# changelog

author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.269.el6
changelog:
  - kvm-usb-ehci-frindex-always-is-a-14-bits-counter-rhbz-80.patch [bz#807984]
  - Resolves: bz#807984
    ([SPICE]Hi speed USB ISO streaming does not work with windows XP)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.270.el6
changelog:
  - kvm-usb-redir-An-interface-count-of-0-is-a-valid-value-r.patch [bz#808760]
  - kvm-qemu-kvm.spec.template-move-some-lines-around.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-delete-define-rhev-0-line.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-define-with-live_snapshots.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-add-with-guest_agent-build-ti.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-make-some-file-paths-and-pack.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-add-RHEV-specific-package-nam.patch [bz#800496]
  - kvm-redhat-disable-qemu-guest-agent-on-RHEV-builds.patch [bz#800496]
  - Resolves: bz#800496
    (RHEV specific qemu-kvm)
  - Resolves: bz#808760
    ([SPICE] usb-redir device does not accept unconfigured devices)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.271.el6
changelog:
  - kvm-macvtap-rhel6.2-compatibility.patch [bz#806975]
  - kvm-Allow-to-hot-plug-cpus-only-in-range-0.max_cpus.patch [bz#807512]
  - Resolves: bz#806975
    (Live migration of bridge network to direct network fails with libvirt and virtio)
  - Resolves: bz#807512
    (qemu exit and Segmentation fault when hotplug vcpus with bigger value)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.273.el6
changelog:
  - kvm-qapi-fix-double-free-in-qmp_output_visitor_cleanup.patch [bz#810983]
  - Resolves: bz#810983
    (QAPI may double free on errors)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.274.el6
changelog:
  - kvm-blockdev-add-refcount-to-DriveInfo.patch [bz#807898]
  - kvm-blockdev-make-image-streaming-safe-across-hotplug.patch [bz#807898]
  - kvm-block-cancel-jobs-when-a-device-is-ready-to-go-away.patch [bz#807898]
  - kvm-block-fix-streaming-closing-race.patch [bz#807898]
  - Resolves: bz#807898
    (guest quit or device hot-unplug during streaming fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.275.el6
changelog:
  - kvm-block-Drain-requests-in-bdrv_close.patch [bz#798857]
  - Resolves: bz#798857
    (pkill qemu-kvm appear block I/O error after live snapshot for multiple vms in parallelly)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.276.el6
changelog:
  - kvm-usb-add-USBDescriptor-use-for-device-descriptors.patch [bz#807878]
  - kvm-usb-use-USBDescriptor-for-device-qualifier-descripto.patch [bz#807878]
  - kvm-usb-use-USBDescriptor-for-config-descriptors.patch [bz#807878]
  - kvm-usb-use-USBDescriptor-for-interface-descriptors.patch [bz#807878]
  - kvm-usb-use-USBDescriptor-for-endpoint-descriptors.patch [bz#807878]
  - kvm-usb-host-rewrite-usb_linux_update_endp_table.patch [bz#807878]
  - Resolves: bz#807878
    (Cannot hear sound when passthrough a USB speaker into RHEL guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.277.el6
changelog:
  - kvm-qemu-kvm.spec.template-fix-datadir-directory-path.patch [bz#800496]
  - Resolves: bz#800496
    (RHEV specific qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.278.el6
changelog:
  - kvm-block-pass-new-base-image-format-to-bdrv_change_back.patch [bz#801449 bz#811228]
  - kvm-use-hyphens-in-streaming-commands-to-indicate-async-.patch [bz#812085]
  - kvm-block-set-job-speed-in-block_set_speed.patch [bz#806432]
  - kvm-block-bdrv_append-fixes.patch [bz#806432]
  - kvm-block-fail-live-snapshot-if-disk-has-no-medium.patch [bz#806432]
  - kvm-block-open-backing-file-as-read-only-when-probing-fo.patch [bz#806432]
  - kvm-Count-dirty-blocks-and-expose-an-API-to-get-dirty-co.patch [bz#806432]
  - kvm-block-fix-shift-in-dirty-bitmap-calculation.patch [bz#806432]
  - kvm-block-fix-allocation-size-for-dirty-bitmap.patch [bz#806432]
  - kvm-block-introduce-new-dirty-bitmap-functionality.patch [bz#806432]
  - kvm-block-allow-interrupting-a-co_sleep_ns.patch [bz#806432]
