsch <pknirsch@redhat.com> - 0.10-1
changelog:
  - Added missing pciutils-devel BuildRequires (#182566) 
  - Fixed missing vbestata save/restore calls for video suspend/resume (#182167, 
    - Renamed hook scripts to allow local pre and post inserts (#179421)
  - Added support for blinking led lights on Thinkpad Laptops during suspend
    (#179420)
  - Added pm-powersave script for powersaving via HAL (#169054)
  - Added symlinks for pm-shutdown and pm-restart (#165953)


author: Jeremy Katz <katzj@redhat.com> - 0.11-1
changelog:
  - fix display on resume with nvidia graphics
  - add infrastructure to tell what pm-util is running; don't resume 
    video on return from hibernate as the BIOS has already re-initialized it


author: Phil Knirsch <pknirsch@redhat.com> - 0.13-1
changelog:
  - Revert last changes for ATI graphics chips as they seem to cause more
    problems than they solved.


author: Peter Jones <pjones@redhat.com> - 0.16-1
changelog:
  - rework the difference between hibernate and suspend; get rid of PM_MODE
  - add 00clear script
  - move default_resume_kernel from "functions" to 01grub's hibernate section


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - add more helper functions
  - rework things that were forking an extra subshell
  - fix the suspend lock
  - work around bluetooth/usb suspend wackiness


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - update from CVS
  - move pam and consolehelper stuff here.
  - move video hooks here since HAL isn't ready


author: Jeremy Katz <katzj@redhat.com> - 0.19-3
changelog:
  - doing the vbestate save/restore on intel video with the modesetting 
    intel xorg driver is broken.  so don't do it.


author: Peter Jones <pjones@redhat.com> - 0.19.1-1
changelog:
  - Hopefully fix Centrino ThinkPad suspend+resume
  - Hopefully fix Intel Mac Mini/MacBook suspend+resume


author: Peter Jones <pjones@redhat.com> - 0.19.1-3
changelog:
  - Disable bluetooth suspend/reusme hook by default; the kernel modules seem
    to support this correctly these days.


author: Phil Knirsch <pknirsch@redhat.com> - 0.19.1-4
changelog:
  - Start/stop correct services in 10NetworkManager hook (#215253)
  - Fixed check for /sys/power/disk and /sys/power/state (#214407)
  - Added proper error messages in case /sys/power/disk or /sys/power/state are
    missing (#215386)
  - Removed service calls and module load/unload for bluetooth hook (#213387)
  - Added hook file to restore the sysfont after resume (#215391)
  - Added the possibility to disable hibernate and suspend completely via the
    config file (#216459)
  - Symlinked the config file to /etc/sysconfig/power-management (#216459)
  - Fixed pm-powersave permission check bug (#222819)
  - Small specfile cleanups


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6
changelog:
  - Fixed missing builds for vbetool and radeontool for some archs (#241469)
  - Fixed typo in functions where wrong variable was used (#241633)


author: Adam Jackson <ajax@redhat.com> 0.99.3-11
changelog:
  - Install (not just build) vbetool and radeontool on x86_64 too
  - Explicitly list files under %_sbindir, so they don't drop away again
  - Light spec cleanups


author: Till Maas <opensource till name> - 0.99.3-12
changelog:
  - Adjust %files to own /etc/pm/ and /usr/lib/pm-utils/ (#233906)
  - remove (C|CXX|F)FLAGS definitions, they are already in %configure
  - remove Core in Summary tag
  - add URL for pm-utils
  - add %{?arm} to ExclusiveArch (#245463)
  - remove vbetool and require it (it is a separate package now)
  - remove radeontool and require it (it is a separate package now)
  - Update License Tag
  - cleanup buildrequires
  - clear %setup


author: Peter Jones <pjones@redhat.com> - 0.99.4-1
changelog:
  - Merge new upstream
  - remove pm/power.d/laptop-tools
  - add --quirk-reset-brightness (needed for the Fujitsu Lifebook S7110)


author: Till Maas <opensource till name> - 0.99.4-3
changelog:
  - remove unused patch (vidhooks)
  - add patch to keep logfile (RH #237840 (f7), #238068 (devel)), 
    to keep selinux context
  - simplify spec
  - restore selinux context of logfile in %post 
  - use rpmmacros more often


author: Till Maas <opensource till name> - 0.99.4-10
changelog:
  - enhance hd-apm-restore and add a config file
  - fix source-definition for hd-apm-restore
  - add hook suffix for hook script


author: Till Maas <opensource till name> - 0.99.4-12
changelog:
  - remove ExclusiveArch, because it contains all supported archs
    (in case an arch schould be excluded, please use ExcludeArch)
  - improve readability of usermode setup
  - remove pm-restart pm-shutdown from usermode setup, because
    there are no such binaries
  - list more files in %files explicit to make it obvious when
    there are changes in the distributed package
  - add .conf suffix to oldconfig files


author: Till Maas <opensource till name> - 0.99.4-14
changelog:
  - add pm-utils-bugreport-info.sh script to collect information for bugreports
  - require Hal (RH #428452)


author: Till Maas <opensource till name> - 1.1.0-5
changelog:
  - remove double %dir %{_libdir}/pm-utils
  - update pm-utils-99hd-apm-restore to work with current pm-utils release
    Red Hat Bugzilla: #442294
  - move config file for hd apm restore away from config.d, which is only used
    for pm-utils internal config anymore
  - own /var/run/pm-utils/ and create storage/locks subdirs (may be
    needed for selinux)
  - make sure an empty logfile is created after install (touch -a ...)
  - sort %files
  - make Source0: an URL
  - remove Conflicts: bluez utils, all supported Fedora releases ship
    already a newer version
  - remove unused BR: hal-devel, dbus-devel, pkgconfig, docbook-utils


author: Richard Hughes <rhughes@redhat.com> - 1.1.0-8
changelog:
  - Rip out all the consolehelper and PAM stuff - users are not meant to be
    running these tools directly and it's a massive change from upstream.


author: Till Maas <opensource@till.name> - 1.1.2.2-2
changelog:
  - %pre and %post scriptlets should not be needed anymore, old
    config files should be already moved in every supported release
    and the selinux context for the logfile should be restored by
    rpm
  - remove pcitulils BR, it was needed for vbetool, which is in a
    separate package now
  - substitute %{__rm} macros for uniform macro usage


author: Richard Hughes <rhughes@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - The core hook-running machinery will now abort running hooks of one fails,
    and the front-end scripts will return a failure error code if hook-running
    was aborted.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2.1-1
changelog:
  - Update to 1.2.2.1
  - Supports automatically pulling quirks from HAL and has the ability to save
    the last working set of quirks to an .fdi file.


author: Richard Hughes <rhughes@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fixes a glitch in module unloading
  - Numerous small usability and debugging improvements


author: Richard Hughes <rhughes@redhat.com> - 1.2.5-1
changelog:
  - New upstream version
  - If running on a system that is using KMS, we will refuse to handle any video
    quirks passed to us by HAL, and we will not chvt to an empty console.
  - Fix a longstanding bug in tuning scheduler powersaving knobs on SMT systems.


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-x86_64
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Change to "License: GPL or artistic" from "Copyright: distributable"
  - Fix man page (#35825)
  - 3.15.1
  - redo config patch


author: Trond Eivind Glomsrød <teg@redhat.com> 3.22-4
changelog:
  - Add Telsa Gwynne's procmailrc as a doc file - it's
    excellently commented, and is a great example


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's 
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't 
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps 
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than 
    having them silently fall out of the package


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-3
changelog:
  - replace usage of %define with %global
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - split up the "configure" invocation flags onto individual lines
  - move lib2to3 from -tools subpackage to main package (bug 556667)
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - fix Lib/SocketServer.py to avoid trying to use non-existant keyword args
  for os.waitpid (patch 53, rhbz:552404, Adrian Reber)
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - delete bundled copies of libffi and zlib to make sure we use the system ones
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-4
changelog:
  - introduce %{with_valgrind} macro, to only use the valgrind patch on archs
  where valgrind-devel is available


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-5
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation (patch 3)
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-6
changelog:
  - add gdb hooks for easier debugging (rhbz:569696)
  - supply fourth parameter (default permissions) in all usage of "defattr" in
  subpackage manifests
  - remove trailing periods from package "Summary" fields
  - fix typo in the description of the "test" subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-8
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 113)
  - CVE-2010-2089: further checks within the audioop module (patch 114)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 115)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-9
changelog:
  - cherrypick upstream fix for fatal error creating threads when memory is
  low (patch 116)
  Resolves: rhbz#598564


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-10
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 117)
  Resolves: rhbz#583931


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-11
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 118, upstream issue 9058)
  Resolves: rhbz#540518


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - 2.6.5
  - remove upstream patch 53
  - fixup selinux patch to apply cleanly against 2.6.5 (patch 110)
  Resolves: rhbz#611607
  - remove commented-out, out-of-date patches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-2
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib
  Resolves: rhbz#563986
  - don't build the _md5 and _sha* modules: rely on _hashlib in hashlib


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-1
changelog:
  - rebase to 2.6.6: (which contains the big whitespace cleanup of r81031)
    http://www.python.org/download/releases/2.6.6/
    - fixup patch 102, patch 11, patch 52, patch 110
    - drop upstreamed patches: patch 113 (CVE-2010-1634), patch 114
    (CVE-2010-2089), patch 115 (CVE-2008-5983), patch 116 (rhbz598564),
    patch 118 (rhbz540518)
    - add fix for upstream bug in test_posix.py introduced in 2.6.6 (patch 120)
  Resolves: rhbz#627301


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-2
changelog:
  - fix dbm.release on ppc64/s390x
  Resolves: rhbz#626756
  - fix missing lib2to3 test files
  Resolves: rhbz#625395
  - fix test.test_commands SELinux incompatibility
  Resolves: rhbz#625393
  - make "pydoc -k" more robust in the face of broken modules
  Resolves: rhbz#603073


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-3
changelog:
  - use an ephemeral port for IDLE, enabling multiple instances to be run
  Resolves: rhbz#639222
  - add systemtap static markers, tapsets, and example scripts
  Resolves: rhbz#569695


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-4
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#650588


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-5
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#637895
  - make garbage-collection assertion failures more informative (patch 129)
  Resolves: rhbz#614680


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-6
changelog:
  - prevent _sqlite3.so being built with a redundant RPATH of _libdir (patch 130)
  - remove DOS batch file "idle.bat"
  - remove shebang lines from .py files that aren't executable, and remove
  executability from .py files that don't have a shebang line
  Related: rhbz#634944
  - add "Obsoletes: python-ssl" to core package, as 2.6 contains the ssl module
  Resolves: rhbz#529274


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-11
changelog:
  - fix incompatibility between 2.6.6 and our non-standard M2Crypto.SSL.SSLTimeoutError
  Resolves: rhbz#681811


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-21
changelog:
  - backport fix for occasional failures in multiprocessing's Process.start()
  Resolves: rhbz#685234
  - port multiprocessing to use the "poll" syscall, rather than "select"
  Resolves: rhbz#713082
  - backport fix allowing getpass.getpass() to be interrupted with Ctrl-C
  or Ctrl-Z
  Resolves: rhbz#689794
  - backport memory leak fixes for the readline module
  Resolves: rhbz#699740


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-22
changelog:
  - backport fix for failures seen with subprocess module when supplying stdin
  to short-lived subprocesses
  Resolves: rhbz#667431


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-23
changelog:
  - update gdb debug hooks, showing when a thread is waiting on the GIL, calls
  to C functions and methods, and garbage collections.  Also, better handle the
  case when "f" is optimized out within PyEval_EvalFrameEx, to at least give
  file and function name, even if the line number and locals won't be available
  Resolves: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-24
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures
  Resolves: rhbz#697470


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-27
changelog:
  - update "py-bt" in gdb debug hooks to avoiding printing stray <function>
  frames on non-C functions
  Related: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-28
changelog:
  - avoid truncating the compilation flags of extension modules that have CFLAGS
  set in their environment
  Resolves: rhbz#727364


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29
changelog:
  - protect GIL detection within gdb debug hooks against C stack frames that
  lack a name (source 1)
  Related: rhbz#711818
  Resolves: rhbz#736085


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-30
changelog:
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-31
changelog:
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-34
changelog:
  - add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
  vanilla build of expat is present in LD_LIBRARY_PATH
  Resolves: rhbz#833271


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-35
changelog:
  - add -DNDEBUG to OPT during the build, disabling C-level assertions
  Resolves: rhbz#810847
  Resolves: rhbz#841748
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when
  embedding Python within httpd
  Resolves: rhbz#814391
  - avoid infinite loop in logging.handlers.SysLogHandler with eventlet when
  the syslog daemon is stopped
  Resolves: rhbz#835460


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-36
changelog:
  - disable patch 110 (python-2.6.5-ctypes-noexecmem.patch)
  Related: rhbz#707944
  - disable patch 129 (python-2.6.6-gc-assertions.patch) now that we're
  building with -DNDEBUG
  Related: rhbz#810847
  Related: rhbz#841748
  Related: rhbz#614680


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-38
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries
  - preserve timestamps when fixing shebangs (patch 158) and when installing,
  to minimize .pyc/.pyo differences across architectures (due to the embedded
  mtime in .pyc/.pyo headers)
  - fix multilib issue in /usr/bin/modulator and /usr/bin/pynche
  Related: rhbz#958256


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-39
changelog:
  - Remove BOM insertion code from SysLogHandler that causes messages to be
  treated as EMERG level
  Resolves: rhbz#845802