  - kvm-block-allow-doing-I-O-in-a-job-after-cancellation.patch [bz#806432]
  - kvm-block-cancel-job-on-drive-reopen.patch [bz#806432]
  - kvm-block-add-witness-argument-to-drive-reopen.patch [bz#806432]
  - kvm-block-add-mirror-job.patch [bz#806432]
  - kvm-block-copy-over-job-and-dirty-bitmap-fields-in-bdrv_.patch [bz#806432]
  - kvm-block-rewrite-drive-mirror-for-mirror-job.patch [bz#806432]
  - kvm-remove-blkmirror.patch [bz#806432]
  - Resolves: bz#801449
    (qemu-kvm is not closing the merged images files (block_stream))
  - Resolves: bz#806432
    (Review the design/code of the blkmirror block driver)
  - Resolves: bz#811228
    (block streaming reverts image to auto-probe backing file format)
  - Resolves: bz#812085
    (use the name block-job-cancel to indicate async cancel support)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.279.el6
changelog:
  - kvm-block-Set-backing_hd-to-NULL-after-deleting-it.patch [bz#812948]
  - kvm-block-another-bdrv_append-fix.patch [bz#812948]
  - kvm-ehci-remove-hack.patch [bz#812328]
  - Resolves: bz#812328
    (qemu-kvm aborted when using multiple usb storage on Win2003 guest)
  - Resolves: bz#812948
    (drive-reopen broken with snapshots)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.280.el6
changelog:
  - kvm-device-assignment-Disable-MSI-MSI-X-in-assigned-devi.patch [bz#798967]
  - kvm-qcow2-Fix-return-value-of-alloc_refcount_block.patch [bz#812833]
  - Resolves: bz#798967
    (host kernel panic when sending system_reset to windows guest with 82576 PF assigned)
  - Resolves: bz#812833
    (qcow2 converting error when -o cluster_size <= 2048)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.281.el6
changelog:
  - kvm-Block-streaming-disable-for-RHEL.patch [bz#808805]
  - Resolves: bz#808805
    (qemu-kvm-el version should disable block_stream)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.282.el6
changelog:
  - kvm-usb-storage-fix-request-canceling.patch [bz#807313]
  - Resolves: bz#807313
    (qemu-kvm core dumped while booting guest with usb-storage running on uhci)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.283.el6
changelog:
  - kvm-virtio-scsi-prepare-migration-format-for-multiqueue.patch [bz#810507]
  - kvm-virtio-add-missing-mb-on-notification.patch [bz#804578]
  - Resolves: bz#804578
    (KVM Guest with virtio network driver loses network connectivity)
  - Resolves: bz#810507
    (prepare virtio-scsi migration format for multiqueue)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.284.el6
changelog:
  - kvm-qemu-kvm.spec.template-fix-Provides-versioning.patch [bz#800496]
  - kvm-qemu-kvm.spec.template-qemu-kvm-rhev-obsolete-old-qe.patch [bz#800496]
  - kvm-qxl-PC_RHEL6_1_COMPAT-make-qxl-default-revision-valu.patch [bz#698936]
  - Resolves: bz#698936
    (Migrate failed in different version of RHEL 6.1 host)
  - Resolves: bz#800496
    (RHEV specific qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.285.el6
changelog:
  - kvm-virtio-add-missing-mb-on-enable-notification.patch [bz#804578]
  - Resolves: bz#804578
    (KVM Guest with virtio network driver loses network connectivity)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.286.el6
changelog:
  - kvm-block-make-bdrv_append-assert-that-dirty_bitmap-is-N.patch [bz#813862]
  - kvm-mirror-remove-need-for-bdrv_drain_all-in-block_job_c.patch [bz#813810 bz#813862]
  - kvm-block-add-block_job_sleep.patch [bz#813810 bz#813862]
  - kvm-block-wait-for-job-callback-in-block_job_cancel_sync.patch [bz#813810 bz#813862]
  - kvm-block-drive-reopen-fixes.patch [bz#813862]
  - kvm-block-drive-mirror-fixes.patch [bz#813862]
  - kvm-block-remove-duplicate-check-in-qmp_transaction.patch [bz#813862]
  - kvm-mirror-do-not-reset-sector_num.patch [bz#813862]
  - Resolves: bz#813810
    (plug small race window at the end of block_stream command)
  - Resolves: bz#813862
    (post-snap1 fixups to live block copy aka mirroring)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.287.el6
changelog:
  - kvm-trace-events-Rename-next-argument.patch [bz#798676]
  - kvm-Revert-raw-posix-do-not-linearize-anymore-direct-I-O.patch [bz#814617]