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.4.el6
changelog:
  - kvm-virtio-Remove-duplicate-macro-definition-for-max.-vi.patch [bz#543825]
  - kvm-virtio-console-qdev-conversion-new-virtio-serial-bus.patch [bz#543825]
  - kvm-virtio-serial-bus-Maintain-guest-and-host-port-open-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-a-port-name-property-for-port-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-support-for-buffering-guest-ou.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-ability-to-hot-unplug-ports.patch [bz#543825]
  - kvm-virtio-serial-Add-a-virtserialport-device-for-generi.patch [bz#543825]
  - kvm-Move-virtio-serial-to-Makefile.hw.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.5.el6
changelog:
  - Remove unneeded/unsupported features: [bz#555336]
    - make default options explicit
    - remove sdl support
    - remove sb16 emulation
    - remove oss support
    - remove curses support
    - disable curl support
    - disable bluez support
    - enable -Werror
    - limit block drivers support
    - add host_cdrom block device
  - Resolves: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.9.el6
changelog:
  - Disable -Werror again, as there are still warnings on the build
  - Related: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.11.el6
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#556459]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#556459]
  - kvm-qemu-img-rebase.patch [bz#556459]
  - Resolves: bz#556459
    (RFE - In-place backing file format change)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.12.el6
changelog:
  - kvm-virtio-serial-bus-Remove-guest-buffer-caching-and-th.patch [bz#543825]
  - kvm-virtio-serial-Make-sure-we-don-t-crash-when-host-por.patch [bz#543825]
  - kvm-virtio-serial-Use-MSI-vectors-for-port-virtqueues.patch [bz#543825]
  - kvm-virtio-serial-bus-Match-upstream-whitespace.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.13.el6
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#557435]
  - kvm-Add-missing-newline-at-the-end-of-options-list.patch [bz#558412]
  - kvm-vnc-Fix-artifacts-in-hextile-decoding.patch [bz#558414]
  - kvm-QMP-Drop-wrong-assert.patch [bz#558415]
  - kvm-vmware_vga-Check-cursor-dimensions-passed-from-guest.patch [bz#558435]
  - kvm-virtio-pci-thinko-fix.patch [bz#558438]
  - kvm-QMP-Don-t-free-async-event-s-data.patch [bz#558465]
  - kvm-vnc_refresh-return-if-vd-timer-is-NULL.patch [bz#558466]
  - kvm-osdep.c-Fix-accept4-fallback.patch [bz#558477]
  - kvm-QMP-Emit-asynchronous-events-on-all-QMP-monitors.patch [bz#558619]
  - kvm-vnc_refresh-calling-vnc_update_client-might-free-vs.patch [bz#558846]
  - Resolves: bz#557435
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#558412
    (-help output not terminated by newline)
  - Resolves: bz#558414
    (Artifacts in hextile decoding)
  - Resolves: bz#558415
    (Assert triggers on qmp commands returning lists)
  - Resolves: bz#558435
    (vmware-svga buffer overflow copying cursor data)
  - Resolves: bz#558438
    (virtio status bits corrupted if guest deasserts bus mastering bit)
  - Resolves: bz#558465
    (Double-free of qmp async messages)
  - Resolves: bz#558466
    (Possible segfault on vnc client disconnect)
  - Resolves: bz#558477
    (Incorrect handling of EINVAL from accept4())
  - Resolves: bz#558619
    (QMP: Emit asynchronous events on all QMP monitors)
  - Resolves: bz#558846
    (fix use-after-free in vnc code)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.14.el6
changelog:
  - kvm-MCE-Fix-bug-of-IA32_MCG_STATUS-after-system-reset.patch [bz#558416]
  - kvm-Fix-CPU-topology-initialization.patch [bz#558432]
  - kvm-loader-more-ignores-for-rom-intended-to-be-loaded-by.patch [bz#558467]
  - kvm-pc-add-machine-type-for-0.12.patch [bz#558470]
  - kvm-virtio-console-Rename-virtio-serial.c-back-to-virtio.patch [bz#559089]
  - kvm-virtio-serial-bus-Fix-bus-initialisation-and-allow-f.patch [bz#559503]
  - Resolves: bz#558416
    (Machine check exception injected into qemu reinjected after every reset)
  - Resolves: bz#558432
    (CPU topology not taking effect)
  - Resolves: bz#558467
    (roms potentially loaded twice)
  - Resolves: bz#558470
    (Incorrect machine types)
  - Resolves: bz#559089
    (Rename virtio-serial.c to virtio-console.c as is upstream.)
  - Resolves: bz#559503
    (virtio-serial: fix multiple devices intialisation)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.15.el6
changelog:
  - kvm-VNC-Use-enabled-key-instead-of-status.patch [bz#549759]
  - kvm-VNC-Make-auth-key-mandatory.patch [bz#549759]
  - kvm-VNC-Rename-client-s-username-key.patch [bz#549759]
  - kvm-VNC-Add-family-key.patch [bz#549759]
  - kvm-VNC-Cache-client-info-at-connection-time.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_CONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_DISCONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_INITIALIZED-event.patch [bz#549759]
  - kvm-block-avoid-creating-too-large-iovecs-in-multiwrite_.patch [bz#558730]
  - Resolves: bz#549759
    (A QMP event notification on VNC client connect/disconnect events)
  - Resolves: bz#558730
    (qemu may create too large iovecs for the kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.17.el6
changelog:
  - kvm-Fix-QEMU_WARN_UNUSED_RESULT.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#560623]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#560623]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#560623]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#560623]
  - kvm-net-Make-inet_strfamily-public.patch [bz#562181]
  - kvm-net-inet_strfamily-Better-unknown-family-report.patch [bz#562181]
  - kvm-vnc-Use-inet_strfamily.patch [bz#562181]
  - Resolves: bz#560623
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))
  - Resolves: bz#562181
    (Small VNC related cleanup)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.18.el6
changelog:
  - kvm-roms-minor-fixes-and-cleanups.patch [bz#558818]
  - kvm-fw_cfg-rom-loader-tweaks.patch [bz#558818]
  - kvm-roms-rework-rom-loading-via-fw.patch [bz#558818]
  - kvm-pci-allow-loading-roms-via-fw_cfg.patch [bz#558818]
  - kvm-pc-add-rombar-to-compat-properties-for-pc-0.10-and-p.patch [bz#558818]
  - Resolves: bz#558818
    (rom loading)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.19.el6
changelog:
  - kvm-virtio_blk-Factor-virtio_blk_handle_request-out.patch [bz#560942]
  - kvm-virtio-blk-Fix-restart-after-read-error.patch [bz#560942]
  - kvm-virtio-blk-Fix-error-cases-which-ignored-rerror-werr.patch [bz#560942]
  - Resolves: bz#560942
    (virtio-blk error handling doesn't work reliably)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.20.el6
changelog:
  - kvm-QMP-Add-QEMU-s-version-to-the-greeting-message.patch [bz#557930]
  - kvm-QMP-Introduce-the-qmp_capabilities-command.patch [bz#557930]
  - kvm-QMP-Enforce-capability-negotiation-rules.patch [bz#557930]
  - kvm-QMP-spec-Capability-negotiation-updates.patch [bz#557930]
  - kvm-json-escape-u0000-.-u001F-when-outputting-json.patch [bz#559667]
  - kvm-json-fix-PRId64-on-Win32.patch [bz#563878]
  - kvm-qjson-Improve-debugging.patch [bz#563875]
  - kvm-Monitor-remove-unneeded-checks.patch [bz#563876]
  - kvm-QError-Don-t-abort-on-multiple-faults.patch [bz#559635]
  - kvm-QMP-Don-t-leak-on-connection-close.patch [bz#559645]
  - kvm-QMP-Emit-Basic-events.patch [bz#558623]
  - Resolves: bz#557930
    (QMP: Feature Negotiation support)
  - Resolves: bz#558623
    (QMP: Basic async events are not emitted)
  - Resolves: bz#559635
    (QMP: assertion on multiple faults)
  - Resolves: bz#559645
    (QMP: leak when a QMP connection is closed)
  - Resolves: bz#559667
    (QMP: JSON parser doesn't escape some control chars)
  - Resolves: bz#563875
    (QJSON: Improve debugging)
  - Resolves: bz#563876
    (Monitor: remove unneeded checks)
  - Resolves: bz#563878
    (QJSON: Fix PRId64 handling)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.21.el6
changelog:
  - kvm-net-add-API-to-disable-enable-polling.patch [bz#562958]
  - kvm-virtio-rename-features-guest_features.patch [bz#562958]
  - kvm-qdev-add-bit-property-type.patch [bz#562958]
  - kvm-qdev-fix-thinko-leading-to-guest-crashes.patch [bz#562958]
  - kvm-virtio-add-features-as-qdev-properties-fixup.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.22.el6
changelog:
  - kvm-QMP-BLOCK_IO_ERROR-event-handling.patch [bz#547501]
  - kvm-block-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-ide-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-scsi-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-virtio-blk-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-add-rhel-machine-types.patch [bz#558838]
  - kvm-QMP-Fix-query-balloon-key-change.patch [bz#568739]
  - Resolves: bz#547501
    (RFE: a QMP event notification for disk  I/O errors with werror/rerror flags)
  - Resolves: bz#558838
    (add rhel machine types)
  - Resolves: bz#568739
    (QMP: Fix 'query-balloon' key)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.23.el6
changelog:
  - kvm-ide-device-version-property.patch [bz#558835]
  - kvm-pc-add-driver-version-compat-properties.patch [bz#558835]
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#567602]
  - Resolves: bz#558835
    (ide/scsi drive versions)
  - Resolves: bz#567602
    (qemu-img rebase subcommand got Segmentation fault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.24.el6
changelog:
  - kvm-path.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-hw-pc.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-slirp-misc.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-savevm.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-bochs.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-Introduce-qemu_write_full.patch [bz#567099]
  - kvm-force-to-test-result-for-qemu_write_full.patch [bz#567099]
  - kvm-block-cow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vmdk.o-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vvfat.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow2.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-net-slirp.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-usb-linux.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-vl.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-monitor.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-linux-user-mmap.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-check-pipe-return-value.patch [bz#567099]
  - kvm-fix-qemu-kvm-_FORTIFY_SOURCE-compilation.patch [bz#567099]
  - kvm-Enable-_FORTIFY_SOURCE-2.patch [bz#567099]
  - kvm-qcow2-Fix-image-creation-regression.patch [bz#567099]
  - kvm-cow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-slirp-check-system-success.patch [bz#567099]
  - kvm-qcow2-return-errno-instead-of-1.patch [bz#567099]
  - kvm-qcow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-make-vmdk_snapshot_create-return-errno.patch [bz#567099]
  - kvm-vmdk-fix-double-free.patch [bz#567099]
  - kvm-vmdk-share-cleanup-code.patch [bz#567099]
  - kvm-block-print-errno-on-error.patch [bz#567099]
  - kvm-documentation-qemu_write_full-don-t-work-with-non-bl.patch [bz#567099]
  - kvm-virtio-serial-pci-Allow-MSI-to-be-disabled.patch [bz#567035]
  - kvm-pc-Add-backward-compatibility-options-for-virtio-ser.patch [bz#567035]
  - kvm-virtio-serial-don-t-set-MULTIPORT-for-1-port-dev.patch [bz#567035]
  - kvm-qdev-Add-a-DEV_NVECTORS_UNSPECIFIED-enum-for-unspeci.patch [bz#567035]
  - kvm-virtio-pci-Use-DEV_NVECTORS_UNSPECIFIED-instead-of-1.patch [bz#567035]
  - kvm-kbd-leds-infrastructure.patch [bz#569767]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#569767]
  - kvm-kbd-leds-usb-kbd.patch [bz#569767]
  - kvm-kbd-keds-vnc.patch [bz#569767]
  - kvm-migration-Clear-fd-also-in-error-cases.patch [bz#570174]
  - Resolves: bz#567035
    (Backport changes for virtio-serial from upstream: disabling MSI, backward compat.)
  - Resolves: bz#567099
    (Allow _FORTIFY_SOURCE=2 & --enable-warning)
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.25.el6
changelog:
  - kvm-qemu-memory-notifiers.patch [bz#562958]
  - kvm-tap-add-interface-to-get-device-fd.patch [bz#562958]
  - kvm-add-API-to-set-ioeventfd.patch [bz#562958]
  - kvm-notifier-event-notifier-implementation.patch [bz#562958]
  - kvm-virtio-add-notifier-support.patch [bz#562958]
  - kvm-virtio-add-APIs-for-queue-fields.patch [bz#562958]
  - kvm-virtio-add-set_status-callback.patch [bz#562958]
  - kvm-virtio-move-typedef-to-qemu-common.patch [bz#562958]
  - kvm-virtio-pci-fill-in-notifier-support.patch [bz#562958]
  - kvm-vhost-vhost-net-support.patch [bz#562958]
  - kvm-tap-add-vhost-vhostfd-options.patch [bz#562958]
  - kvm-tap-add-API-to-retrieve-vhost-net-header.patch [bz#562958]
  - kvm-virtio-net-vhost-net-support.patch [bz#562958]
  - kvm-qemu-kvm-add-vhost.h-header.patch [bz#562958]
  - kvm-irqfd-support.patch [bz#562958]
  - kvm-msix-add-mask-unmask-notifiers.patch [bz#562958]
  - kvm-virtio-pci-irqfd-support.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.26.el6
changelog:
  - kvm-add-spice-into-the-configure-file.patch [bz#549757]
  - kvm-spice-core-bits.patch [bz#549757]
  - kvm-spice-add-keyboard.patch [bz#549757]
  - kvm-spice-add-mouse.patch [bz#549757]
  - kvm-spice-simple-display.patch [bz#549757]
  - kvm-move-x509-file-name-defines-to-qemu-x509.h.patch [bz#549757]
  - kvm-spice-tls-support.patch [bz#549757]
  - kvm-spice-configure-listening-addr.patch [bz#549757]
  - kvm-spice-add-qxl-device.patch [bz#549757]
  - Resolves: bz#549757
    (Provide SPICE support  / -spice command line argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.27.el6
changelog:
  - kvm-spice-add-tablet.patch [bz#574211]
  - kvm-spice-simple-display-wake-spice-server-only-when-idl.patch [bz#574212]
  - kvm-spice-qxl-switch-back-to-vga-mode-on-register-access.patch [bz#574214]
  - kvm-spice-qxl-ring-access-security-fix.patch [bz#568820]
  - kvm-vnc-support-password-expire.patch [bz#525935]
  - kvm-spice-vnc-add-__com.redhat_set_password-monitor-comm.patch [bz#525935]
  - kvm-spice-add-audio-support.patch [bz#574222]
  - kvm-spice-make-image-compression-configurable.patch [bz#574225]
  - kvm-spice-configure-channel-security.patch [bz#574225]
  - kvm-spice-configure-renderer.patch [bz#574225]
  - kvm-spice-send-connect-disconnect-monitor-events.patch [bz#558957]
  - kvm-spice-qxl-update-vga-help-text-indicating-qxl-is-the.patch [bz#574853]
  - kvm-spice-notifying-spice-when-migration-starts-and-ends.patch [bz#574849]
  - kvm-spice-add-__com.redhat_spice_migrate_info-monitor-co.patch [bz#574849]
  - Resolves: bz#525935
    (RFE: expire vnc password)
  - Resolves: bz#558957
    (A QMP event notification on SPICE client connect/disconnect events)
  - Resolves: bz#568820
    (EMBARGOED CVE-2010-0431 qemu: Insufficient guest provided pointers validation [rhel-6.0])
  - Resolves: bz#574211
    (spice: add tablet support)
  - Resolves: bz#574212
    (spice:wake spice server only when idle)
  - Resolves: bz#574214
    (qxl: switch qxl from native into vga mode on vga register access)
  - Resolves: bz#574222
    (spice: add audio support)
  - Resolves: bz#574225
    (spice: add config options)
  - Resolves: bz#574849
    (spice: client migration support)
  - Resolves: bz#574853
    (spice/qxl: add qxl to -vga help text)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.28.el6
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#567940]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#567940]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#567940]
  - kvm-spice-virtual-machine-channel-replacement-for-remove.patch [bz#576488]
  - Resolves: bz#567940
    (qcow2 corruption with I/O error during refcount block allocation)
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.29.el6
changelog:
  - kvm-scsi-device-version-property.patch [bz#558835]
  - kvm-scsi-disk-fix-buffer-overflow.patch [bz#558835]
  - Resolves: bz#558835
    (ide/scsi drive versions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.30.el6
changelog:
  - kvm-New-API-for-asynchronous-monitor-commands.patch [bz#574939]
  - kvm-Revert-QMP-Fix-query-balloon-key-change.patch [bz#574939]
  - kvm-virtio-Add-memory-statistics-reporting-to-the-balloo.patch [bz#574939]
  - Resolves: bz#574939
    (Memory statistics support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.31.el6
changelog:
  - kvm-Transparent-Hugepage-Support-3.patch [bz#574525]
  - kvm-monitor-Don-t-check-for-mon_get_cpu-failure.patch [bz#574642]
  - kvm-QError-New-QERR_OPEN_FILE_FAILED.patch [bz#574642]
  - kvm-monitor-convert-do_memory_save-to-QError.patch [bz#574642]
  - kvm-monitor-convert-do_physical_memory_save-to-QError.patch [bz#574642]
  - kvm-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#574642]
  - kvm-monitor-convert-do_cpu_set-to-QObject-QError.patch [bz#574642]
  - kvm-monitor-Use-QERR_INVALID_PARAMETER-instead-of-QERR_I.patch [bz#575800]
  - kvm-Revert-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#575800]
  - kvm-json-parser-Fix-segfault-on-malformed-input.patch [bz#575800]
  - kvm-fix-i-format-handling-in-memory-dump.patch [bz#575800]
  - kvm-Don-t-set-default-monitor-when-there-is-a-mux-ed-one.patch [bz#575800]
  - kvm-monitor-Document-argument-type-M.patch [bz#575821]
  - kvm-QDict-New-qdict_get_double.patch [bz#575821]
  - kvm-monitor-New-argument-type-b.patch [bz#575821]
  - kvm-monitor-Use-argument-type-b-for-migrate_set_speed.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_speed-to-QObject.patch [bz#575821]
  - kvm-monitor-New-argument-type-T.patch [bz#575821]
  - kvm-monitor-Use-argument-type-T-for-migrate_set_downtime.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_downtime-to-QObject.patch [bz#575821]
  - kvm-block-Emit-BLOCK_IO_ERROR-before-vm_stop-call.patch [bz#575912]
  - kvm-QMP-Move-STOP-event-into-do_vm_stop.patch [bz#575912]
  - kvm-QMP-Move-RESET-event-into-qemu_system_reset.patch [bz#575912]
  - kvm-QMP-Sync-with-upstream-event-changes.patch [bz#575912]
  - kvm-QMP-Drop-DEBUG-event.patch [bz#575912]
  - kvm-QMP-Revamp-the-qmp-events.txt-file.patch [bz#575912]
  - kvm-QMP-Introduce-RTC_CHANGE-event.patch [bz#547534]
  - kvm-QMP-Introduce-WATCHDOG-event.patch [bz#557083]
  - kvm-spice-add-more-config-options.patch [bz#576561]
  - Resolves: bz#547534
    (RFE: a QMP event notification for RTC clock changes)
  - Resolves: bz#557083
    (QMP events for watchdog events)
  - Resolves: bz#574525
    (Align qemu-kvm guest memory for transparent hugepage support)
  - Resolves: bz#574642
    (QMP: Convert do_cpu_set() to QObject)
  - Resolves: bz#575800
    (Monitor: Backport a collection of fixes)
  - Resolves: bz#575821
    (QMP: Convert migrate_set_speed, migrate_set_downtime to QObject)
  - Resolves: bz#575912
    (QMP: Backport event related fixes)
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.32.el6
changelog:
  - kvm-Revert-spice-add-more-config-options.patch [bz#576561]
    (need to wait for spice patches to be included on spice-server)
  - Related: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.33.el6
changelog:
  - kvm-Fix-kvm_load_mpstate-for-vcpu-hot-add.patch [bz#569613]
  - kvm-qemu-kvm-enable-get-set-vcpu-events-on-reset-and-mig.patch [bz#569613]
  - kvm-Synchronize-kvm-headers.patch [bz#569613]
  - kvm-Increase-VNC_MAX_WIDTH.patch [bz#569613]
  - kvm-device-assignment-default-requires-IOMMU.patch [bz#569613]
  - kvm-Do-not-allow-vcpu-stop-with-in-progress-PIO.patch [bz#569613]
  - kvm-fix-savevm-command-without-id-or-tag.patch [bz#569613]
  - kvm-Do-not-ignore-error-if-open-file-failed-serial-dev-t.patch [bz#569613]
  - kvm-segfault-due-to-buffer-overrun-in-usb-serial.patch [bz#569613]
  - kvm-fix-inet_parse-typo.patch [bz#569613]
  - kvm-virtio-net-fix-network-stall-under-load.patch [bz#569613]
  - kvm-don-t-dereference-NULL-after-failed-strdup.patch [bz#569613]
  - kvm-net-Remove-unused-net_client_uninit.patch [bz#569613]
  - kvm-net-net_check_clients-runs-too-early-to-see-device-f.patch [bz#569613]
  - kvm-net-Fix-bogus-Warning-vlan-0-with-no-nics-with-devic.patch [bz#569613]
  - kvm-net-net_check_clients-checks-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-info-network-shows-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-Monitor-command-set_link-finds-only-VLAN-clients.patch [bz#569613]
  - kvm-ide-save-restore-pio-atapi-cmd-transfer-fields-and-i.patch [bz#569613]
  - kvm-cirrus-Properly-re-register-cirrus_linear_io_addr-on.patch [bz#569613]
  - Related: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.34.el6
changelog:
  - kvm-Monitor-Introduce-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-simple-handlers-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cont-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_eject-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cpu_set-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_block_set_passwd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_getfd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_closefd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_add-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_remove-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_memory_save-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_physical_memory_save-to-cmd_new_r.patch [bz#563491]
  - kvm-Monitor-Convert-do_info-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_change-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-to-mon_set_password-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-mon_spice_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Rename-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Debugging-support.patch [bz#563491]
  - kvm-Monitor-Drop-the-print-disabling-mechanism.patch [bz#563491]
  - kvm-Monitor-Audit-handler-return.patch [bz#563491]
  - kvm-Monitor-Debug-stray-prints-the-right-way.patch [bz#563491]
  - kvm-Monitor-Report-more-than-one-error-in-handlers.patch [bz#563491]
  - Resolves: bz#563491
    (QMP: New internal error handling mechanism)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.35.el6
changelog:
  - kvm-QError-New-QERR_DEVICE_NOT_ENCRYPTED.patch [bz#563641]
  - kvm-Wrong-error-message-in-block_passwd-command.patch [bz#563641]
  - kvm-Monitor-Introduce-RFQDN_REDHAT-and-use-it.patch [bz#578493]
  - kvm-QMP-Fix-Spice-event-names.patch [bz#578493]
  - Resolves: bz#563641
    (QMP: Wrong error message in block_passwd command)
  - Resolves: bz#578493
    (QMP: Fix spice event names)
  - ksm.init: touch max_kernel_pages only if it exists [bz#561907]
  - Resolves: bz#561907
  - ksmtuned: add debug information [bz#576789]
  - Resolves: bz#576789