  - Resolves: bz#798676
    (do not use next  as a variable name in qemu-kvm systemtap tapset)
  - Resolves: bz#814617
    (NFS performance regression in large file sequential writes.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.288.el6
changelog:
  - kvm-qcow2-Don-t-hold-cache-references-across-yield.patch [bz#812705]
  - Resolves: bz#812705
    (Installing guest with cluster_size=4096, failed)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.289.el6
changelog:
  - kvm-virtio-serial-bus-fix-guest_connected-init-before-dr.patch [bz#787974]
  - kvm-virtio-serial-bus-Unset-guest_connected-at-reset-and.patch [bz#787974]
  - Resolves: bz#787974
    (Spice Client mouse loss after live migrate windows guest with spice vmc channel and inactive guest service)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.290.el6
changelog:
  - kvm-block-change-block-job-set-speed-argument-from-value.patch [bz#813953]
  - kvm-block-add-speed-optional-parameter-to-block-stream.patch [bz#813953]
  - Resolves: bz#813953
    (block-job-set-speed is racy with block-stream/drive-mirror)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.291.el6
changelog:
  - kvm-fix-mirror_abort-NULL-pointer-dereference.patch [bz#818226]
  - kvm-fail-drive-reopen-before-reaching-mirroring-steady-s.patch [bz#813862]
  - kvm-qemu-kvm-rhev-obsoletes-all-released-qemu-kvm-versio.patch [bz#818620]
  - Resolves: bz#813862
    (post-snap1 fixups to live block copy aka mirroring)
  - Resolves: bz#818226
    (Weird check for null pointer in mirror_abort())
  - Resolves: bz#818620
    (qemu-kvm-rhev should obsolete qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.292.el6
changelog:
  - kvm-block-do-not-reuse-the-backing-file-across-bdrv_clos.patch [bz#816471]
  - kvm-block-Introduce-path_has_protocol-function.patch [bz#818876]
  - kvm-block-Fix-the-use-of-protocols-in-backing-files.patch [bz#818876]
  - kvm-block-simplify-path_is_absolute.patch [bz#818876]
  - kvm-block-protect-path_has_protocol-from-filenames-with-.patch [bz#818876]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e.patch [bz#818876]
  - Resolves: bz#816471
    (qemu-kvm is not closing the merged images files (mirroring with "full"=true))
  - Resolves: bz#818876
    (streaming to stable iscsi path names (with colons) fails to close backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.293.el6
changelog:
  - kvm-qxl-set-size-of-PCI-IO-BAR-correctly-16-for-revision.patch [bz#698936]
  - Resolves: bz#698936
    (Migrate failed from RHEL6.1 host to RHEL6.3 host with -M rhel6.1.0 (qxl and usb device related))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.294.el6
changelog:
  - Re-adding patches that were missing
  - kvm-scsi-fix-fw-p1-take2.patch [bz#782029]
  - kvm-scsi-fix-fw-p2-take2.patch [bz#782029]
  - kvm-remove-blkmirror-take2.patch [bz#802284]
  - Resolves: bz#782029
    ([RFE] virtio-scsi: qemu-kvm implementation)
  - Resolves: bz#802284
    (RFE: Support live migration of storage (mirroring))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6
changelog:
  - kvm-x86-Pass-KVMState-to-kvm_arch_get_supported_cpui.patch [bz#819562]
  - kvm-Expose-CPUID-leaf-7-only-for-cpu-host-v2.patch [bz#819562]
  - Resolves: bz#819562
    (SMEP is enabled unconditionally)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.296.el6
changelog:
  - Load KVM modules in postinstall scriptlet [bz#836498]
  - kvm-isa-bus-Remove-bogus-IRQ-sharing-check.patch [bz#771624]
  - Resolves: bz#836498
    (postinstall scriptlet no longer loads KVM modules)
  - Resolves: bz#771624
    (guest fails with error: isa irq 4 already assigned when starting guest with more than two serial devices)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.297.el6
changelog:
  - kvm-remove-broken-code-for-tty.patch [bz#806768]
  - kvm-add-qemu_chr_set_echo.patch [bz#806768]
  - kvm-move-atexit-term_exit-and-O_NONBLOCK-to-qemu_chr_ope.patch [bz#806768]
  - kvm-add-set_echo-implementation-for-qemu_chr_stdio.patch [bz#806768]
  - kvm-block-don-t-create-mirror-block-job-if-the-target-bd.patch [bz#814102]
  - kvm-hda-audio-send-v1-migration-format-for-rhel6.1.0.patch [bz#821692]
  - kvm-Revert-qemu-ga-make-guest-suspend-posix-only.patch [bz#827612]
  - kvm-qemu-ga-win32-add-guest-suspend-stubs.patch [bz#827612]
  - kvm-qemu-ga-Fix-spelling-in-documentation.patch [bz#827612]
  - kvm-qemu-ga-add-win32-guest-suspend-disk-command.patch [bz#827612]
  - kvm-configure-fix-mingw32-libs_qga-typo.patch [bz#827612]
  - kvm-qemu-ga-add-win32-guest-suspend-ram-command.patch [bz#827612]
  - kvm-qemu-ga-add-guest-network-get-interfaces-command.patch [bz#827612]
  - kvm-qemu-ga-qmp_guest_network_get_interfaces-Use-qemu_ma.patch [bz#827612]
  - kvm-qemu-ga-add-guest-sync-delimited.patch [bz#827612]
  - kvm-qemu-ga-for-w32-fix-leaked-handle-ov.hEvent-in-ga_ch.patch [bz#827612]
  - kvm-qemu-ga-fix-bsd-build-and-re-org-linux-specific-impl.patch [bz#827612]
  - kvm-qemu-ga-generate-missing-stubs-for-fsfreeze.patch [bz#827612]
  - kvm-qemu-ga-fix-help-output.patch [bz#827612]
  - kvm-qemu-ga-guest_fsfreeze_build_mount_list-use-g_malloc.patch [bz#827612]
  - kvm-qemu-ga-improve-recovery-options-for-fsfreeze.patch [bz#827612]
  - kvm-qemu-ga-add-a-whitelist-for-fsfreeze-safe-commands.patch [bz#827612]
  - kvm-qemu-ga-persist-tracking-of-fsfreeze-state-via-files.patch [bz#827612]
  - kvm-qemu-ga-Implement-alternative-to-O_ASYNC.patch [bz#827612]
  - kvm-qemu-ga-fix-some-common-typos.patch [bz#827612]
  - kvm-qapi-add-support-for-command-options.patch [bz#827612]
  - kvm-qemu-ga-don-t-warn-on-no-command-return.patch [bz#827612]
  - kvm-qemu-ga-guest-shutdown-don-t-emit-a-success-response.patch [bz#827612]
  - kvm-qemu-ga-guest-suspend-disk-don-t-emit-a-success-resp.patch [bz#827612]
  - kvm-qemu-ga-guest-suspend-ram-don-t-emit-a-success-respo.patch [bz#827612]
  - kvm-qemu-ga-guest-suspend-hybrid-don-t-emit-a-success-re.patch [bz#827612]
  - kvm-qemu-ga-make-reopen_fd_to_null-public.patch [bz#827612]
  - kvm-qemu-ga-become_daemon-reopen-standard-fds-to-dev-nul.patch [bz#827612]
  - kvm-qemu-ga-guest-suspend-make-the-API-synchronous.patch [bz#827612]
  - kvm-qemu-ga-guest-shutdown-become-synchronous.patch [bz#827612]
  - kvm-qemu-ga-guest-shutdown-use-only-async-signal-safe-fu.patch [bz#827612]
  - kvm-qemu-ga-fix-segv-after-failure-to-open-log-file.patch [bz#827612]
  - kvm-configure-check-if-environ-is-declared.patch [bz#827612]
  - kvm-qemu-ga-Fix-missing-environ-declaration.patch [bz#827612]
  - kvm-qemu-ga-Fix-use-of-environ-on-Darwin.patch [bz#827612]
  - kvm-qemu-ga-avoid-blocking-on-atime-update-when-reading-.patch [bz#827612]
  - Resolves: bz#806768
    (-qmp stdio is unusable)
  - Resolves: bz#814102
    (mirroring starts anyway with "existing" mode and a non-existing target)
  - Resolves: bz#827612
    (Update qemu-ga to its latest upstream version)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.298.el6
changelog:
  - kvm-Revert-guest-agent-remove-unsupported-guest-agent-co.patch [bz#819900]
  - kvm-qemu-ga-add-guest-file-operations-in-qemu-ga-BLACKLI.patch [bz#819900]
  - kvm-virtio-console-Fix-failure-on-unconnected-pty.patch [bz#839156]
  - kvm-scsi-do-not-require-a-minimum-allocation-length-for-.patch [bz#825188]
  - kvm-scsi-set-VALID-bit-to-0-in-fixed-format-sense-data.patch [bz#825188]
  - kvm-scsi-do-not-report-bogus-overruns-for-commands-in-th.patch [bz#825188]
  - kvm-scsi-do-not-require-a-minimum-allocation-length-for-.patch [bz#825188]
  - kvm-scsi-remove-useless-debug-messages.patch [bz#825188]
  - kvm-vnc-add-a-more-descriptive-error-message.patch [bz#796043]
  - Resolves: bz#796043
    ('getaddrinfo(127.0.0.1,5902): Name or service not known' when starting guest on host with IPv6 only)
  - Resolves: bz#819900
    ([6.3 FEAT] add guest-file-* operations into posix qemu-ga)
  - Resolves: bz#825188
    (make scsi-testsuite pass)
  - Resolves: bz#839156
    (Fedora 16 and 17 guests hang during boot)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.299.el6
changelog:
  - kvm-qdev-properties-restrict-uint32-input-values-between.patch [bz#797728]
  - Resolves: bz#797728
    (qemu-kvm allows a value of -1 for uint32 qdev property types)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.300.el6