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.36.el6
changelog:
  - kvm-char-Remove-redundant-qemu_chr_generic_open-call.patch [bz#558236]
  - kvm-add-close-callback-for-tty-based-char-device.patch [bz#558236]
  - kvm-Restore-terminal-attributes-for-tty-based-monitor.patch [bz#558236]
  - kvm-Restore-terminal-monitor-attributes-addition.patch [bz#558236]
  - Resolves: bz#558236
    (qemu-kvm monitor corrupts tty on exit)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.37.el6
changelog:
  - kvm-balloon-Fix-overflow-when-reporting-actual-memory-si.patch [bz#578912]
  - kvm-json-parser-Output-the-content-of-invalid-keyword.patch [bz#576544]
  - Resolves: bz#576544
    (Error message doesn't contain the content of invalid keyword)
  - Resolves: bz#578912
    (Monitor: Overflow in 'info balloon')


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.38.el6
changelog:
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#537164]
  - kvm-read-only-BDRV_O_FLAGS-cleanup.patch [bz#537164]
  - kvm-read-only-Added-drives-readonly-option.patch [bz#537164]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#537164]
  - kvm-read-only-No-need-anymoe-for-bdrv_set_read_only.patch [bz#537164]
  - kvm-read_only-Ask-for-read-write-permissions-when-openin.patch [bz#537164]
  - kvm-read-only-Read-only-device-changed-to-opens-it-s-fil.patch [bz#537164]
  - kvm-read-only-qemu-img-Fix-qemu-img-can-t-create-qcow-im.patch [bz#537164]
  - kvm-block-clean-up-bdrv_open2-structure-a-bit.patch [bz#537164]
  - kvm-block-saner-flags-filtering-in-bdrv_open2.patch [bz#537164]
  - kvm-block-flush-backing_hd-in-the-right-place.patch [bz#537164]
  - kvm-block-fix-cache-flushing-in-bdrv_commit.patch [bz#537164]
  - kvm-block-more-read-only-changes-related-to-backing-file.patch [bz#537164]
  - kvm-read-only-minor-cleanup.patch [bz#537164]
  - kvm-read-only-Another-minor-cleanup.patch [bz#537164]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#537164]
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#580028]
  - kvm-qemu-io-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-nbd-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-img-Fix-error-message.patch [bz#579974]
  - kvm-Replace-calls-of-old-bdrv_open.patch [bz#579974]
  - Resolves: bz#537164
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#579974
    (Get segmentation fault when creating qcow2 format image on block device with "preallocation=metadata")
  - Resolves: bz#580028
    ('qemu-img re-base' broken on block devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.39.el6
changelog:
  - kvm-virtio-blk-revert-serial-number-support.patch [bz#564101]
  - kvm-block-add-topology-qdev-properties.patch [bz#564101]
  - kvm-virtio-blk-add-topology-support.patch [bz#564101]
  - kvm-scsi-add-topology-support.patch [bz#564101]
  - kvm-ide-add-topology-support.patch [bz#564101]
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#580140]
  - Resolves: bz#564101
    ([RFE] topology support in the virt block layer)
  - Resolves: bz#580140
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.40.el6
changelog:
  - cpu-model-config-1.patch [bz#569661]
  - cpu-model-config-2.patch [bz#569661]
  - cpu-model-config-3.patch [bz#569661]
  - cpu-model-config-4.patch [bz#569661]
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.42.el6
changelog:
  - kvm-net-remove-NICInfo.bootable-field.patch [bz#561078]
  - kvm-net-remove-broken-net_set_boot_mask-boot-device-vali.patch [bz#561078]
  - kvm-boot-remove-unused-boot_devices_bitmap-variable.patch [bz#561078]
  - kvm-check-kvm-enabled.patch [bz#580109]
  - kvm-qemu-rename-notifier-event_notifier.patch [bz#580109]
  - kvm-virtio-API-name-cleanup.patch [bz#580109]
  - kvm-vhost-u_int64_t-uint64_t.patch [bz#580109]
  - kvm-virtio-pci-fix-coding-style.patch [bz#580109]
  - kvm-vhost-detect-lack-of-support-earlier-style.patch [bz#580109]
  - kvm-configure-vhost-related-fixes.patch [bz#580109]
  - kvm-vhost-fix-features-ack.patch [bz#580109]
  - kvm-vhost-net-disable-mergeable-buffers.patch [bz#580109]
  - Resolves: bz#561078
    ("Cannot boot from non-existent NIC" when using virt-install --pxe)
  - Resolves: bz#580109
    (vhost net lacks upstream fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.43.el6
changelog:
  - kvm-qemu-option-Make-qemu_opts_foreach-accumulate-return.patch [bz#579470]
  - kvm-qdev-Fix-exit-code-for-device.patch [bz#579470]
  - kvm-qdev-Add-help-for-device-properties.patch [bz#579470]
  - kvm-qdev-update-help-on-device.patch [bz#579470]
  - kvm-qdev-Add-rudimentary-help-for-property-value.patch [bz#579470]
  - kvm-qdev-Free-opts-on-failed-do_device_add.patch [bz#579470]
  - kvm-qdev-Improve-diagnostics-for-bad-property-values.patch [bz#579470]
  - kvm-qdev-Catch-attempt-to-attach-more-than-one-device-to.patch [bz#579470]
  - kvm-usb-Remove-disabled-monitor_printf-in-usb_read_file.patch [bz#579470]
  - kvm-savevm-Fix-loadvm-to-report-errors-to-stderr-not-the.patch [bz#579470]
  - kvm-pc-Fix-error-reporting-for-boot-once.patch [bz#579470]
  - kvm-pc-Factor-common-code-out-of-pc_boot_set-and-cmos_in.patch [bz#579470]
  - kvm-tools-Remove-unused-cur_mon-from-qemu-tool.c.patch [bz#579470]
  - kvm-monitor-Separate-default-monitor-and-current-monitor.patch [bz#579470]
  - kvm-block-Simplify-usb_msd_initfn-test-for-can-read-bdrv.patch [bz#579470]
  - kvm-monitor-Factor-monitor_set_error-out-of-qemu_error_i.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-from-monitor.c-to-own-.patch [bz#579470]
  - kvm-error-Simplify-error-sink-setup.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-into-their-own-header.patch [bz#579470]
  - kvm-error-New-error_printf-and-error_vprintf.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qdev_d.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qbus_f.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-scsi_h.patch [bz#579470]
  - kvm-error-Replace-qemu_error-by-error_report.patch [bz#579470]
  - kvm-error-Rename-qemu_error_new-to-qerror_report.patch [bz#579470]
  - kvm-error-Infrastructure-to-track-locations-for-error-re.patch [bz#579470]
  - kvm-error-Include-the-program-name-in-error-messages-to-.patch [bz#579470]
  - kvm-error-Track-locations-in-configuration-files.patch [bz#579470]
  - kvm-QemuOpts-Fix-qemu_config_parse-to-catch-file-read-er.patch [bz#579470]
  - kvm-error-Track-locations-on-command-line.patch [bz#579470]
  - kvm-qdev-Fix-device-and-device_add-to-handle-unsuitable-.patch [bz#579470]
  - kvm-qdev-Factor-qdev_create_from_info-out-of-qdev_create.patch [bz#579470]
  - kvm-qdev-Hide-no_user-devices-from-users.patch [bz#579470]
  - kvm-qdev-Hide-ptr-properties-from-users.patch [bz#579470]
  - kvm-monitor-New-monitor_cur_is_qmp.patch [bz#579470]
  - kvm-error-Let-converted-handlers-print-in-human-monitor.patch [bz#579470]
  - kvm-error-Polish-human-readable-error-descriptions.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_BAD.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_IN_USE.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_NOT_FOUND.patch [bz#579470]
  - kvm-qdev-convert-setting-device-properties-to-QError.patch [bz#579470]
  - kvm-qdev-Relax-parsing-of-bus-option.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_MULTIPLE_BUSSES.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_NO_BUS.patch [bz#579470]
  - kvm-qdev-Convert-qbus_find-to-QError.patch [bz#579470]
  - kvm-error-New-error_printf_unless_qmp.patch [bz#579470]
  - kvm-error-New-QERR_BAD_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NO_HOTPLUG.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_INIT_FAILED.patch [bz#579470]
  - kvm-error-New-QERR_NO_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-Revert-qdev-Use-QError-for-device-not-found-error.patch [bz#579470]
  - kvm-error-Convert-do_device_add-to-QError.patch [bz#579470]
  - kvm-qemu-option-Functions-to-convert-to-from-QDict.patch [bz#579470]
  - kvm-qemu-option-Move-the-implied-first-name-into-QemuOpt.patch [bz#579470]
  - kvm-qemu-option-Rename-find_list-to-qemu_find_opts-exter.patch [bz#579470]
  - kvm-monitor-New-argument-type-O.patch [bz#579470]
  - kvm-monitor-Use-argument-type-O-for-device_add.patch [bz#579470]
  - kvm-monitor-convert-do_device_add-to-QObject.patch [bz#579470]
  - kvm-error-Trim-includes-after-Move-qemu_error-friends.patch [bz#579470]
  - kvm-error-Trim-includes-in-qerror.c.patch [bz#579470]
  - kvm-error-Trim-includes-after-Infrastructure-to-track-lo.patch [bz#579470]
  - kvm-error-Make-use-of-error_set_progname-optional.patch [bz#579470]
  - kvm-error-Link-qemu-img-qemu-nbd-qemu-io-with-qemu-error.patch [bz#579470]
  - kvm-error-Move-qerror_report-from-qemu-error.-ch-to-qerr.patch [bz#579470]
  - Resolves: bz#579470
    (QMP: device_add support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.44.el6
changelog:
  - kvm-spice-add-more-config-options-readd.patch [bz#576561]
  - BuildRequires spice-server-devel >= 0.4.2-10.el6 because of API changes
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.45.el6
changelog:
  - kvm-Documentation-Add-monitor-commands-to-function-index.patch [bz#559670]
  - kvm-error-Put-error-definitions-back-in-alphabetical-ord.patch [bz#559670]
  - kvm-error-New-QERR_DUPLICATE_ID.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_create-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_INVALID_PARAMETER_VALUE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_set-to-QError.patch [bz#559670]
  - kvm-error-Drop-extra-messages-after-qemu_opts_set-and-qe.patch [bz#559670]
  - kvm-error-Use-QERR_INVALID_PARAMETER_VALUE-instead-of-QE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_validate-to-QError.patch [bz#559670]
  - kvm-error-Convert-net_client_init-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_DEVICE_IN_USE.patch [bz#559670]
  - kvm-monitor-New-commands-netdev_add-netdev_del.patch [bz#559670]
  - kvm-qdev-Convert-qdev_unplug-to-QError.patch [bz#582325]
  - kvm-monitor-convert-do_device_del-to-QObject-QError.patch [bz#582325]
  - kvm-block-Fix-error-code-in-multiwrite-for-immediate-fai.patch [bz#582575]
  - kvm-block-Fix-multiwrite-memory-leak-in-error-case.patch [bz#582575]
  - Resolves: bz#559670
    (No 'netdev_add' command in monitor)
  - Resolves: bz#582325
    (QMP: device_del support)
  - Resolves: bz#582575
    (Backport bdrv_aio_multiwrite fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.46.el6
changelog:
  - kvm-spice-add-auth-info-to-monitor-events.patch [bz#581540]
  - Resolves: bz#581540
    (SPICE graphics event does not include auth details)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.47.el6
changelog:
  - kvm-Request-setting-of-nmi_pending-and-sipi_vector.patch [bz#569613]
  - Resolves: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.48.el6
changelog:
  - kvm-virtio-serial-save-load-Ensure-target-has-enough-por.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-nr_ports-on-src-and-d.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-we-have-hot-plugged-p.patch [bz#574296]
  - kvm-virtio-serial-save-load-Send-target-host-connection-.patch [bz#574296]
  - kvm-virtio-serial-Use-control-messages-to-notify-guest-o.patch [bz#574296]
  - kvm-virtio-serial-whitespace-match-surrounding-code.patch [bz#574296]
  - kvm-virtio-serial-Remove-redundant-check-for-0-sized-wri.patch [bz#574296]
  - kvm-virtio-serial-Update-copyright-year-to-2010.patch [bz#574296]
  - kvm-virtio-serial-Propagate-errors-in-initialising-ports.patch [bz#574296]
  - kvm-virtio-serial-Send-out-guest-data-to-ports-only-if-p.patch [bz#574296]
  - kvm-iov-Introduce-a-new-file-for-helpers-around-iovs-add.patch [bz#574296]
  - kvm-iov-Add-iov_to_buf-and-iov_size-helpers.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-buffers-for-cont.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-input-from-the-g.patch [bz#574296]
  - kvm-virtio-serial-Apps-should-consume-all-data-that-gues.patch [bz#574296]
  - kvm-virtio-serial-Discard-data-that-guest-sends-us-when-.patch [bz#574296]
  - kvm-virtio-serial-Implement-flow-control-for-individual-.patch [bz#574296]
  - kvm-virtio-serial-Handle-output-from-guest-to-unintialis.patch [bz#574296]
  - kvm-virtio-serial-bus-wake-up-iothread-upon-guest-read-n.patch [bz#574296]
  - kvm-Bail-out-when-VCPU_CREATE-fails.patch [bz#587227]
  - Resolves: bz#574296
    (Fix migration for virtio-serial after port hot-plug/hot-unplug operations)
  - Resolves: bz#587227
    (Fix segfault when creating more vcpus than allowed.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.49.el6
changelog:
  - kvm-block-Free-iovec-arrays-allocated-by-multiwrite_merg.patch [bz#586572]
  - Resolves: bz#586572
    (virtio-blk multiwrite merge memory leak)
  - Force spice to be enabled and fix BuildRequires to use spice-server-devel
  - Resolves: bz#588904
    (qemu-kvm builds without spice support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.50.el6
changelog:
  - kvm-vl.c-fix-BZ-588828-endless-loop-caused-by-non-option.patch [bz#588828]
  - Resolves: bz#588828
    (endless loop when parsing of command line with bare image argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.51.el6
changelog:
  - kvm-fdc-fix-drive-property-handling.patch [bz#584902]
  - Resolves: bz#584902
    (Cannot associate drive with a floppy device using -global)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.52.el6
changelog:
  - kvm-qemu-img-use-the-heap-instead-of-the-huge-stack-arra.patch [bz#585837]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#585837]
  - Resolves: bz#585837
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.53.el6
changelog:
  - kvm-virtio-blk-Fix-use-after-free-in-error-case.patch [bz#578448]
  - kvm-block-Fix-multiwrite-error-handling.patch [bz#578448]
  - kvm-Fix-boot-once-option.patch [bz#579692]
  - kvm-QError-New-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QMP-Use-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QError-Improve-QERR_QMP_BAD_INPUT_OBJECT-desc.patch [bz#573578]
  - kvm-QMP-Check-arguments-member-s-type.patch [bz#573578]
  - kvm-QMP-Introduce-RESUME-event.patch [bz#590102]
  - kvm-pci-irq_state-vmstate-breakage.patch [bz#588133]
  - Resolves: bz#573578
    (Segfault when migrating via QMP command interface)
  - Resolves: bz#578448
    (qemu-kvm segfault when nfs restart(without using werror&rerror))
  - Resolves: bz#579692
    (qemu-kvm "-boot once=drives" couldn't function properly)
  - Resolves: bz#588133
    (RHEL5.4 guest can lose virtio networking during migration)
  - Resolves: bz#590102
    (QMP: Backport RESUME event)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.54.el6
changelog:
  - kvm-qemu-config-qemu_read_config_file-reads-the-normal-c.patch [bz#588756]
  - kvm-qemu-config-Make-qemu_config_parse-more-generic.patch [bz#588756]
  - kvm-blkdebug-Basic-request-passthrough.patch [bz#588756]
  - kvm-blkdebug-Inject-errors.patch [bz#588756]
  - kvm-Make-qemu-config-available-for-tools.patch [bz#588756]
  - kvm-blkdebug-Add-events-and-rules.patch [bz#588756]
  - kvm-qcow2-Trigger-blkdebug-events.patch [bz#588756]
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#588762]
  - kvm-qcow2-rename-two-QCowAIOCB-members.patch [bz#588762]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#588762]
  - kvm-qcow2-Remove-request-from-in-flight-list-after-error.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#588762]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#588762]
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#588762]
  - kvm-Add-qemu-error.o-only-once-to-target-list.patch [bz#591061]
  - kvm-block-Fix-bdrv_commit.patch [bz#589439]
  - kvm-fix-80000001.EDX-supported-bit-filtering.patch [bz#578106]
  - kvm-fix-CPUID-vendor-override.patch [bz#591604]
  - Resolves: bz#578106
    (call trace when boot guest with -cpu host)
  - Resolves: bz#588756
    (blkdebug is missing)
  - Resolves: bz#588762
    (Backport qcow2 fixes)
  - Resolves: bz#589439
    (Qcow2 snapshot got corruption after commit using block device)
  - Resolves: bz#591061
    (make fails to build after make clean)
  - Resolves: bz#591604
    (cannot override cpu vendor from the command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.55.el6
changelog:
  - kvm-turn-off-kvmclock-when-resetting-cpu.patch [bz#588884]
  - kvm-virtio-blk-Avoid-zeroing-every-request-structure.patch [bz#593369]
  - Resolves: bz#588884
    (Rebooting a kernel with kvmclock enabled, into a kernel with kvmclock disabled, causes random crashes)
  - Resolves: bz#593369
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.56.el6
changelog:
  - kvm-dmg-fix-open-failure.patch [bz#580363]
  - kvm-block-get-rid-of-the-BDRV_O_FILE-flag.patch [bz#580363]
  - kvm-block-Convert-first_drv-to-QLIST.patch [bz#580363]
  - kvm-block-separate-raw-images-from-the-file-protocol.patch [bz#580363]
  - kvm-block-Split-bdrv_open.patch [bz#580363]
  - kvm-block-Avoid-forward-declaration-of-bdrv_open_common.patch [bz#580363]
  - kvm-block-Open-the-underlying-image-file-in-generic-code.patch [bz#580363]
  - kvm-block-bdrv_has_zero_init.patch [bz#580363]
  - kvm-block-Do-not-export-bdrv_first.patch [bz#590998]
  - kvm-block-Convert-bdrv_first-to-QTAILQ.patch [bz#590998]
  - kvm-block-Add-wr_highest_sector-blockstat.patch [bz#590998]
  - Resolves: bz#580363
    (Error while creating raw image on block device)
  - Resolves: bz#590998
    (qcow2 high watermark)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.57.el6
changelog:
  - kvm-stash-away-SCM_RIGHTS-fd-until-a-getfd-command-arriv.patch [bz#582684]
  - Resolves: bz#582684
    (Monitor: getfd command is broken)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.58.el6
changelog:
  - kvm-Fix-segfault-after-device-assignment-hot-remove.patch [bz#582874]
  - Resolves: bz#582874
    (Guest hangs during restart after hot unplug then hot plug physical NIC card)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.59.el6
changelog:
  - kvm-pci-cleanly-backout-of-pci_qdev_init.patch [bz#590884]
  - kvm-ide-Fix-ide_dma_cancel.patch [bz#593287]
  - Resolves: bz#590884
    (bogus 'info pci' state when hot-added assigned device fails to initialize)
  - Resolves: bz#593287
    (Failed asserting during ide_dma_cancel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.60.el6
changelog:
  - kvm-spice-vmc-add-copyright.patch [bz#576488]
  - kvm-spice-vmc-remove-debug-prints-and-defines.patch [bz#576488]
  - kvm-spice-vmc-add-braces-to-single-line-if-s.patch [bz#576488]
  - kvm-spice-vmc-s-SpiceVirtualChannel-SpiceVMChannel-g.patch [bz#576488]
  - kvm-spice-vmc-s-spice_virtual_channel-spice_vmc-g.patch [bz#576488]
  - kvm-spice-vmc-all-variables-of-type-SpiceVMChannel-renam.patch [bz#576488]
  - kvm-spice-vmc-remove-meaningless-cast-of-void.patch [bz#576488]
  - kvm-spice-vmc-add-spice_vmc_ring_t-fix-write-function.patch [bz#576488]
  - kvm-spice-vmc-don-t-touch-guest_out_ring-on-unplug.patch [bz#576488]
  - kvm-spice-vmc-VirtIOSerialPort-vars-renamed-to-vserport.patch [bz#576488]
  - kvm-spice-vmc-add-nr-property.patch [bz#576488]
  - kvm-spice-vmc-s-SPICE_VM_CHANNEL-SPICE_VMC-g.patch [bz#576488]
  - kvm-spice-vmc-add-vmstate.-saves-active_interface.patch [bz#576488]
  - kvm-spice-vmc-rename-guest-device-name-to-com.redhat.spi.patch [bz#576488]
  - kvm-spice-vmc-remove-unused-property-name.patch [bz#576488]
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.61.el6
changelog:
  - Add "file" format to bdrv whitelist
  - Resolves: bz#593909
    (VM can not start by using qemu-kvm-0.12.1.2-2.56.el6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.62.el6
changelog:
  - kvm-block-add-logical_block_size-property.patch [bz#566785]
  - kvm-virtio-serial-bus-fix-ports_map-allocation.patch [bz#591176]
  - kvm-Move-cpu-model-config-file-to-agree-with-rpm-build-B.patch [bz#569661]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)
  - Resolves: bz#591176
    (migration fails since virtio-serial-bus is using uninitialized memory)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.63.el6
changelog:
  - kvm-fix-undefined-shifts-by-32.patch [bz#590922]
  - kvm-qemu-char.c-drop-debug-printfs-from-qemu_chr_parse_c.patch [bz#590922]
  - kvm-Fix-corner-case-in-chardev-udp-parameter.patch [bz#590922]
  - kvm-pci-passthrough-zap-option-rom-scanning.patch [bz#590922]
  - kvm-UHCI-spurious-interrupt-fix.patch [bz#590922]
  - kvm-Fix-SIGFPE-for-vnc-display-of-width-height-1.patch [bz#590922]
  - kvm-spice-vmc-remove-ringbuffer.patch [bz#589670]
  - kvm-spice-vmc-add-dprintfs.patch [bz#589670]
  - Resolves: bz#589670
    (spice: Ensure ring data is save/restored on migration)
  - Related: bz#590922
    (backport qemu-kvm-0.12.4 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.64.el6
changelog:
  - kvm-qemu-kvm-fix-crash-on-reboot-with-vhost-net.patch [bz#585940]
  - Related: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.65.el6
changelog:
  - kvm-qcow2-Fix-creation-of-large-images.patch [bz#577106]
  - kvm-vnc-sync-lock-modifier-state-on-connect.patch [bz#569767]
  - kvm-json-lexer-Initialize-x-and-y.patch [bz#589952]
  - kvm-json-lexer-Handle-missing-escapes.patch [bz#589952]
  - kvm-qjson-Handle-f.patch [bz#589952]
  - kvm-json-lexer-Drop-buf.patch [bz#589952]
  - kvm-json-streamer-Don-t-use-qdict_put_obj.patch [bz#589952]
  - kvm-block-fix-sector-comparism-in-multiwrite_req_compare.patch [bz#596119]
  - kvm-block-Fix-multiwrite-with-overlapping-requests.patch [bz#596119]
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#577106
    (Abort/Segfault when creating qcow2 format image with 512b cluster size)
  - Resolves: bz#589952
    (QMP breaks when issuing any command with a backslash)
  - Resolves: bz#596119
    (Possible corruption after block request merge)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.66.el6
changelog:
  - kvm-device-assignment-use-stdint-types.patch [bz#595495]
  - kvm-device-assignment-Don-t-use-libpci.patch [bz#595495]
  - kvm-device-assignment-add-config-fd-qdev-property.patch [bz#595495]
  - Resolves: bz#595495
    (Fail to hotplug pci device to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.67.el6
changelog:
  - kvm-qemu-address-todo-comment-in-exec.c.patch [bz#595301]
  - Resolves: bz#595301
    (QEMU terminates without warning with virtio-net and SMP enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.68.el6
changelog:
  - kvm-virtio-blk-fix-barrier-support.patch [bz#595813]
  - Resolves: bz#595813
    (virtio-blk doesn't handle barriers correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.69.el6
changelog:
  - Changes to make-release script with no resulting changes on binary package
  - kvm-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#595287]
  - Resolves: bz#595287
    (virtio net/vhost net speed enhancements from upstream kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.70.el6
changelog:
  - kvm-virtio-invoke-set_features-on-load.patch [bz#595263]
  - kvm-virtio-net-return-with-value-in-void-function.patch [bz#595263]
  - kvm-vhost-net-fix-reversed-logic-in-mask-notifiers.patch [bz#585940]
  - kvm-hpet-Disable-for-Red-Hat-Enterprise-Linux.patch [bz#595130]
  - ksmtuned: typo MemCached -> Cached [bz#597005]
  - kvm-virtio-net-stop-vhost-backend-on-vmstop.patch [bz#598896]
  - kvm-msix-fix-msix_set-unset_mask_notifier.patch [bz#598896]
  - Resolves: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)
  - Resolves: bz#595130
    (Disable hpet by default)
  - Resolves: bz#595263
    (virtio net lacks upstream fixes as of may 24)
  - Resolves: bz#597005
    (ksmtune: typo: MemCached -> Cached)
  - Resolves: bz#598896
    (migration breaks networking with vhost-net)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.71.el6
changelog:
  - kvm-device-assignment-fix-failure-to-exit-on-shared-IRQ.patch [bz#585310]
  - kvm-doc-Fix-host-forwarding-monitor-command-documentatio.patch [bz#588719]
  - kvm-doc-Fix-acl-monitor-command-documentation.patch [bz#588719]
  - kvm-doc-Heading-for-monitor-command-cpu-got-lost-restore.patch [bz#588719]
  - kvm-doc-Clean-up-monitor-command-function-index.patch [bz#588719]
  - kvm-fix-info-cpus-halted-state-reporting.patch [bz#593769]
  - kvm-sysemu-Export-no_shutdown.patch [bz#559618]
  - kvm-Monitor-Return-before-exiting-with-quit.patch [bz#559618]
  - kvm-QMP-Add-Downstream-extension-of-QMP-to-spec.patch [bz#566291]
  - kvm-Revert-PCI-Convert-pci_device_hot_add-to-QObject.patch [bz#580365]
  - kvm-Revert-monitor-Convert-do_pci_device_hot_remove-to-Q.patch [bz#580365]
  - kvm-drive-allow-rerror-werror-and-readonly-for-if-none.patch [bz#565609 bz#593256]
  - kvm-qdev-properties-Fix-u-intXX-parsers.patch [bz#596093]
  - kvm-vnc-factor-out-vnc_desktop_resize.patch [bz#590070]
  - kvm-vnc-send-desktopresize-event-as-reply-to-set-encodin.patch [bz#590070]
  - kvm-vnc-keep-track-of-client-desktop-size.patch [bz#590070]
  - kvm-vnc-don-t-send-invalid-screen-updates.patch [bz#590070]
  - kvm-vnc-move-size-changed-check-into-the-vnc_desktop_res.patch [bz#590070]
  - kvm-check-for-active_console-before-using-it.patch [bz#591759]
  - Resolves: bz#559618
    (QMP: Fix 'quit' to return success before exiting)
  - Resolves: bz#565609
    (Unable to use werror/rerror with  -drive syntax using if=none)
  - Resolves: bz#566291
    (QMP: Support vendor extensions)
  - Resolves: bz#580365
    (QMP: pci_add/pci_del conversion should be reverted)
  - Resolves: bz#585310
    (qemu-kvm does not exit when device assignment fails due to IRQ sharing)
  - Resolves: bz#588719
    (Fix monitor command documentation)
  - Resolves: bz#590070
    (QEMU misses DESKTOP-RESIZE event if it is triggered during client connection initialization)
  - Resolves: bz#591759
    (Segmentation fault when using vnc to view guest without vga card)
  - Resolves: bz#593256
    (Unable to set readonly flag for floppy disks)
  - Resolves: bz#593769
    ("info cpus" doesn't show halted state)
  - Resolves: bz#596093
    (16bit integer qdev properties are not parsed correctly.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.72.el6
changelog:
  - kvm-Monitor-Make-RFQDN_REDHAT-public.patch [bz#586349]
  - kvm-QMP-Add-error-reason-to-BLOCK_IO_ERROR-event.patch [bz#586349]
  - kvm-virtio-net-truncating-packet.patch [bz#591494]
  - kvm-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#600203]
  - kvm-device-assignment-don-t-truncate-MSIX-capabilities-t.patch [bz#596315]
  - kvm-If-a-USB-keyboard-is-unplugged-the-keyboard-eventhan.patch [bz#561433]
  - Resolves: bz#561433
    (Segfault when keyboard is removed)
  - Resolves: bz#586349
    (BLOCK_IO_ERROR event does not provide the errno that caused it.)
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#596315
    (device assignment truncates MSIX table size)
  - Resolves: bz#600203
    (vhost net new userspace on old kernel: 95: falling back on userspace virtio)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.73.el6
changelog:
  - kvm-net-Fix-hotplug-with-pci_add.patch [bz#599460]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.74.el6
changelog:
  - kvm-raw-posix-Detect-CDROM-via-ioctl-on-linux.patch [bz#593758]
  - kvm-block-Remove-special-case-for-vvfat.patch [bz#593758]
  - kvm-block-Make-find_image_format-return-raw-BlockDriver-.patch [bz#593758]
  - kvm-block-Add-missing-bdrv_delete-for-SG_IO-BlockDriver-.patch [bz#593758]
  - kvm-block-Assume-raw-for-drives-without-media.patch [bz#593758]
  - Resolves: bz#593758
    (qemu fails to start with -cdrom /dev/sr0 if no media inserted)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.75.el6
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#598407]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#598507]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#598507]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#598507]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#598507]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#598507]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#598507]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#598507]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Avoid-shadowing-variable-in-alloc_clusters_nor.patch [bz#598507]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#598507]
  - kvm-make-release-make-mtime-owner-group-consistent.patch
  - Resolves: bz#598407
    (qcow2 corruption bug in refcount table growth)
  - Resolves: bz#598507
    (Backport qcow2 error path fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.76.el6
changelog:
  - kvm-fix-vnc-memory-corruption-with-width-1400.patch [bz#602724]
  - kvm-net-Fix-VM-start-with-net-none.patch [bz#599460]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-drive_add-command-for-Red-Hat-Enterpr.patch [bz#602590]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)
  - Resolves: bz#602590
    (Disable pci_add, pci_del, drive_add)
  - Resolves: bz#602724
    (VNC disconnect segfault on KVM video consoles)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.77.el6
changelog:
  - kvm.modules: autoload vhost-net module too [bz#596891]
  - Resolves: bz#596891
    (vhost-net module should be loaded automatically)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.78.el6
changelog:
  - kvm-block-read-only-open-cdrom-as-read-only-when-using-m.patch [bz#602026]
  - kvm-acpi_piix4-save-gpe-and-pci-hotplug-slot-status.patch [bz#598022]
  - kvm-Don-t-check-for-bus-master-for-old-guests.patch [bz#596014]
  - kvm-Make-IDE-drives-defined-with-device-visible-to-cmos_.patch [bz#597147]
  - Resolves: bz#596014
    (hot add virtio-blk-pci via device_add lead to virtio network lost)
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)
  - Resolves: bz#598022
    (Hot-added device is not visible in guest after live-migration.)
  - Resolves: bz#602026
    (Cannot change cdrom by "change device filename [format] " in (qemu) command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.79.el6
changelog:
  - kvm-Make-geometry-of-IDE-drives-defined-with-device-visi.patch [bz#597147]
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.80.el6
changelog:
  - don't package kvmtrace anymore
  - Resolves: bz#605426
    (obsolete kvmtrace binary is still being packaged)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.81.el6
changelog:
  - kvm-virtio-Enable-the-PUBLISH_USED-feature-by-default-fo.patch [bz#602417]
  - kvm-do-not-enter-vcpu-again-if-it-was-stopped-during-IO.patch [bz#595647]
  - Resolves: bz#595647
    (Windows guest with qxl driver can't get into S3 state)
  - Resolves: bz#602417
    (Enable VIRTIO_RING_F_PUBLISHED bit for all virtio devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.82.el6
changelog:
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#581789]
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#596609]
  - kvm-Make-netdev_del-delete-the-netdev-even-when-it-s-in-.patch [bz#596274]
  - kvm-device-assignment-msi-PBA-is-long.patch [bz#605359]
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#604210]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#604210]
  - kvm-qcow2-Fix-error-handling-during-metadata-preallocati.patch [bz#604210]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#607200]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#607200]
  - kvm-virtio-serial-Fix-compat-property-name.patch [bz#607263]
  - kvm-rtc-Remove-TARGET_I386-from-qemu-config.c-enables-dr.patch [bz#606733]
  - Resolves: bz#581789
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#596274
    (QMP: netdev_del sometimes fails claiming the device is in use)
  - Resolves: bz#596609
    (Live migration failed when migration during boot)
  - Resolves: bz#604210
    (Segmentation fault when check  preallocated qcow2 image on lvm.)
  - Resolves: bz#605359
    (Fix MSIX regression from bz595495)
  - Resolves: bz#606733
    (Unable to set the driftfix parameter)
  - Resolves: bz#607200
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#607263
    (Unable to launch QEMU with -M pc-0.12 and  virtio serial)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.83.el6
changelog:
  - kvm-add-some-tests-for-invalid-JSON.patch [bz#585009]
  - kvm-implement-optional-lookahead-in-json-lexer.patch [bz#585009]
  - kvm-remove-unnecessary-lookaheads.patch [bz#585009]
  - kvm-per-machine-type-smbios-Type-1-smbios-values.patch [bz#605704]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#607688]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#607688]
  - kvm-block-allow-filenames-with-colons-again-for-host-dev.patch [bz#599122]
  - Resolves: bz#585009
    (QMP: input needs trailing  char)
  - Resolves: bz#599122
    (Unable to launch QEMU with a guest disk filename containing a ':')
  - Resolves: bz#605704
    (qemu-kvm: set per-machine-type smbios strings)
  - Resolves: bz#607688
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.84.el6
changelog:
  - kvm-Add-KVM-paravirt-cpuid-leaf.patch [bz#606084]
  - Resolves: bz#606084
    (Allow control of kvm cpuid option via -cpu flag)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.85.el6
changelog:
  - kvm-Remove-usage-of-CONFIG_RED_HAT_DISABLED.patch [bz#605638]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#605638]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#605638]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#607244]
  - kvm-QError-Introduce-QERR_DEVICE_INIT_FAILED_2.patch [bz#596279]
  - kvm-dev-assignment-Report-IRQ-assign-errors-in-QMP.patch [bz#596279]
  - Resolves: bz#596279
    (QMP: does not report the real cause of PCI device assignment failure)
  - Resolves: bz#605638
    (Remove unsupported monitor commands from qemu-kvm)
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.86.el6
changelog:
  - kvm-net-delete-QemuOpts-when-net_client_init-fails.patch [bz#603851]
  - kvm-QMP-Fix-error-reporting-in-the-async-API.patch [bz#587382]
  - kvm-QMP-Remove-leading-whitespace-in-package.patch [bz#580648]
  - kvm-Add-optional-dump-of-default-config-file-paths-v2-BZ.patch [bz#601540]
  - Resolves: bz#580648
    (QMP: Bad package version in greeting message)
  - Resolves: bz#587382
    (QMP: balloon command may not report an error)
  - Resolves: bz#601540
    (qemu requires ability to verify location of cpu model definition file..)
  - Resolves: bz#603851
    (QMP: Can't reuse same 'id' when netdev_add fails)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.87.el6
changelog:
  - kvm-qxl-drop-check-for-depths-32.patch [bz#597198]
  - kvm-spice-handle-16-bit-color-depth.patch [bz#597198 bz#600205]
  - kvm-device-assignment-Don-t-deassign-when-the-assignment.patch [bz#597968]
  - kvm-block-fix-physical_block_size-calculation.patch [bz#566785]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-Intel-models.patch [bz#601517]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#597198
    (qxl: 16bpp vga mode is broken.)
  - Resolves: bz#597968
    (Should not allow one physical NIC card to be assigned to one guest for many times)
  - Resolves: bz#600205
    (Live migration cause qemu-kvm Segmentation fault (core dumped)by using "-vga std")
  - Resolves: bz#601517
    (x2apic needs to be present in all new Intel cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.88.el6
changelog:
  - kvm-Exit-if-incoming-migration-fails.patch [bz#570174]
  - kvm-Factorize-common-migration-incoming-code.patch [bz#570174]
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.89.el6
changelog:
  - kvm-device-assignment-be-more-selective-in-interrupt-dis.patch [bz#605361]
  - Resolves: bz#605361
    (82576 physical function device assignment doesn't work with win7)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.90.el6
changelog:
  - kvm-device-assignment-Avoid-munmapping-the-real-MSIX-are.patch [bz#572043]
  - kvm-device-assignment-Cleanup-on-exit.patch [bz#572043]
  - Resolves: bz#572043
    (Guest gets segfault when do multiple device hot-plug and hot-unplug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.91.el6
changelog:
  - kvm-doc-Update-monitor-info-subcommands.patch [bz#582262]
  - kvm-Fix-typo-in-balloon-help.patch [bz#582262]
  - kvm-monitor-Reorder-info-documentation.patch [bz#582262]
  - kvm-QMP-Introduce-commands-documentation.patch [bz#582262]
  - kvm-QMP-Sync-documentation-with-RHEL6-only-changes.patch [bz#582262]
  - kvm-Monitor-Drop-QMP-documentation-from-code.patch [bz#582262]
  - kvm-hxtool-Fix-line-number-reporting-on-SQMP-EQMP-errors.patch [bz#582262]
  - kvm-monitor-New-command-__com.redhat_drive_add.patch [bz#581963]
  - kvm-Fix-driftfix-option.patch [bz#611229]
  - Resolves: bz#581963
    (QMP: missing drive_add command in JSON mode)
  - Resolves: bz#582262
    (QMP: Missing commands doc)
  - Resolves: bz#611229
    (-rtc cmdline changes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.92.el6
changelog:
  - build-time-only fix: fix the tarball-generation make-release script for newer git versions
    (kvm-make-release-fix-mtime-on-rhel6-beta.patch)
  - Related: bz#581963 bz#582262 bz#611229