changelog:
  - kvm-e1000-use-MII-status-register-for-link-up-down.patch [bz#643577]
  - kvm-pci-assign-Use-struct-for-MSI-X-table.patch [bz#784496]
  - kvm-pci-assign-Only-calculate-maximum-MSI-X-vector-entri.patch [bz#784496]
  - kvm-pci-assign-Proper-initialization-for-MSI-X-table.patch [bz#784496]
  - kvm-pci-assign-Allocate-entries-for-all-MSI-X-vectors.patch [bz#784496]
  - kvm-pci-assign-Update-MSI-X-config-based-on-table-writes.patch [bz#784496]
  - Resolves: bz#643577
    (Lost packet during bonding test with e1000 nic)
  - Resolves: bz#784496
    (Device assignment doesn't get updated for guest irq pinning)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.301.el6
changelog:
  - kvm-audio-streaming-from-usb-devices.patch [bz#808653 bz#831549]
  - kvm-usb-uhci-fix-commit-8e65b7c04965c8355e4ce43211582b6b.patch [bz#808653 bz#831549]
  - kvm-usb-uhci-fix-expire-time-initialization.patch [bz#808653 bz#831549]
  - kvm-usb-uhci-implement-bandwidth-management.patch [bz#808653 bz#831549]
  - kvm-uhci-fix-bandwidth-management.patch [bz#808653 bz#831549]
  - Resolves: bz#808653
    (Audio quality is very bad when playing audio via passthroughed USB speaker in guest)
  - Resolves: bz#831549
    (unmount of usb storage in RHEL guest takes around 50mins)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.302.el6
changelog:
  - kvm-fdc-DIR-Digital-Input-Register-should-return-status-.patch [bz#729244]
  - kvm-fdc-simplify-media-change-handling.patch [bz#729244]
  - kvm-fdc-fix-media-detection.patch [bz#729244]
  - kvm-fdc-fix-implied-seek-while-there-is-no-media-in-driv.patch [bz#729244]
  - kvm-fdc-rewrite-seek-and-DSKCHG-bit-handling.patch [bz#729244]
  - kvm-fdc-fix-interrupt-handling.patch [bz#729244]
  - kvm-qemu-keymaps-Finnish-keyboard-mapping-broken.patch [bz#794653]
  - Resolves: bz#729244
    (floppy does not show in guest after change floppy from no inserted to new file)
  - Resolves: bz#794653
    (Finnish keymap has errors)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.303.el6
changelog:
  - kvm-acpi_piix4-Disallow-write-to-up-down-PCI-hotplug-reg.patch [bz#807391]
  - kvm-acpi_piix4-Fix-PCI-hotplug-race.patch [bz#807391]
  - kvm-acpi_piix4-Remove-PCI_RMV_BASE-write-code.patch [bz#807391]
  - kvm-acpi_piix4-Re-define-PCI-hotplug-eject-register-read.patch [bz#807391]
  - kvm-acpi-explicitly-account-for-1-device-per-slot.patch [bz#807391]
  - Resolves: bz#807391
    (lost hotplug events)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.304.el6
changelog:
  - kvm-qemu-options.hx-Fix-set_password-and-expire_password.patch [bz#813633]
  - Resolves: bz#813633
    (need to update qemu-kvm about "-vnc" option for "password" in man page)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.305.el6
changelog:
  - kvm-e1000-Pad-short-frames-to-minimum-size-60-bytes.patch [bz#607510 bz#819915 bz#819915]
  - kvm-e1000-Fix-multi-descriptor-packet-checksum-offload.patch [bz#607510 bz#819915 bz#819915]
  - kvm-e1000-introduce-bits-of-PHY-control-register.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-conditionally-raise-irq-at-the-end-of-MDI-cycl.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-Preserve-link-state-across-device-reset.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-move-reset-function-earlier-in-file.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-introduce-helpers-to-manipulate-link-status.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-introduce-bit-for-debugging-PHY-emulation.patch [bz#607510 bz#607510 bz#819915]
  - kvm-e1000-link-auto-negotiation-emulation.patch [bz#607510 bz#607510 bz#819915]
  - Resolves: bz#607510
    (Windows7 guest cannot resume after suspended to disk after plenty of pause:resume iterations - e1000)
  - Resolves: bz#819915
    (e1000: Fix multi-descriptor packet checksum offload)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.306.el6
changelog:
  - kvm-kvmclock-guest-stop-notification.patch [bz#831614]
  - kvm-usb-storage-fix-SYNCHRONIZE_CACHE.patch [bz#839957]
  - kvm-usb-change-VID-PID-for-usb-hub-and-usb-msd-to-preven.patch [bz#813713]
  - kvm-usb-add-serial-number-generator.patch [bz#813713]
  - kvm-add-rhel6.4.0-machine-type.patch [bz#813713]
  - kvm-usb-add-compat-property-to-skip-unique-serial-number.patch [bz#813713]
  - kvm-qemu-img-Fix-segmentation-fault.patch [bz#846954]
  - kvm-qemu-img-Fix-qemu-img-convert-obacking_file.patch [bz#816575]
  - Resolves: bz#813713
    (Windows guest can't drive more than 21 usb-storage devices)
  - Resolves: bz#816575
    (backing clusters of the image convert with -B  are allocated when they shouldn't)
  - Resolves: bz#831614
    ([6.4 FEAT] KVM suppress cpu softlockup message after suspend/resume of a VM)
  - Resolves: bz#839957
    (usb-storage: SYNCHRONIZE_CACHE is broken)
  - Resolves: bz#846954
    (qemu-img convert segfaults on zeroed image)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.307.el6
changelog:
  - Update information: Add bug 805533 information to changelog (fix for 827612 fixed also 805533)
  - kvm-hda-move-input-widgets-from-duplex-to-common.patch [bz#801063]
  - kvm-hda-add-hda-micro-codec.patch [bz#801063]
  - kvm-hda-fix-codec-ids.patch [bz#801063]
  - Resolves: bz#801063
    ([RFE] Ability to configure sound pass-through to appear as MIC as opposed to line-in)
  - Resolves: bz#805533
    (qemu-ga: possible race while suspending the guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.308.el6
changelog:
  - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch [bz#851258]
  - Resolves: bz#851258
    (EMBARGOED CVE-2012-3515 qemu: VT100 emulation vulnerability [rhel-6.4])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.309.el6
changelog:
  - kvm-qxl-render-fix-broken-vnc-spice-since-commit-f934493.patch [bz#851143]
  - kvm-scsi-add-missing-test-for-cancelled-request.patch [bz#805501 bz#805501, bz#808664]
  - kvm-scsi-make-code-more-homogeneous-in-AIO-callback-func.patch [bz#814084]
  - kvm-scsi-move-scsi_flush_complete-around.patch [bz#814084]
  - kvm-scsi-add-support-for-FUA-on-writes.patch [bz#814084]
  - kvm-scsi-force-unit-access-on-VERIFY.patch [bz#808664 bz#808664, bz#805501]
  - kvm-scsi-disk-more-assertions-and-resets-for-aiocb.patch [bz#808664 bz#808664, bz#805501]
  - kvm-virtio-scsi-do-not-compare-32-bit-QEMU-tags-against-.patch [bz#808664]
  - kvm-vvfat-Use-cache-unsafe.patch [bz#825691]
  - kvm-block-prevent-snapshot-mode-TMPDIR-symlink-attack.patch [bz#825691]
  - CVE: CVE-2012-2652
  - Resolves: bz#825691
    ( CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks [rhel-6.4])
  - Resolves: bz#805501
    (qemu-kvm core dumped while sending system_reset to a virtio-scsi guest)
  - Resolves: bz#805501,
    (qemu-kvm core dumped while sending system_reset to a virtio-scsi guest)
  - Resolves: bz#808664
    (With virtio-scsi disk guest can't resume form "No space left on device")
  - Resolves: bz#808664,
    (With virtio-scsi disk guest can't resume form "No space left on device")
  - Resolves: bz#814084
    (scsi disk emulation doesn't enforce FUA (Force Unit Access) on writes)
  - Resolves: bz#851143
    (qemu-kvm segfaulting when running a VM)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.310.el6
changelog:
  - kvm-pc-refactor-RHEL-compat-code.patch [bz#835101]
  - kvm-cpuid-disable-pv-eoi-for-6.3-and-older-compat-types.patch [bz#835101]
  - kvm-kvm_pv_eoi-add-flag-support.patch [bz#835101]
  - kvm-spice-notify-spice-server-on-vm-start-stop.patch [bz#836133]
  - kvm-spice-notify-on-vm-state-change-only-via-spice_serve.patch [bz#836133]
  - kvm-spice-migration-add-QEVENT_SPICE_MIGRATE_COMPLETED.patch [bz#836133]
  - kvm-spice-add-migrated-flag-to-spice-info.patch [bz#836133]
  - kvm-spice-adding-seamless-migration-option-to-the-comman.patch [bz#836133]
  - kvm-spice-increase-the-verbosity-of-spice-section-in-qem.patch [bz#836133]
  - kvm-disable-rdtscp-on-all-CPU-model-definitions.patch [bz#814426]
  - Resolves: bz#814426
    ("rdtscp" flag defined on SandyBridge and Opteron models, but not supported by the kernel)
  - Resolves: bz#835101
    (RFE: backport pv eoi support - qemu-kvm)
  - Resolves: bz#836133