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.93.el6
changelog:
  - kvm-make-rtc-alatm-work.patch [bz#598836]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#612164]
  - kvm-qcow2-vdi-Change-check-to-distinguish-error-cases.patch [bz#612164]
  - Resolves: bz#598836
    (RHEL 6.0 RTC Alarm unusable in vm)
  - Resolves: bz#612164
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.94.el6
changelog:
  - kvm-Revert-ide-save-restore-pio-atapi-cmd-transfer-field.patch [bz#612481]
  - kvm-vmstate-add-subsections-code.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-pio-operation.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-a-bmdma-transfer.patch [bz#612481]
  - kvm-Initial-documentation-for-migration-Signed-off-by-Ju.patch [bz#612481]
  - kvm-Disable-non-rhel-machine-types-pc-0.12-pc-0.11-pc-0..patch [bz#607263]
  - Resolves: bz#607263
    (Remove -M pc-0.12 support)
  - Resolves: bz#612481
    (Enable migration subsections)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.95.el6
changelog:
  - kvm-Move-CPU-definitions-to-usr-share-.-BZ-610805.patch [bz#610805]
  - kvm-QEMUFileBuffered-indicate-that-we-re-ready-when-the-.patch [bz#609261]
  - kvm-device-assignment-Better-fd-tracking.patch [bz#611715]
  - Resolves: bz#609261
    (Exec outgoing migration is too slow)
  - Resolves: bz#610805
    (Move CPU definitions to /usr/share/...)
  - Resolves: bz#611715
    (qemu-kvm gets no responsive  when do  hot-unplug pass-through device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.96.el6
changelog:
  - fix some errors in ksmd.init [bz#570467]
  - fix some errors in ksmtuned.init [bz#579883]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-AMD-models.-.patch [bz#613884]
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#579883
    (init script doesn't stop ksmd)
  - Resolves: bz#613884
    (x2apic needs to be present in all new AMD cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.97.el6
changelog:
  - kvm-block-Fix-early-failure-in-multiwrite.patch [bz#602209]
  - kvm-block-Handle-multiwrite-errors-only-when-all-request.patch [bz#602209]
  - kvm-migration-respect-exit-status-with-exec.patch [bz#584372]
  - kvm-set-proper-migration-status-on-write-error-v3.patch [bz#584372]
  - kvm-Set-SMBIOS-vendor-to-QEMU-for-RHEL5-machine-types.patch [bz#614377]
  - kvm-Don-t-reset-bs-is_temporary-in-bdrv_open_common.patch [bz#611797]
  - kvm-Change-default-CPU-model-qemu64-to-model-6.patch [bz#614537]
  - kvm-set-model-6-on-Intel-CPUs-on-cpu-x86_64.conf.patch [bz#614537]
  - kvm-vhost-fix-miration-during-device-start.patch [bz#615228]
  - Resolves: bz#584372
    (Fails to detect errors when using exec: based migration)
  - Resolves: bz#602209
    (Core dumped during Guest installation)
  - Resolves: bz#611797
    (qemu does not call unlink() on temp files in snapshot mode)
  - Resolves: bz#614377
    (Windows 7 requires re-activation when migrated from RHEL5 to RHEL6)
  - Resolves: bz#614537
    (Skype crashes on VM.)
  - Resolves: bz#615228
    (oom in vhost_dev_start)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.98.el6
changelog:
  - kvm-ram_blocks-Convert-to-a-QLIST.patch [bz#596328]
  - kvm-Remove-uses-of-ram.last_offset-aka-last_ram_offset.patch [bz#596328]
  - kvm-pc-Allocate-all-ram-in-a-single-qemu_ram_alloc.patch [bz#596328]
  - kvm-qdev-Add-a-get_dev_path-function-to-BusInfo.patch [bz#596328]
  - kvm-pci-Implement-BusInfo.get_dev_path.patch [bz#596328]
  - kvm-savevm-Add-DeviceState-param.patch [bz#596328]
  - kvm-savevm-Make-use-of-DeviceState.patch [bz#596328]
  - kvm-eepro100-Add-a-dev-field-to-eeprom-new-free-function.patch [bz#596328]
  - kvm-virtio-net-Incorporate-a-DeviceState-pointer-and-let.patch [bz#596328]
  - kvm-qemu_ram_alloc-Add-DeviceState-and-name-parameters.patch [bz#596328]
  - kvm-ramblocks-Make-use-of-DeviceState-pointer-and-BusInf.patch [bz#596328]
  - kvm-savevm-Migrate-RAM-based-on-name-offset.patch [bz#596328]
  - kvm-savevm-Use-RAM-blocks-for-basis-of-migration.patch [bz#596328]
  - kvm-savevm-Create-a-new-continue-flag-to-avoid-resending.patch [bz#596328]
  - kvm-qemu_ram_free-Implement-it.patch [bz#596328]
  - kvm-pci-Free-the-space-allocated-for-the-option-rom-on-r.patch [bz#596328]
  - kvm-ramblocks-No-more-being-lazy-about-duplicate-names.patch [bz#596328]
  - kvm-savevm-Reset-last-block-info-at-beginning-of-each-sa.patch [bz#616525]
  - kvm-block-Change-bdrv_commit-to-handle-multiple-sectors-.patch [bz#615152]
  - kvm-Revert-virtio-Enable-the-PUBLISH_USED-feature-by-def.patch [bz#616501]
  - kvm-Revert-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#616501]
  - kvm-Revert-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#616501]
  - kvm-savevm-Fix-memory-leak-of-compat-struct.patch [bz#596328]
  - kvm-virtio-blk-Create-exit-function-to-unregister-savevm.patch [bz#580010]
  - Resolves: bz#580010
    (migration failed after pci_add and pci_del a virtio storage device)
  - Resolves: bz#596328
    ([RHEL6 Beta1] : KVM guest remote migration fails with pci device hotplug.)
  - Resolves: bz#615152
    (rhel 6 performance worse than rhel5.6 when committing 1G  changes recorded in  snapshot in its base image.)
  - Resolves: bz#616501
    (publish used ABI incompatible with future guests)
  - Resolves: bz#616525
    (savevm needs to reset block info on each new save)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.99.el6
changelog:
  - kvm-Documentation-Add-a-warning-message-to-qemu-kvm-help.patch [bz#596232]
  - Resolves: bz#596232
    (Update docs to exclude unsupported options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.100.el6
changelog:
  - kvm-Disable-SCSI.patch [bz#617534]
  - kvm-spice-don-t-force-fullscreen-redraw-on-display-resiz.patch [bz#612074]
  - kvm-KVM_GET_SUPPORTED_CPUID-doesn-t-return-all-host-cpui.patch [bz#616188]
  - kvm-Do-not-try-loading-option-ROM-for-hotplug-PCI-device.patch [bz#612696]
  - Resolves: bz#612074
    (core dumped while live migration with spice)
  - Resolves: bz#612696
    (virsh attach-device crash kvm guest.)
  - Resolves: bz#616188
    (KVM_GET_SUPPORTED_CPUID doesn't return all host cpuid flags..)
  - Resolves: bz#617534
    (Disable SCSI and usb-storage)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.101.el6
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#591494]
  - kvm-avoid-canceling-ide-dma-rediff.patch [bz#617414]
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#617414
    (avoid canceling in flight ide dma)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.102.el6
changelog:
  - kvm-spice-Rename-conflicting-ramblock.patch [bz#617463]
  - kvm-block-default-to-0-minimal-optimal-I-O-size.patch [bz#617271]
  - Resolves: bz#617271
    (RHEL6 qemu-kvm guest gets partitioned at sector 63)
  - Resolves: bz#617463
    (Coredump occorred when enable qxl)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.103.el6
changelog:
  - kvm-migration-Accept-cont-only-after-successful-incoming.patch [bz#581555]
  - Resolves: bz#581555
    (race between qemu monitor "cont" and incoming migration can cause failed restore/migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.104.el6
changelog:
  - kvm-vhost_dev_unassign_memory-don-t-assert-if-removing-f.patch [bz#617085]
  - Resolves: bz#617085
    (core dumped when add netdev to VM with vhost on)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.105.el6
changelog:
  - kvm-device-assignment-Use-PCI-I-O-port-sysfs-resource-fi.patch [bz#615214]
  - kvm-block-Change-bdrv_eject-not-to-drop-the-image.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#615214
    ([VT-d] Booting RHEL6 guest with Intel 82541PI NIC assigned by libvirt cause qemu crash)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.106.el6
changelog:
  - kvm-device-assignment-Leave-option-ROM-space-RW-KVM-does.patch [bz#618788]
  - kvm-block-Fix-bdrv_has_zero_init.patch [bz#616890]
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619414]
  - kvm-Migration-reopen-block-devices-files.patch [bz#618601]
  - Resolves: bz#616890
    ("qemu-img convert" fails on block device)
  - Resolves: bz#618601
    (We need to reopen images after migration)
  - Resolves: bz#618788
    (device-assignment hangs with kvm_run: Bad address)
  - Resolves: bz#619414
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-6.0])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.107.el6
changelog:
  - kvm-Correct-cpuid-flags-and-model-fields-V2.patch [bz#613892 bz#618332]
  - Resolves: bz#613892
    ([SR-IOV]VF device can not start on 32bit Windows2008 SP2)
  - Resolves: bz#618332
    (CPUID_EXT_POPCNT enabled in qemu64 and qemu32 built-in models.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.108.el6
changelog:
  - kvm-Fix-migration-with-spice-enabled.patch [bz#618168]
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#607244]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#607244]
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)
  - Resolves: bz#618168
    (Qemu-kvm in the src host core dump when do migration by using spice)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.109.el6
changelog:
  - kvm-qdev-Reset-hotplugged-devices.patch [bz#607611]
  - kvm-Block-I-O-signals-in-audio-helper-threads.patch [bz#621161]
  - Resolves: bz#607611
    (pci hotplug of e1000, rtl8139 nic device fails for all guests.)
  - Resolves: bz#621161
    (qemu-kvm crashes with I/O Possible message)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.110.el6
changelog:
  - kvm-vhost-Fix-size-of-dirty-log-sync-on-resize.patch [bz#622356]
  - Resolves: bz#622356
    (Live migration failed during reboot due to vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.112.el6
changelog:
  - kvm-qemu-img-rebase-Open-new-backing-file-read-only.patch [bz#624666]
  - Resolves: bz#624666
    (qemu-img re-base broken on RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6
changelog:
  - kvm-disable-guest-provided-stats-on-info-ballon-monitor-.patch [bz#623903]
  - Resolves: bz#623903
    (query-balloon commmand didn't return on pasued guest cause virt-manger hang)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.114.el6
changelog:
  - fix ksmd.init "status" [bz#570467]
  - kvm-virtio-net-Make-tx_timer-timeout-configurable.patch [bz#624767]
  - kvm-virtio-net-Limit-number-of-packets-sent-per-TX-flush.patch [bz#624767]
  - kvm-virtio-net-Rename-tx_timer_active-to-tx_waiting.patch [bz#624767]
  - kvm-virtio-net-Introduce-a-new-bottom-half-packet-TX.patch [bz#624767]
  - kvm-spice-qxl-enable-some-highres-modes.patch [bz#482427]
  - kvm-add-MADV_DONTFORK-to-guest-physical-memory-v2.patch [bz#633699]
  - kvm-virtio-serial-Check-if-virtio-queue-is-ready-before-.patch [bz#596610]
  - kvm-virtio-serial-Assert-for-virtio-queue-ready-before-v.patch [bz#596610]
  - kvm-virtio-serial-Check-if-more-max_ports-specified-than.patch [bz#616703]
  - kvm-virtio-serial-Cleanup-on-device-hot-unplug.patch [bz#624396]
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#635354]
  - kvm-qxl-clear-dirty-rectangle-on-resize.patch [bz#617119]
  - kvm-VGA-Don-t-register-deprecated-VBE-range.patch [bz#625948]
  - kvm-BZ-619168-qemu-should-more-clearly-indicate-internal.patch [bz#619168]
  - kvm-fix-and-on-russian-keymap.patch [bz#639437]
  - Resolves: bz#482427
    (support high resolutions)
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#596610
    ("Guest moved used index from 0 to 61440" if remove virtio serial device before virtserialport)
  - Resolves: bz#616703
    (qemu-kvm core dump with virtio-serial-pci max-port greater than 31)
  - Resolves: bz#617119
    (Qemu becomes unresponsive during unattended_installation)
  - Resolves: bz#619168
    (qemu should more clearly indicate internal detection of this host out-of-memory condition at startup..)
  - Resolves: bz#624396
    (migration failed after hot-unplug virtserialport - Unknown savevm section or instance '0000:00:07.0/virtio-console' 0)
  - Resolves: bz#624767
    (Replace virtio-net TX timer mitigation with bottom half handler)
  - Resolves: bz#625948
    (qemu exits when hot adding rtl8139 nic to win2k8 guest)
  - Resolves: bz#633699
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#635354
    (Can not commit copy-on-write image's data to raw backing-image)
  - Resolves: bz#639437
    (Incorrect russian vnc keymap)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.115.el6
changelog:
  - kvm-spice-qxl-update-modes-ptr-in-post_load.patch [bz#631522]
  - kvm-spice-qxl-make-draw_area-and-vgafb-share-memory.patch [bz#631522]
  - Give a nicer message if retune is called while ksmtuned is off [bz#637976]
  - Resolves: bz#631522
    (spice: prepare qxl for 6.1 update.)
  - Resolves: bz#637976
    (ksmtuned: give a nicer message if retune is called while ksmtuned is off)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.116.el6
changelog:
  - ksmtuned: committed_memory of 0 qemus [bz#609016]
  - kvm-Fix-underflow-error-in-device-assignment-size-check.patch [bz#632054]
  - kvm-check-for-close-errors-on-qcow2_create.patch [bz#641127]
  - Resolves: bz#609016
    (incorrect committed memory on idle host)
  - Resolves: bz#632054
    ([Intel 6.0 Virt] guest bootup fail with intel 82574L NIC assigned)
  - Resolves: bz#641127
    (qemu-img ignores close() errors)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.117.el6
changelog:
  - kvm-savevm-Really-verify-if-a-drive-supports-snapshots.patch [bz#599307]
  - kvm-drop-boot-on-from-help-string.patch [bz#643681]
  - kvm-Fix-parameters-of-prctl.patch [bz#585910]
  - kvm-Ignore-SRAO-MCE-if-another-MCE-is-being-processed.patch [bz#585910]
  - kvm-Add-RAM-physical-addr-mapping-in-MCE-simulation.patch [bz#585910]
  - kvm-Add-savevm-loadvm-support-for-MCE.patch [bz#585910]
  - kvm-Fix-SRAO-SRAR-MCE-injecting-on-guest-without-MCG_SER.patch [bz#585910]
  - Resolves: bz#585910
    ([Intel 6.1 Bug] SRAO MCE in guest kills QEMU-KVM (qemu-kvm component))
  - Resolves: bz#599307
    (info snapshot return "bdrv_snapshot_list: error -95")
  - Resolves: bz#643681
    (Do not advertise boot=on capability to libvirt)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.118.el6
changelog:
  - kvm-net-delay-freeing-peer-host-device.patch [bz#634661]
  - kvm-QMP-Improve-debuggability-of-the-BLOCK_IO_ERROR-even.patch [bz#624607]
  - Resolves: bz#624607
    ([qemu] [rhel6] guest installation stop (pause) on 'eother' event over COW disks (thin-provisioning))
  - Resolves: bz#634661
    ([RHEL6 Snap13]: Hot-unplugging of virtio nic issue in Windows2008 KVM guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.119.el6
changelog:
  - kvm-bz-603413-e1000-secrc-support.patch [bz#603413]
  - kvm-net-properly-handle-illegal-fd-vhostfd-from-command-.patch [bz#581750]
  - kvm-Enable-non-page-boundary-BAR-device-assignment.patch [bz#647307]
  - kvm-Fix-build-failure-with-DEVICE_ASSIGNMENT_DEBUG.patch [bz#647307]
  - kvm-slow_map-minor-improvements-to-ROM-BAR-handling.patch [bz#647307]
  - kvm-device-assignment-Always-use-slow-mapping-for-PCI-op.patch [bz#647307]
  - kvm-e1000-Fix-TCP-checksum-overflow-with-TSO.patch [bz#648333]
  - kvm-device-assignment-Fix-slow-option-ROM-mapping.patch [bz#647307]
  - Resolves: bz#581750
    (Vhost: Segfault when assigning a none vhostfd)
  - Resolves: bz#603413
    (RHEL3.9 guest netdump hung with e1000)
  - Resolves: bz#647307
    (Support slow mapping of PCI Bars)
  - Resolves: bz#648333
    (TCP checksum overflows in qemu's e1000 emulation code when TSO is enabled in guest OS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.120.el6
changelog:
  - kvm-Fix-snapshot-deleting-images-on-disk-change.patch [bz#653582]
  - Resolves: bz#653582
    (Changing media with -snapshot deletes image file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.121.el6
changelog:
  - kvm-monitor-Rename-argument-type-b-to-f.patch [bz#625681]
  - kvm-monitor-New-argument-type-b-bool.patch [bz#625681]
  - kvm-monitor-Use-argument-type-b-for-set_link.patch [bz#625681]
  - kvm-monitor-Convert-do_set_link-to-QObject-QError.patch [bz#625681]
  - Resolves: bz#625681
    (RFE QMP: should have command to disconnect and connect network card for whql testing)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.122.el6
changelog:
  - kvm-cleanup-block-driver-option-handling-in-vl.c.patch [bz#653536]
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#653536]
  - kvm-move-unsafe-to-end-of-caching-modes-in-help.patch [bz#653536]
  - kvm-qemu-img-Eliminate-bdrv_new_open-code-duplication.patch [bz#653536]
  - kvm-qemu-img-Fix-BRDV_O_FLAGS-typo.patch [bz#653536]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#653536]
  - kvm-block-Fix-virtual-media-change-for-if-none.patch [bz#625319]
  - kvm-Check-for-invalid-initrd-file.patch [bz#624721]
  - kvm-qcow-qcow2-implement-bdrv_aio_flush.patch [bz#653972]
  - kvm-block-Remove-unused-s-hd-in-various-drivers.patch [bz#653972]
  - kvm-qcow2-Remove-unnecessary-flush-after-L2-write.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-write_refcount_block_entries.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-update_refcount.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-qcow2_alloc_clusters.patch [bz#653972]
  - kvm-qcow2-Get-rid-of-additional-sync-on-COW.patch [bz#653972]
  - kvm-cutils-qemu_iovec_copy-and-qemu_iovec_memset.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-read-requests.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-write-requests.patch [bz#653972]
  - kvm-kill-empty-index-on-qemu-doc.texi.patch [bz#604992]
  - kvm-add-VMSTATE_BOOL.patch [bz#645342]
  - kvm-Add-Intel-HD-Audio-support-to-qemu.patch [bz#645342]
  - Resolves: bz#604992
    (index is empty in qemu-doc.html)
  - Resolves: bz#624721
    ([qemu] [rhel6] bad error handling when qemu has no 'read' permissions over {kernel,initrd} files [pass boot options])
  - Resolves: bz#625319
    (Failed to update the media in floppy device)
  - Resolves: bz#645342
    (Implement QEMU driver for modern sound device like Intel HDA)
  - Resolves: bz#653536
    (qemu-img convert poor performance)
  - Resolves: bz#653972
    (qcow2: Backport performance related patches)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.123.el6
changelog:
  - kvm-qcow2-Implement-bdrv_truncate-for-growing-images.patch [bz#613893]
  - kvm-qemu-img-Add-resize-command-to-grow-shrink-disk-imag.patch [bz#613893]
  - kvm-qemu-img-Fix-copy-paste-bug-in-documentation.patch [bz#613893]
  - Resolves: bz#613893
    ([RFE] qemu-io enable truncate function for qcow2.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.124.el6
changelog:
  - kvm-Fix-compilation-error-missing-include-statement.patch [bz#608548]
  - kvm-use-qemu_blockalign-consistently.patch [bz#608548]
  - kvm-raw-posix-handle-512-byte-alignment-correctly.patch [bz#608548]
  - kvm-virtio-blk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-scsi-disk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-ide-propagate-the-required-alignment.patch [bz#608548]
  - kvm-Support-marking-a-device-as-non-migratable.patch [bz#635954]
  - kvm-device-assignment-Register-as-un-migratable.patch [bz#635954]
  - Resolves: bz#608548
    (QEMU doesn't respect hardware sector size of underlying block device when doing O_DIRECT)
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.125.el6
changelog:
  - kvm-New-option-fake-machine.patch [bz#658288]
  - spec file code for --enable-fake-machine [bz#658288]
  - Resolves: bz#658288
    (Include (disabled by default) -fake-machine patch on qemu-kvm RPM spec)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.126.el6
changelog:
  - kvm-Fix-build-problem-with-recent-compilers.patch [bz#662633]
  - kvm-vhost-fix-infinite-loop-on-error-path.patch [bz#628634]
  - Resolves: bz#628634
    (vhost_net: untested error handling in vhost_net_start)
  - Resolves: bz#662633
    (Fix build problem with recent compilers)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.127.el6
changelog:
  - kvm-pci-import-Linux-pci_regs.h.patch [bz#624790]
  - kvm-pci-s-PCI_SUBVENDOR_ID-PCI_SUBSYSTEM_VENDOR_ID-g.patch [bz#624790]
  - kvm-pci-use-pci_regs.h.patch [bz#624790]
  - kvm-pci-add-API-to-add-capability-at-a-known-offset.patch [bz#624790]
  - kvm-pci-consolidate-pci_add_capability_at_offset-into-pc.patch [bz#624790]
  - kvm-pci-pci_default_cap_write_config-ignores-wmask.patch [bz#624790]
  - kvm-pci-Remove-pci_enable_capability_support.patch [bz#624790]
  - kvm-device-assignment-Use-PCI-capabilities-support.patch [bz#624790]
  - kvm-pci-Replace-used-bitmap-with-config-byte-map.patch [bz#624790]
  - kvm-pci-Remove-cap.length-cap.start-cap.supported.patch [bz#624790]
  - kvm-device-assignment-Move-PCI-capabilities-to-match-phy.patch [bz#624790]
  - kvm-pci-Remove-capability-specific-handlers.patch [bz#624790]
  - kvm-device-assignment-Make-use-of-config_map.patch [bz#624790]
  - kvm-device-assignment-Fix-off-by-one-in-header-check.patch [bz#624790]
  - kvm-pci-Remove-PCI_CAPABILITY_CONFIG_.patch [bz#624790]
  - kvm-pci-Error-on-PCI-capability-collisions.patch [bz#624790]
  - kvm-device-assignment-Error-checking-when-adding-capabil.patch [bz#624790]
  - kvm-device-assignment-pass-through-and-stub-more-PCI-cap.patch [bz#624790]
  - Resolves: bz#624790
    (pass through fails with KVM using Neterion Inc's X3100 Series 10GbE PCIe I/O Virtualized Server Adapter in Multifunction mode.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.128.el6
changelog:
  - kvm-virtio-invoke-set_status-callback-on-reset.patch [bz#623735]
  - kvm-virtio-net-unify-vhost-net-start-stop.patch [bz#623735]
  - kvm-tap-clear-vhost_net-backend-on-cleanup.patch [bz#623735]
  - kvm-tap-make-set_offload-a-nop-after-netdev-cleanup.patch [bz#623735]
  - Resolves: bz#623735
    (hot unplug of vhost net virtio NIC causes qemu segfault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.129.el6
changelog:
  - kvm-let-management-choose-whether-transparent-huge-pages.patch [bz#628308]
  - kvm-tap-generalize-code-for-different-vnet-header-len.patch [bz#616659]
  - kvm-tap-add-APIs-for-vnet-header-length.patch [bz#616659]
  - kvm-vhost_net-mergeable-buffers-support.patch [bz#616659]
  - kvm-vhost-Fix-address-calculation-in-vhost_dev_sync_regi.patch [bz#623552]
  - Resolves: bz#616659
    (mrg buffers: migration breaks between systems with/without vhost)
  - Resolves: bz#623552
    (SCP image fails from host to guest with vhost on when do migration)
  - Resolves: bz#628308
    ([RFE] let management choose whether transparent huge pages are used)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.130.el6
changelog:
  - kvm-Bug-632257-Duplicate-CPU-fea.tures-in-cpu-x86_64.con.patch [bz#632257]
  - kvm-BZ-647308-Support-Westmere-as-a-CPU-model-or-include.patch [bz#647308]
  - kvm-trace-Add-trace-events-file-for-declaring-trace-even.patch [bz#632722]
  - kvm-trace-Support-disabled-events-in-trace-events.patch [bz#632722]
  - kvm-trace-Add-user-documentation.patch [bz#632722]
  - kvm-trace-Trace-qemu_malloc-and-qemu_vmalloc.patch [bz#632722]
  - kvm-trace-Trace-virtio-blk-multiwrite-and-paio_submit.patch [bz#632722]
  - kvm-trace-Trace-virtqueue-operations.patch [bz#632722]
  - kvm-trace-Trace-port-IO.patch [bz#632722]
  - kvm-trace-Trace-entry-point-of-balloon-request-handler.patch [bz#632722]
  - kvm-trace-fix-a-typo.patch [bz#632722]
  - kvm-trace-fix-a-regex-portability-problem.patch [bz#632722]
  - kvm-trace-avoid-unnecessary-recompilation-if-nothing-cha.patch [bz#632722]
  - kvm-trace-Use-portable-format-strings.patch [bz#632722]
  - kvm-trace-Don-t-strip-lines-containing-arbitrarily.patch [bz#632722]
  - kvm-trace-Trace-bdrv_aio_-readv-writev.patch [bz#632722]
  - kvm-trace-remove-timestamp-files-when-cleaning-up.patch [bz#632722]
  - kvm-trace-Format-strings-must-begin-end-with-double-quot.patch [bz#632722]