    (spice migration: prevent race with libvirt)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.311.el6
changelog:
  - kvm-qemu-options.hx-Improve-nodefaults-description.patch [bz#817224]
  - kvm-Allow-silent-system-resets.patch [bz#850927]
  - kvm-qmp-don-t-emit-the-RESET-event-on-wakeup-from-S3.patch [bz#850927]
  - kvm-qmp-emit-the-WAKEUP-event-when-the-guest-is-put-to-r.patch [bz#850927]
  - kvm-reset-PMBA-and-PMREGMISC-PIIX4-registers.patch [bz#854304]
  - Resolves: bz#817224
    (there is no "-nodefaults" option help doc in qemu-kvm man page)
  - Resolves: bz#850927
    (QMP: two events related issues on S3 wakeup)
  - Resolves: bz#854304
    (reset PMBA and PMREGMISC PIIX4 registers)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.312.el6
changelog:
  - kvm-uhci-zap-uhci_pre_save.patch [bz#805172]
  - kvm-ehci-move-async-schedule-to-bottom-half.patch [bz#805172]
  - kvm-ehci-schedule-async-bh-on-async-packet-completion.patch [bz#805172]
  - kvm-ehci-kick-async-schedule-on-wakeup.patch [bz#805172]
  - kvm-ehci-Kick-async-schedule-on-wakeup-in-the-non-compan.patch [bz#805172]
  - kvm-ehci-raise-irq-in-the-frame-timer.patch [bz#805172]
  - kvm-ehci-add-live-migration-support.patch [bz#805172]
  - kvm-ehci-fix-Interrupt-Threshold-Control-implementation.patch [bz#805172]
  - kvm-scsi-prepare-migration-code-for-usb-storage-support.patch [bz#805172]
  - kvm-Endian-fix-an-assertion-in-usb-msd.patch [bz#805172]
  - kvm-usb-storage-remove-MSDState-residue.patch [bz#805172]
  - kvm-usb-storage-add-usb_msd_packet_complete.patch [bz#805172]
  - kvm-usb-storage-add-scsi_off-remove-scsi_buf.patch [bz#805172]
  - kvm-usb-storage-migration-support.patch [bz#805172]
  - kvm-usb-storage-DPRINTF-fixup.patch [bz#805172]
  - kvm-usb-restore-USBDevice-attached-on-vmload.patch [bz#805172]
  - kvm-usb-host-attach-only-to-running-guest.patch [bz#805172]
  - kvm-usb-host-live-migration-support.patch [bz#805172]
  - Resolves: bz#805172
    (Add live migration support for USB)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.313.el6
changelog:
  - kvm-qemu-options.hx-Improve-read-write-config-options-de.patch [bz#818134]
  - kvm-scsi-disk-Fail-medium-writes-with-proper-sense-for-r.patch [bz#846268]
  - kvm-Add-PIIX4-properties-to-control-PM-system-states.patch [bz#827503]
  - kvm-vl-Tighten-parsing-of-m-argument.patch [bz#755594]
  - kvm-vl-Round-argument-of-m-up-to-multiple-of-8KiB.patch [bz#755594]
  - kvm-vl-Round-argument-of-m-up-to-multiple-of-2MiB-instea.patch [bz#755594]
  - Resolves: bz#755594
    (-m 1 crashes)
  - Resolves: bz#818134
    ('-writeconfig/-readconfig' option need to update in qemu-kvm manpage)
  - Resolves: bz#827503
    (Config s3/s4 per VM - in qemu-kvm)
  - Resolves: bz#846268
    ([virtio-win][scsi] Windows guest Core dumped when trying to initialize readonly scsi data disk)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.314.el6
changelog:
  - kvm-net-notify-iothread-after-flushing-queue.patch [bz#852665]
  - kvm-e1000-flush-queue-whenever-can_receive-can-go-from-f.patch [bz#852665]
  - kvm-spice-abort-on-invalid-streaming-cmdline-params.patch [bz#831708]
  - kvm-skip-media-change-notify-on-reopen.patch [bz#849657]
  - kvm-qmp-qmp-events.txt-add-missing-doc-for-the-SUSPEND-e.patch [bz#827499]
  - kvm-qmp-add-SUSPEND_DISK-event.patch [bz#827499]
  - Resolves: bz#827499
    (RFE: QMP notification for S3/S4 events)
  - Resolves: bz#831708
    (Spice-Server, VM Creation works when a bad value is entered for streaming-video)
  - Resolves: bz#849657
    (scsi devices see an unit attention condition on migration)
  - Resolves: bz#852665
    (Backport e1000 receive queue fixes from upstream)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.315.el6
changelog:
  - kvm-usb-unique-packet-ids.patch [bz#805172]
  - kvm-usb-redir-Notify-our-peer-when-we-reject-a-device-du.patch [bz#805172]
  - kvm-usb-redir-Reset-device-address-and-speed-on-disconne.patch [bz#805172]
  - kvm-usb-redir-Correctly-handle-the-usb_redir_babble-usbr.patch [bz#805172]
  - kvm-usb-redir-Never-return-USB_RET_NAK-for-async-handled.patch [bz#805172]