  - kvm-apic-convert-debug-printf-statements-to-tracepoints.patch [bz#632722]
  - kvm-Add-a-DTrace-tracing-backend-targetted-for-SystemTAP.patch [bz#632722]
  - kvm-Add-support-for-generating-a-systemtap-tapset-static.patch [bz#632722]
  - kvm-trace-Trace-vm_start-vm_stop.patch [bz#632722]
  - spec file changes to enable trace support [bz#632722]
  - Resolves: bz#632257
    (Duplicate CPU fea.tures in cpu-x86_64.conf)
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)
  - Resolves: bz#647308
    (Support Westmere as a CPU model or included within existing models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.131.el6
changelog:
  - fix spec file to require systemtap, or configure won't enable the systemtap
    tapset
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.132.el6
changelog:
  - kvm-BZ-636494-cpu-check-does-not-correctly-enforce-CPUID.patch [bz#636494]
  - kvm-QDict-Introduce-qdict_get_qdict.patch [bz#647447]
  - kvm-monitor-QMP-Drop-info-hpet-query-hpet.patch [bz#647447]
  - kvm-QMP-Teach-basic-capability-negotiation-to-python-exa.patch [bz#647447]
  - kvm-QMP-Fix-python-helper-wrt-long-return-strings.patch [bz#647447]
  - kvm-QMP-update-query-version-documentation.patch [bz#647447]
  - kvm-Revert-QMP-Remove-leading-whitespace-in-package.patch [bz#647447]
  - kvm-QMP-monitor-update-do_info_version-to-output-broken-.patch [bz#647447]
  - kvm-QMP-Remove-leading-whitespace-in-package-again.patch [bz#647447]
  - kvm-QMP-doc-Add-Stability-Considerations-section.patch [bz#647447]
  - kvm-QMP-Update-README-file.patch [bz#647447]
  - kvm-QMP-Revamp-the-Python-class-example.patch [bz#647447]
  - kvm-QMP-Revamp-the-qmp-shell-script.patch [bz#647447]
  - kvm-QMP-Drop-vm-info-example-script.patch [bz#647447]
  - kvm-qemu-char-Introduce-Memory-driver.patch [bz#647447]
  - kvm-QMP-Introduce-Human-Monitor-passthrough-command.patch [bz#647447]
  - kvm-QMP-qmp-shell-Introduce-HMP-mode.patch [bz#647447]
  - kvm-PCI-Export-pci_map_option_rom.patch [bz#667188]
  - kvm-device-assignment-Allow-PCI-to-manage-the-option-ROM.patch [bz#667188]
  - kvm-virtio-serial-bus-bump-up-control-vq-size-to-32.patch [bz#656198]
  - kvm-Move-stdbool.h.patch [bz#635954]
  - kvm-savevm-Fix-no_migrate.patch [bz#635954]
  - kvm-device-assignment-Properly-terminate-vmsd.fields.patch [bz#635954]
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)
  - Resolves: bz#636494
    (-cpu check  does not correctly enforce CPUID items)
  - Resolves: bz#647447
    (QMP:  provide a hmp_passthrough command to allow execution of non-converted commands)
  - Resolves: bz#656198
    (Can only see 16 virtio ports while assigned 30 virtio serial ports on commandLine)
  - Resolves: bz#667188
    (device-assignment leaks option ROM memory)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.133.el6
changelog:
  - kvm-spice-rip-out-all-the-old-non-upstream-spice-bits.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Use-display-types-for-local-display-only.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-pflib-PixelFormat-conversion-library.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-support-for-generic-notifier-lists.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Rewrite-mouse-handlers-to-use-QTAILQ-and-to-have-an-.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-kbd_mouse_has_absolute.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-notifier-for-mouse-mode-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-sdl-use-mouse-mode-notifier.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-input-make-vnc-use-mouse-mode-notifiers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-make-sure-to-send-pointer-type-change-event-on-S.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vmmouse-adapt-to-mouse-handler-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-wacom-tablet-activate-event-handlers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-cursor-add-cursor-functions.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-use-new-cursor-struct-functions-for-vmware-vga-and-s.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-spice-into-the-configure-file-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-bits-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-keyboard-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-mouse-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-simple-display-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-tablet-support.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-tls-support-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-make-compression-configurable.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-channel-security.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-the-listening-address.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-misc-config-options.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-audio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-copyright-to-spiceaudio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-watching-for-write-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-warning-when-building-with-spice-0.6..patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-display-replace-private-lock-with-qemu-mutex.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qxl-device-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-connection-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qmp-query-spice-and-hmp-info-spice-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Revert-vnc-support-password-expire.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-auth-reject-cleanup.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-support-password-expire-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-spice-add-set_passwd-monitor-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-qdev-Track-runtime-machine-modifications.patch [bz#653591]
  - kvm-rtl8139-Use-subsection-to-restrict-migration-after-h.patch [bz#653591]
  - kvm-add-migration-state-change-notifiers.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-vnc-client-migration.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-vnc-spice-fix-never-and-now-expire_time.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-zap-spice-0.4-migration-compatibility-bits.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-add-chardev-v4.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-qxl-locking-fix.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qmp-events-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-monitor-commands-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - Resolves: bz#615947
    (RFE QMP: support of query spice for guest)
  - Resolves: bz#631832
    (manpage is missing spice options)
  - Resolves: bz#632458
    (Guest may core dump when booting with spice and qxl.)
  - Resolves: bz#634153
    (coredumped when enable qxl without spice)
  - Resolves: bz#642131
    (qemu-kvm aborts of 'qemu_spice_display_create_update: unhandled depth: 0 bits')
  - Resolves: bz#647865
    (support 2560x1440 in qxl)
  - Resolves: bz#653591
    ([RHEL6 Snap13]: Hot-unplugging issue noticed with rtl8139nic after migration of KVM guest.)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.134.el6
changelog:
  - kvm-switch-stdvga-to-pci-vgabios.patch [bz#638468]
  - kvm-switch-vmware_vga-to-pci-vgabios.patch [bz#638468]
  - kvm-add-rhel6.1.0-machine-type.patch [bz#638468]
  - kvm-vgabios-update-handle-compatibility-with-older-qemu-.patch [bz#638468]
  - kvm-qemu-io-Fix-error-messages.patch [bz#672187]
  - kvm-wdt_i6300esb-register-a-reset-function.patch [bz#637180]
  - kvm-Watchdog-disable-watchdog-timer-when-hard-rebooting-.patch [bz#637180]
  - kvm-usb-linux-increase-buffer-for-USB-control-requests.patch [bz#672720]
  - kvm-device-assignment-Cap-number-of-devices-we-can-have-.patch [bz#670787]
  - kvm-clear-vapic-after-reset.patch [bz#669268]
  - kvm-add-support-for-protocol-driver-create_options.patch [bz#637701]
  - kvm-qemu-img-avoid-calling-exit-1-to-release-resources-p.patch [bz#637701]
  - kvm-Use-qemu_mallocz-instead-of-calloc-in-img_convert.patch [bz#637701]
  - kvm-img_convert-Only-try-to-free-bs-entries-if-bs-is-val.patch [bz#637701]
  - kvm-Consolidate-printing-of-block-driver-options.patch [bz#637701]
  - kvm-Fix-formatting-and-missing-braces-in-qemu-img.c.patch [bz#637701]
  - kvm-Fail-if-detecting-an-unknown-option.patch [bz#637701]
  - kvm-Make-error-handling-more-consistent-in-img_create-an.patch [bz#637701]
  - kvm-qemu-img-Deprecate-obsolete-6-and-e-options.patch [bz#637701]
  - kvm-qemu-img-Free-option-parameter-lists-in-img_create.patch [bz#637701]
  - kvm-qemu-img-Fail-creation-if-backing-format-is-invalid.patch [bz#637701]
  - kvm-Introduce-strtosz-library-function-to-convert-a-stri.patch [bz#637701]
  - kvm-Introduce-strtosz_suffix.patch [bz#637701]
  - kvm-qemu-img.c-Clean-up-handling-of-image-size-in-img_cr.patch [bz#637701]
  - kvm-qemu-img.c-Re-factor-img_create.patch [bz#637701]
  - kvm-Introduce-do_snapshot_blkdev-and-monitor-command-to-.patch [bz#637701]
  - kvm-Prevent-creating-an-image-with-the-same-filename-as-.patch [bz#637701]
  - kvm-qemu-option-Fix-uninitialized-value-in-append_option.patch [bz#637701]
  - kvm-bdrv_img_create-use-proper-errno-return-values.patch [bz#637701]
  - kvm-block-Use-backing-format-driver-during-image-creatio.patch [bz#637701]
  - kvm-Make-strtosz-return-int64_t-instead-of-ssize_t.patch [bz#637701]
  - kvm-strtosz-use-unsigned-char-and-switch-to-qemu_isspace.patch [bz#637701]
  - kvm-strtosz-use-qemu_toupper-to-simplify-switch-statemen.patch [bz#637701]
  - kvm-strtosz-Fix-name-confusion-in-use-of-modf.patch [bz#637701]
  - kvm-strtosz-Use-suffix-macros-in-switch-statement.patch [bz#637701]
  - kvm-do_snapshot_blkdev-error-on-missing-snapshot_file-ar.patch [bz#637701]
  - kvm-pci-memory-leak-of-PCIDevice-rom_file.patch [bz#672229]
  - Resolves: bz#637180
    (watchdog timer isn't reset when qemu resets)
  - Resolves: bz#637701
    (RFE - support live snapshot of a subset of disks without RAM)
  - Resolves: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)
  - Resolves: bz#669268
    (WinXP hang when reboot after setup copies files to the installation folders)
  - Resolves: bz#670787
    (Hot plug the 14st VF to guest causes guest shut down)
  - Resolves: bz#672187
    (Improper responsive message when shrinking qcow2 image)
  - Resolves: bz#672229
    (romfile memory leak)
  - Resolves: bz#672720
    (getting 'ctrl buffer too small' error on USB passthrough)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.135.el6
changelog:
  - kvm-Bug-625333-qemu-treatment-of-nodefconfig-and-readcon.patch [bz#625333]
  - kvm-ide-Factor-ide_flush_cache-out.patch [bz#670539]
  - kvm-ide-Handle-flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Respect-werror-option-for-flushes.patch [bz#670539]
  - kvm-block-Allow-bdrv_flush-to-return-errors.patch [bz#670539]
  - kvm-ide-Handle-immediate-bdrv_aio_flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Handle-immediate-flush-failure-properly.patch [bz#670539]
  - kvm-vhost-error-code.patch [bz#633394]
  - kvm-vhost-fix-up-irqfd-support.patch [bz#633394]
  - kvm-virtio-pci-mask-notifier-error-handling-fixups.patch [bz#633394]
  - kvm-test-for-ioeventfd-support-on-old-kernels.patch [bz#633394]
  - kvm-virtio-pci-Rename-bugs-field-to-flags.patch [bz#633394]
  - kvm-virtio-move-vmstate-change-tracking-to-core.patch [bz#633394]
  - kvm-virtio-pci-Use-ioeventfd-for-virtqueue-notify.patch [bz#633394]
  - kvm-ioeventfd-error-handling-cleanup.patch [bz#633394]
  - kvm-remove-redhat-disable-THP.patch [bz#635418]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-qdevfy.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-pci-allow-devices-being-tagge.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-piix-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-vga-tag-as-not-hotplugable-v3.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-qxl-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-expose-no_hotplug-.patch [bz#498774]
  - kvm-char-Split-out-tcp-socket-close-code-in-a-separate-f.patch [bz#621484]
  - kvm-char-mark-socket-closed-if-write-fails-with-EPIPE.patch [bz#621484]
  - Resolves: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#625333
    (qemu treatment of -nodefconfig and -readconfig problematic for debug)
  - Resolves: bz#633394
    ([6.1 FEAT] virtio-blk ioeventfd support)
  - Resolves: bz#635418
    (Allow enable/disable ksm per VM)
  - Resolves: bz#670539
    (Block devices don't implement correct flush error handling)
  - Related: bz#635418
    (Allow enable/disable ksm per VM)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.136.el6
changelog:
  - kvm-Introduce-fw_name-field-to-DeviceInfo-structure.patch [bz#643687]
  - kvm-Introduce-new-BusInfo-callback-get_fw_dev_path.patch [bz#643687]
  - kvm-Keep-track-of-ISA-ports-ISA-device-is-using-in-qdev.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-ISA-bus-in-qdev.patch [bz#643687]
  - kvm-Store-IDE-bus-id-in-IDEBus-structure-for-easy-access.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-IDE-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-system-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-pci-bus.patch [bz#643687]
  - kvm-Record-which-USBDevice-USBPort-belongs-too.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-usb-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-scsi-bus.patch [bz#643687]
  - kvm-Add-bootindex-parameter-to-net-block-fd-device.patch [bz#643687]
  - kvm-Change-fw_cfg_add_file-to-get-full-file-path-as-a-pa.patch [bz#643687]
  - kvm-Add-bootindex-for-option-roms.patch [bz#643687]
  - kvm-Add-notifier-that-will-be-called-when-machine-is-ful.patch [bz#643687]
  - kvm-Pass-boot-device-list-to-firmware.patch [bz#643687]
  - kvm-close-all-the-block-drivers-before-the-qemu-process-.patch [bz#635527]
  - kvm-qemu-img-snapshot-Use-writeback-caching.patch [bz#635527]
  - kvm-qcow2-Add-QcowCache.patch [bz#635527]
  - kvm-qcow2-Use-QcowCache.patch [bz#635527]
  - kvm-qcow2-Batch-flushes-for-COW.patch [bz#635527]
  - Commited 'Remove vhost blacklisting' by hand [bz#665299]
  - kvm-add-bootindex-parameter-to-assigned-device.patch [bz#643687]
  - kvm-tap-safe-sndbuf-default.patch [bz#674539]
  - kvm-do-not-pass-NULL-to-strdup.patch [bz#643687]
  - kvm-Use-Makefile-to-install-qemu-kvm-in-correct-location.patch [bz#672441]
  - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch [bz#667976]
  - kvm-vhost-force-vhost-off-for-non-MSI-guests.patch [bz#674562]
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#643687
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#665299
    (load vhost-net by default)
  - Resolves: bz#667976
    (CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication [rhel-6.1])
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#674539
    (slow guests block other guests on the same lan)
  - Resolves: bz#674562
    (disable vhost-net for rhel5 and older guests)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.137.el6
changelog:
  - kvm-Add-support-for-o-octet-bytes-format-as-monitor-para.patch [bz#515775]
  - kvm-block-add-block_resize-monitor-command.patch [bz#515775]
  - kvm-block-tell-drivers-about-an-image-resize.patch [bz#515775]
  - kvm-virtio-blk-tell-the-guest-about-size-changes.patch [bz#515775]
  - kvm-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-usb-ccid-add-CCID-bus.patch [bz#641833]
  - kvm-introduce-libcacard-vscard_common.h.patch [bz#641833]
  - kvm-ccid-add-passthru-card-device.patch [bz#641833]
  - kvm-libcacard-initial-commit.patch [bz#641833]
  - kvm-ccid-add-ccid-card-emulated-device-v2.patch [bz#641833]
  - kvm-ccid-add-docs.patch [bz#641833]
  - kvm-ccid-configure-fix-enable-disable-flags.patch [bz#641833]
  - Note: smartcard spec patch applied by hand [bz#641833]
  - Resolves: bz#515775
    ([RFE] Include support for online resizing of storage and network block devices)
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.138.el6
changelog:
  - kvm-virtio-console-Factor-out-common-init-between-consol.patch [bz#588916]
  - kvm-virtio-console-Remove-unnecessary-braces.patch [bz#588916]
  - kvm-virtio-serial-Use-a-struct-to-pass-config-informatio.patch [bz#588916]
  - kvm-Fold-send_all-wrapper-unix_write-into-one-function.patch [bz#588916]
  - kvm-char-Add-a-QemuChrHandlers-struct-to-initialise-char.patch [bz#588916]
  - kvm-virtio-serial-move-out-discard-logic-in-a-separate-f.patch [bz#588916]
  - kvm-virtio-serial-Make-sure-virtqueue-is-ready-before-di.patch [bz#588916]
  - kvm-virtio-serial-Don-t-copy-over-guest-buffer-to-host.patch [bz#588916]
  - kvm-virtio-serial-Let-virtio-serial-bus-know-if-all-data.patch [bz#588916]
  - kvm-virtio-serial-Add-support-for-flow-control.patch [bz#588916]
  - kvm-virtio-serial-Add-rhel6.0.0-compat-property-for-flow.patch [bz#588916]
  - kvm-virtio-serial-save-restore-new-fields-in-port-struct.patch [bz#588916]
  - kvm-Convert-io-handlers-to-QLIST.patch [bz#588916]
  - kvm-iohandlers-Add-enable-disable_write_fd_handler-funct.patch [bz#588916]
  - kvm-char-Add-framework-for-a-write-unblocked-callback.patch [bz#588916]
  - kvm-char-Update-send_all-to-handle-nonblocking-chardev-w.patch [bz#588916]
  - kvm-char-Equip-the-unix-tcp-backend-to-handle-nonblockin.patch [bz#588916]
  - kvm-char-Throttle-when-host-connection-is-down.patch [bz#588916 bz#621484]
  - kvm-virtio-console-Enable-port-throttling-when-chardev-i.patch [bz#588916]
  - kvm-Add-spent-time-to-migration.patch [bz#643970]
  - kvm-No-need-to-iterate-if-we-already-are-over-the-limit.patch [bz#643970]
  - kvm-don-t-care-about-TLB-handling.patch [bz#643970]
  - kvm-Only-calculate-expected_time-for-stage-2.patch [bz#643970]
  - kvm-Count-nanoseconds-with-uint64_t-not-doubles.patch [bz#643970]
  - kvm-Exit-loop-if-we-have-been-there-too-long.patch [bz#643970]
  - kvm-Maintaing-number-of-dirty-pages.patch [bz#643970]
  - kvm-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.139.el6
changelog:
  - kvm-Revert-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Related: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.140.el6
changelog:
  - spec file: require new vgabios images (stdvga and vmware) [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.141.el6
changelog:
  - spec file: symlink to stdvga and vmware vgabios images [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.142.el6
changelog:
  - kvm-ide-Remove-redundant-IDEState-member-conf.patch [bz#654682]
  - kvm-ide-Split-ide_init1-off-ide_init2-v2.patch [bz#654682]
  - kvm-ide-Change-ide_init_drive-to-require-valid-dinfo-arg.patch [bz#654682]
  - kvm-ide-Split-non-qdev-code-off-ide_init2.patch [bz#654682]
  - kvm-qdev-Don-t-leak-string-property-value-on-hot-unplug.patch [bz#654682]
  - kvm-blockdev-New-drive_get_by_blockdev-v2.patch [bz#654682]
  - kvm-blockdev-Clean-up-automatic-drive-deletion-v2.patch [bz#654682]
  - kvm-qdev-Decouple-qdev_prop_drive-from-DriveInfo-v2.patch [bz#654682]
  - kvm-block-Catch-attempt-to-attach-multiple-devices-to-a-.patch [bz#654682]
  - kvm-Implement-drive_del-to-decouple-block-removal-from-d.patch [bz#654682]
  - kvm-blockdev-check-dinfo-ptr-before-using-v2.patch [bz#654682]
  - kvm-qcow2-Add-full-image-preallocation-option.patch [bz#634652]
  - kvm-savevm-fix-corruption-in-vmstate_subsection_load.patch [bz#671100]
  - kvm-virtio-serial-Disable-flow-control-for-RHEL-5.0-mach.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#634652
    ([RFE] qemu-img qcow2 'pre-allocation' should not only pre-allocate meta-data, but also data)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)
  - Resolves: bz#671100
    (possible migration failure due to erroneous interpretation of subsection)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.143.el6
changelog:
  - kvm-fix-syntax-error-introduced-by-virtio-serial-Disable.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.144.el6
changelog:
  - kvm-V3-Bug-619259-qemu-cpu-check-enforce-should-work-eve.patch [bz#619259]
  - kvm-Bug-675229-Install-of-cpu-x86_64.conf-bombs-for-an-o.patch [bz#675229]
  - kvm-e1000-multi-buffer-packet-support.patch [bz#602205]
  - Resolves: bz#602205
    (Could not ping guest successfully after changing e1000 MTU)
  - Resolves: bz#619259
    (qemu "-cpu [check | enforce ]" should work even when a model name is not specified on the command line)
  - Resolves: bz#675229
    (Install of cpu-x86_64.conf bombs for an out of tree build..)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.145.el6
changelog:
  - kvm-make-tsc-stable-over-migration-and-machine-start.patch [bz#662386]
  - kvm-qemu-kvm-Close-all-block-drivers-on-quit.patch [bz#635527]
  - kvm-net-notify-peer-about-link-status-change.patch [bz#676015]
  - kvm-vhost-disable-on-tap-link-down.patch [bz#676015]
  - kvm-Add-config-devices.h-again.patch [bz#616187]
  - kvm-Add-CONFIG_VMWARE_VGA-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMMOUSE-option-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMPORT-option-v2.patch [bz#616187]
  - kvm-blockdev-Fix-drive_del-not-to-crash-when-drive-is-no.patch [bz#677222]
  - Resolves: bz#616187
    (vmware device emulation enabled but not supported)
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#662386
    (tsc clock breaks migration result stability)
  - Resolves: bz#676015
    (set_link <tap> off not working with vhost-net)
  - Resolves: bz#677222
    (segment fault happens after hot drive add then drive delete)
  - Related: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.146.el6
changelog:
  - kvm-USB-HID-does-not-support-Set_Idle.patch [bz#665025]
  - kvm-add-event-queueing-to-USB-HID.patch [bz#665025]
  - Spec patch to reenable CONFIG_VMMOUSE and CONFIG_VMPORT [bz#616187 (the original feature-disable bug) bz#677712 bz#677712 (the new broken migration bug)]
  - Resolves: bz#665025
    (lost double clicks on slow connections)
  - Resolves: bz#677712
    (disabling vmware device emulation breaks old->new migration)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.147.el6
changelog:
  - kvm-e1000-clear-EOP-for-multi-buffer-descriptors.patch [bz#678338]
  - kvm-e1000-verify-we-have-buffers-upfront.patch [bz#678338]
  - kvm-tracetool-Add-optional-argument-to-specify-dtrace-pr.patch [bz#672441]
  - kvm-Specify-probe-prefix-to-make-dtrace-probes-use-qemu-.patch [bz#672441]
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#678338
    (e1000 behaving out of spec after increasing MTU)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.148.el6
changelog:
  - kvm-ide-Make-ide_init_drive-return-success.patch [bz#655735]
  - kvm-ide-Reject-readonly-drives-unless-CD-ROM.patch [bz#655735]
  - kvm-ide-Reject-invalid-CHS-geometry.patch [bz#655735]
  - kvm-Move-KVM-and-Xen-global-flags-to-vl.c.patch [bz#662701]
  - kvm-qemu-kvm-Switch-to-upstream-enable-kvm-semantics.patch [bz#662701]
  - Update BuildRequire for newer spice-server [bz#672035]
  - Resolves: bz#655735
    (qemu-kvm (or libvirt?) permission denied errors when exporting readonly IDE disk to guest)
  - Resolves: bz#662701
    (Option -enable-kvm should exit when KVM is unavailable)
  - Related: bz#672035
    (spice-server: rebase to upstream 0.8 for RHEL-6.1)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.149.el6
changelog:
  - kvm-Fix-error-message-in-drive_init.patch [bz#607598]
  - kvm-block-Use-error-codes-from-lower-levels-for-error-me.patch [bz#607598]
  - kvm-device-assignment-Don-t-skip-closing-unmapped-resour.patch [bz#680058]
  - Resolves: bz#607598
    (Incorrect & misleading error reporting when failing to open a drive due to block driver whitelist denial)
  - Resolves: bz#680058
    (can't hotplug second vf successful with message "Too many open files")


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.150.el6
changelog:
  - kvm-Improve-error-handling-in-do_snapshot_blkdev.patch [bz#676529]
  - Resolves: bz#676529
    (core dumped when save snapshot to non-exist disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.151.el6
changelog:
  - kvm-net-Add-the-missing-option-declaration-of-vhostforce.patch [bz#683295]
  - kvm-vhost-fix-dirty-page-handling.patch [bz#684076]
  - kvm-block-qcow2.c-rename-qcow_-functions-to-qcow2_.patch [bz#688119]
  - kvm-Add-proper-errno-error-return-values-to-qcow2_open.patch [bz#688119]
  - kvm-QCOW2-bug-fix-read-base-image-beyond-its-size.patch [bz#688147]
  - kvm-qcow2-Fix-error-handling-for-immediate-backing-file-.patch [bz#688146]
  - kvm-qcow2-Fix-error-handling-for-reading-compressed-clus.patch [bz#688146]
  - kvm-qerror-Add-QERR_UNKNOWN_BLOCK_FORMAT_FEATURE.patch [bz#688119]
  - kvm-qcow2-Report-error-for-version-2.patch [bz#688119]
  - kvm-qcow2-Fix-order-in-L2-table-COW.patch [bz#688146]
  - kvm-pci-assign-Catch-missing-KVM-support.patch [bz#688428]
  - Resolves: bz#683295
    (qemu-kvm: Invalid parameter 'vhostforce')
  - Resolves: bz#684076
    (Segfault occurred during migration)
  - Resolves: bz#688119
    (qcow2: qcow2_open doesn't return useful errors)
  - Resolves: bz#688146
    (qcow2: Some paths fail to handle I/O errors)
  - Resolves: bz#688147
    (qcow2: Reads fail with backing file smaller than snapshot)
  - Resolves: bz#688428
    (qemu-kvm -no-kvm segfaults on pci_add)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.152.el6
changelog:
  - kvm-device-assignment-register-a-reset-function.patch [bz#685147]
  - kvm-device-assignment-Reset-device-on-system-reset.patch [bz#685147]
  - Resolves: bz#685147
    (guest with assigned nic got kernel panic when send system_reset signal in QEMU monitor)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.153.el6
changelog:
  - kvm-Revert-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#678208]
  - kvm-qxl-spice-display-move-pipe-to-ssd.patch [bz#678208]
  - kvm-qxl-implement-get_command-in-vga-mode-without-locks.patch [bz#678208]
  - kvm-qxl-spice-remove-qemu_mutex_-un-lock_iothread-around.patch [bz#678208]
  - kvm-hw-qxl-render-drop-cursor-locks-replace-with-pipe.patch [bz#678208]
  - kvm-spice-qemu-char.c-add-throttling.patch [bz#672191]
  - kvm-spice-qemu-char.c-remove-intermediate-buffer.patch [bz#672191]
  - kvm-spice-qemu-char-Fix-flow-control-in-client-guest-dir.patch [bz#672191]
  - kvm-chardev-Allow-frontends-to-notify-backends-of-guest-.patch [bz#688572]
  - kvm-virtio-console-notify-backend-of-guest-open-close.patch [bz#688572]
  - kvm-spice-chardev-listen-to-frontend-guest-open-close.patch [bz#688572]
  - kvm-Fix-performance-regression-in-qemu_get_ram_ptr.patch [bz#690267]
  - kvm-virtio-pci-fix-bus-master-work-around-on-load.patch [bz#682243]
  - kvm-Use-getaddrinfo-for-migration.patch [bz#680356]
  - kvm-net-socket-allow-ipv6-for-net_socket_listen_init-and.patch [bz#680356]
  - kvm-block-Fix-serial-number-assignment.patch [bz#688058]
  - Resolves: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)
  - Resolves: bz#678208
    (qemu-kvm hangs when installing guest with -spice option)
  - Resolves: bz#680356
    (Live migration failed in ipv6 environment)
  - Resolves: bz#682243
    ([KVM] pci hotplug after migration breaks virtio_net.)
  - Resolves: bz#688058
    (Drive serial number gets truncated)
  - Resolves: bz#688572
    (spice-server does not switch back to server mouse mode if guest spice-agent dies.)
  - Resolves: bz#690267
    (Backport qemu_get_ram_ptr() performance improvement)
  - Related: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.154.el6
changelog:
  - kvm-add-a-service-to-reap-zombies-use-it-in-SLIRP.patch [bz#678524]
  - kvm-Don-t-allow-multiwrites-against-a-block-device-witho.patch [bz#654682]
  - kvm-Do-not-delete-BlockDriverState-when-deleting-the-dri.patch [bz#654682]
  - kvm-virtio-serial-don-t-crash-on-invalid-input.patch [bz#690174]
  - Resolves: bz#678524
    (Exec based migration randomly fails, particularly under high load)
  - Resolves: bz#690174
    (virtio-serial qemu-kvm crash on invalid input in migration)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.155.el6
changelog:
  - kvm-configure-fix-out-of-tree-build-with-enable-spice.patch [bz#641833]
  - kvm-ccid-card-emulated-replace-DEFINE_PROP_ENUM-with-DEF.patch [bz#641833]
  - kvm-Revert-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-Revert-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-Revert-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-ccid-v18_upstream-v25-cleanup.patch [bz#641833]
  - kvm-libcacard-vscard_common.h-upstream-v18-v25-diff.patch [bz#641833]
  - kvm-ccid-card-passthru-upstream-v18-upstream-v25-diff.patch [bz#641833]
  - kvm-qemu-thread-add-qemu_mutex-cond_destroy-and-qemu_mut.patch [bz#641833]
  - kvm-adding-qemu-thread.o-to-obj-y.patch [bz#641833]
  - kvm-ccid-card-emulated-v18-v25.patch [bz#641833]
  - kvm-libcacard-v18-upstream-v25.patch [bz#641833]
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.156.el6
changelog:
  - kvm-Revert-net-socket-allow-ipv6-for-net_socket_listen_i.patch [bz#680356]
  - kvm-Revert-Use-getaddrinfo-for-migration.patch [bz#680356]
  - Related: bz#680356
    (Live migration failed in ipv6 environment)
  - Fixes bz#694196
    (RHEL 6.1 qemu-kvm: Specifying ipv6 addresses breaks migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.157.el6
changelog:
  - kvm-qemu-img-rebase-Fix-read-only-new-backing-file.patch [bz#693741]
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#681777]
  - kvm-block-Do-not-cache-device-size-for-removable-media.patch [bz#687900]
  - kvm-cdrom-Allow-the-TEST_UNIT_READY-command-after-a-cdro.patch [bz#683877]
  - kvm-cdrom-Make-disc-change-event-visible-to-guests.patch [bz#683877]
  - Resolves: bz#681777
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#683877
    (RHEL6 guests fail to update cdrom block size on media change)
  - Resolves: bz#687900
    (qemu host cdrom support not properly updating guests on media changes at physical CD/DVD drives)
  - Resolves: bz#693741
    (qemu-img re-base  fail with read-only new backing file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.158.el6
changelog:
  - kvm-bz-691704-vhost-skip-VGA-memory-regions.patch [bz#691704]
  - kvm-ide-atapi-add-support-for-GET-EVENT-STATUS-NOTIFICAT.patch [bz#558256]
  - kvm-atapi-Allow-GET_EVENT_STATUS_NOTIFICATION-after-medi.patch [bz#558256]
  - kvm-atapi-Move-GET_EVENT_STATUS_NOTIFICATION-command-han.patch [bz#558256]
  - kvm-atapi-GESN-Use-structs-for-commonly-used-field-types.patch [bz#558256]
  - kvm-atapi-GESN-Standardise-event-response-handling-for-f.patch [bz#558256]
  - kvm-atapi-GESN-implement-media-subcommand.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#691704
    (Failed to boot up windows guest with huge memory and cpu and vhost=on within 30 mins)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.159.el6
changelog:
  - kvm-acpi_piix4-Maintain-RHEL6.0-migration.patch [bz#694095]
  - Resolves: bz#694095
    (Migration fails when migrate guest from RHEL6.1 host to RHEL6 host with the same libvirt version)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6
changelog:
  - kvm-virtio-blk-fail-unaligned-requests.patch [bz#698910]
  - kvm-Ignore-pci-unplug-requests-for-unpluggable-devices.patch [bz#699789]
  - Resolves: bz#698910
    (CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests [rhel-6.1])
  - Resolves: bz#699789
    (CVE-2011-1751 acpi_piix4: missing hotplug check during device removal [rhel-6.1])


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.161.el6
changelog:
  - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch [bz#700859]
  - Resolves: bz#700859
    (Fix phys memory client for vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.162.el6
changelog:
  - kvm-virtio-serial-Disallow-generic-ports-at-id-0.patch [bz#700511]
  - kvm-virtio-serial-Don-t-clear-have_data-pointer-after-un.patch [bz#681736]
  - kvm-char-Prevent-multiple-devices-opening-same-chardev.patch [bz#656779]
  - kvm-char-Allow-devices-to-use-a-single-multiplexed-chard.patch [bz#656779]
  - kvm-char-Detect-chardev-release-by-NULL-handlers-as-well.patch [bz#656779]
  - kvm-virtio-console-Keep-chardev-open-for-other-users-aft.patch [bz#700512]
  - kvm-Revert-cdrom-Make-disc-change-event-visible-to-guest.patch [bz#700065]
  - kvm-Revert-cdrom-Allow-the-TEST_UNIT_READY-command-after.patch [bz#700065]
  - kvm-atapi-Add-medium-ready-to-medium-not-ready-transitio.patch [bz#700065]
  - Resolves: bz#656779
    (Core dumped when hot plug/un-plug virtio serial port to the same chardev)
  - Resolves: bz#681736
    (Guest->Host communication stops for other ports after one port is unplugged)
  - Resolves: bz#700065
    (Switch to upstream solution for cdrom patches)
  - Resolves: bz#700511
    (virtio-serial: Disallow generic ports at id 0)
  - Resolves: bz#700512
    (Keep chardev open for later reuse)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.163.el6
changelog:
  - kvm-qemu-img-Initial-progress-printing-support.patch [bz#621482]
  - kvm-Add-dd-style-SIGUSR1-progress-reporting.patch [bz#621482]
  - kvm-Remove-obsolete-enabled-variable-from-progress-state.patch [bz#621482]
  - kvm-qemu-progress.c-printf-isn-t-signal-safe.patch [bz#621482]
  - kvm-qemu-img.c-Remove-superfluous-parenthesis.patch [bz#621482]
  - kvm-Add-documentation-for-qemu_progress_-init-print.patch [bz#621482]
  - kvm-Add-qerror-message-if-the-change-target-filename-can.patch [bz#655719]
  - Resolves: bz#621482
    ([RFE] Be able to get progress from qemu-img)
  - Resolves: bz#655719
    (no error pops when change cd to non-exist file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.164.el6
changelog:
  - kvm-e1000-check-buffer-availability.patch [bz#684127]
  - kvm-Add-error-message-for-loading-snapshot-without-VM-st.patch [bz#680378]
  - kvm-BZ710046-qemu-kvm-prints-warning-Using-CPU-model.patch [bz#710046]
  - Resolves: bz#680378
    (no error message when loading zero size internal snapshot)
  - Resolves: bz#684127
    (e1000:Execute multiple netperf clients caused system call interrupted)
  - Resolves: bz#710046
    (qemu-kvm prints warning "Using CPU model [...]" (with patch))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.165.el6
changelog:
  - kvm-ide-Factor-ide_dma_set_inactive-out.patch [bz#701775]
  - kvm-ide-Set-bus-master-inactive-on-error.patch [bz#701775]
  - kvm-ide-cleanup-warnings.patch [bz#701775]
  - kvm-virtio-correctly-initialize-vm_running.patch [bz#701442]
  - kvm-Add-virtio-disk-identification-support.patch [bz#710349]
  - kvm-spice-add-option-for-disabling-copy-paste-support-rh.patch [bz#693645]
  - Resolves: bz#693645
    (RFE: add spice option to enable/disable copy paste)
  - Resolves: bz#701442
    (vhost-net not enabled on hotplug)
  - Resolves: bz#701775
    (KVM: stdio is flooded)
  - Resolves: bz#710349
    (Backport serial number support for virtio-blk devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.166.el6
changelog:
  - kvm-virtio-guard-against-negative-vq-notifies.patch [bz#707094]
  - kvm-blockdev-Belatedly-remove-MAX_DRIVES.patch [bz#627585]
  - kvm-blockdev-Hide-QEMUMachine-from-drive_init.patch [bz#627585]
  - kvm-qdev-Move-declaration-of-qdev_init_bdrv-into-qdev.h.patch [bz#627585]
  - kvm-blockdev-Collect-block-device-code-in-new-blockdev.c.patch [bz#627585]
  - kvm-Fix-regression-for-drive-file.patch [bz#627585]
  - kvm-block-Move-error-actions-from-DriveInfo-to-BlockDriv.patch [bz#627585]
  - kvm-blockdev-Fix-error-message-for-invalid-drive-CHS.patch [bz#627585]
  - kvm-blockdev-Make-drive_init-use-error_report.patch [bz#627585]
  - kvm-blockdev-Put-BlockInterfaceType-names-and-max_devs-i.patch [bz#627585]
  - kvm-blockdev-Fix-regression-in-drive-if-scsi-index-N.patch [bz#627585]
  - kvm-blockdev-Make-drive_add-take-explicit-type-index-par.patch [bz#627585]
  - kvm-blockdev-Factor-drive_index_to_-bus-unit-_id-out-of-.patch [bz#627585]
  - kvm-blockdev-New-drive_get_by_index.patch [bz#627585]
  - kvm-blockdev-Reject-multiple-definitions-for-the-same-dr.patch [bz#627585]
  - kvm-blockdev-Replace-drive_add-s-fmt-.-by-optstr-paramet.patch [bz#627585]
  - kvm-blockdev-Fix-drive_add-for-drives-without-media.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_uninit.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_init-error-paths.patch [bz#627585]
  - kvm-vhost-fix-double-free-on-device-stop.patch [bz#699635]
  - kvm-QMP-QError-New-QERR_UNSUPPORTED.patch [bz#644919]
  - kvm-QMP-add-inject-nmi-qmp-command.patch [bz#644919]
  - kvm-HMP-Use-QMP-inject-nmi-implementation.patch [bz#644919]
  - Resolves: bz#627585
    (Improve error messages for bad options in -drive and -device)
  - Resolves: bz#644919
    (RFE: QMP command to trigger an NMI in the guest)
  - Resolves: bz#699635
    ([REG][6.1] After executing virsh dump with --live option and the completion, the subsequent virsh dump command to the same domain behaves abnormally)
  - Resolves: bz#707094
    (qemu-kvm: OOB memory access caused by negative vq notifies [rhel-6.2])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.167.el6
changelog:
  - kvm-qemu-img-create-Fix-displayed-default-cluster-size.patch [bz#570830]
  - kvm-Fix-the-RARP-protocol-ID.patch [bz#715141]
  - Resolves: bz#570830
    (The 'cluster_size' shows wrong size to zero when creating a qcow2 without specify the option)
  - Resolves: bz#715141
    (Wrong Ethertype for RARP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.168.el6
changelog:
  - kvm-vnc-fix-numlock-capslock-tracking.patch [bz#599306]
  - kvm-Add-an-isa-device-for-SGA.patch [bz#684949]
  - kvm-pc-add-rhel-6.2-pc-and-make-it-the-default.patch [bz#716906]
  - Resolves: bz#599306
    (Some strange behaviors on key's appearance viewed by using vnc)
  - Resolves: bz#684949
    ([RFE] Ability to display VM BIOS messages on boot)
  - Resolves: bz#716906
    (add 6.2 machine type)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.169.el6
changelog:
  - kvm-rtl8139-cleanup-FCS-calculation.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-extraction.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-insertion.patch [bz#583922]
  - kvm-usb-serial-Fail-instead-of-crash-when-chardev-is-mis.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-exit-notifiers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-usb_del-command.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-exit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Store-devpath-into-USBHostDevice-when-usb_.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_get_configuration-fu.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-active-configuration-from-sysfs-ra.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-data-structs-and-helpers-for-usb-descriptors.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-serial-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-scsi-disk-fix-build-disable-cdrom-emulation.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-enable-usb-storage-scsi-bus-scsi-disk.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-wacom-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bluetooth-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-descriptors-add-settable-strings.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-serial-number-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-network-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_SET_ADDRESS-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_-GET-SET-_CONFIGURATION-handling-to.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-remote-wakeup-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-create-USBPortOps-move-attach-there.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rework-attach-detach-workflow.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_wakeup-wakeup-callback-to-port-ops.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-uhci-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-change-serial-number-to-42.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-speed-mask-to-ports.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-attach-callback.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_desc_attach.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-device-qualifier-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-high-speed-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-fix-status-reporting.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-handle-long-responses.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-mass-storage-fix.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-physical-port-address.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-port-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rewrite-fw-path-fix-numbering.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-zap-pdev-from-usbport.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-USB-keyboard-emulation-key-mapping-error.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-modifiers-should-generate-an-event.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keyboard-add-event-event-queue.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-move-head-n-to-common-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-core-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-use-snprintf.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-bootindex-handling-into-usb-storage-device.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-trivial-spelling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-initialise-data-element-in-Linux-USB_DISCONNECT-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_alt_setting-function.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-alt.-setting-from-sysfs-rather-the.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-s-dprintf-DPRINTF-to-reduce-conflicts.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-usb-packets.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-packets-for-endpoints-which-are-not.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-iso-packets-when-max-packet-size-is.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-We-only-need-to-keep-track-of-15-endpoints.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-out-usb-pack.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-control-buffer-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-switch-to-QTAILQ-cherry-picked-from-commit-ddf6.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-keep-uhci-state-pointer-in-async-packet-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ohci-get-ohci-state-via-container_of.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-musb-get-musb-state-via-container_of-cherry-picked-f.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-complete-callback-to-port-ops-cherry-picked.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-missing-break-statement.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Add-Interface-Association-Descriptor-descriptor-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-update-config-descriptors-to-identify-number-of-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-remove-fallback-to-bNumInterfaces-if-no-.nif.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-support-for-grouped-interfaces-and-the-Inter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Bug-757654-UHCI-fails-to-signal-stall-response-patch.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Pass-the-packet-to-the-device-s-handle_control-c.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-use-usb_generic_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-device-path-aka-physical-port-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-add-hostport-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-track-aurbs-in-list.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-walk-async-urb-list-in-cancel.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-split-large-xfers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-max_packet_size-for-highspeed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-don-t-call-usb_packet_complete-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-packet-owner.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-cancel-callback-to-USBDeviceInfo.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-ehci-adapter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-catch-ENODEV-in-more-places.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-mmio-and-usbsts-usb-ehci-trace-mmio-a.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-state-machine-changes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-port-state.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-improve-mmio-tracing.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-trace-workaround.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-buffer-copy.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-add-queue-data-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-multiqueue-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-offset-writeback-in-ehci_buffer_rw.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-error-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-fix-a-number-of-unused-but-set-variable-warning.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-cancel-async-packets-on-unplug.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-drop-EXECUTING-checks.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Fix-USB-mouse-Set_Protocol-behavior.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-The-USB-tablet-should-not-claim-boot-protocol-suppor.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-itd-handling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-split-trace-calls-to-handle-arg-count-limit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-speed-from-sysfs-rather-then-from-the-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Teach-about-super-speed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-do-perror-when-errno-is-not-set.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Ensure-devep-0.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-try-to-open-the-same-device-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-only-cleanup-in-host_close-when-host_open-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Enlarge-buffer-for-descriptors-to-8192-byt.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Add-knowledge-of-USB_SPEED_SUPER-to-usb_spee.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Don-t-detach-non-attached-devices-on-device-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - Resolves: bz#561414
    (Writes to virtual usb-storage produce I/O errors)
  - Resolves: bz#583922
    (Guests in same vlan could not ping successfully using rtl8139 nic)
  - Resolves: bz#632299
    (higher CPU load observed for virtualization workload on RHEL 6 than on RHEL 5.5)
  - Resolves: bz#645351
    (Add support for USB 2.0 (EHCI) to QEMU)
  - Resolves: bz#711354
    (Fix and enable enough of SCSI to make usb-storage work)