  - kvm-usb-redir-Don-t-delay-handling-of-open-events-to-a-b.patch [bz#805172]
  - kvm-usb-redir-Get-rid-of-async-struct-get-member.patch [bz#805172]
  - kvm-usb-redir-Get-rid-of-local-shadow-copy-of-packet-hea.patch [bz#805172]
  - kvm-usb-redir-Get-rid-of-unused-async-struct-dev-member.patch [bz#805172]
  - kvm-usb-redir-Move-to-core-packet-id-handling.patch [bz#805172]
  - kvm-usb-redir-Return-babble-when-getting-more-bulk-data-.patch [bz#805172]
  - kvm-usb-redir-Convert-to-new-libusbredirparser-0.5-API.patch [bz#805172]
  - kvm-disable-s3-s4-by-default.patch [bz#848369]
  - Require usbredir-devel >= 0.5 [bz#848369]
  - Resolves: bz#848369
    (S3/S4 should be disabled by default)
  - Related: bz#805172
    (Add live migration support for USB)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.316.el6
changelog:
  - Add missing patch, that was already supposed to be in the paackage
    kvm-scsi-do-not-require-a-minimum-allocation-length-2.patch
  - Regenerated kvm-scsi-remove-useless-debug-messages.patch to match
    what was submitted/reviewed
  - Resolves: bz#825188
    (make scsi-testsuite pass)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.317.el6
changelog:
  - kvm-ehci-RHEL-6-only-call-ehci_advance_async_state-ehci-.patch [bz#805172]
  - kvm-usb-ehci-drop-unused-isoch_pause-variable.patch [bz#805172]
  - kvm-usb-ehci-Drop-unused-sofv-value.patch [bz#805172]
  - kvm-usb-ehci-Ensure-frindex-writes-leave-a-valid-frindex.patch [bz#805172]
  - kvm-ehci-fix-reset.patch [bz#805172]
  - kvm-ehci-remove-unused-attach_poll_counter.patch [bz#805172]
  - kvm-ehci-create-ehci_update_frindex.patch [bz#805172]
  - kvm-ehci-rework-frame-skipping.patch [bz#805172]
  - kvm-ehci-fix-ehci_qh_do_overlay.patch [bz#805172]
  - kvm-ehci-fix-td-writeback.patch [bz#805172]
  - kvm-ehci-Schedule-async-bh-when-IAAD-bit-gets-set.patch [bz#805172]
  - kvm-ehci-simplify-ehci_state_executing.patch [bz#805172]
  - kvm-ehci-Properly-report-completed-but-not-yet-processed.patch [bz#805172]
  - kvm-ehci-Don-t-process-too-much-frames-in-1-timer-tick-v.patch [bz#805172]
  - kvm-ehci-Don-t-set-seen-to-0-when-removing-unseen-queue-.patch [bz#805172]
  - kvm-ehci-Walk-async-schedule-before-and-after-migration.patch [bz#805172]
  - kvm-usb-redir-Set-ep-max_packet_size-if-available.patch [bz#805172]
  - kvm-usb-redir-Add-a-usbredir_reject_device-helper-functi.patch [bz#805172]
  - kvm-usb-redir-Change-cancelled-packet-code-into-a-generi.patch [bz#805172]
  - kvm-usb-redir-Add-an-already_in_flight-packet-id-queue.patch [bz#805172]
  - kvm-usb-redir-Store-max_packet_size-in-endp_data.patch [bz#805172]
  - kvm-usb-redir-Add-support-for-migration.patch [bz#805172]
  - kvm-usb-redir-Add-chardev-open-close-debug-logging.patch [bz#805172]
  - Resolves: bz#805172
    (Add live migration support for USB)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.318.el6
changelog:
  - kvm-monitor-Fix-leakage-during-completion-processing.patch [bz#807146]
  - kvm-monitor-Fix-command-completion-vs.-boolean-switches.patch [bz#807146]
  - kvm-linux-headers-update-asm-kvm_para.h-to-3.6.patch [bz#835101]
  - kvm-get-set-PV-EOI-MSR.patch [bz#835101]
  - kvm-kill-dead-KVM_UPSTREAM-code.patch [bz#835101]
  - Resolves: bz#807146
    (snapshot_blkdev tab completion for device id missing)
  - Resolves: bz#835101
    (RFE: backport pv eoi support - qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.319.el6
changelog:
  - kvm-scsi-fix-WRITE-SAME-transfer-length-and-direction.patch [bz#841171]
  - kvm-scsi-Specify-the-xfer-direction-for-UNMAP-commands.patch [bz#841171]
  - kvm-scsi-add-a-qdev-property-for-the-disk-s-WWN.patch [bz#831102]
  - kvm-ide-Adds-wwn-hex-qdev-option.patch [bz#831102]
  - spice: update build dependencies [bz#857937]
  - Resolves: bz#831102
    (add the ability to set a wwn for SCSI disks)
  - Resolves: bz#841171
    (fix parsing of UNMAP command)
  - Resolves: bz#857937
    (exit with error if old spice-server is used and '-spice seamless-migration=on' option)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.320.el6
changelog:
  - kvm-stream-do-not-copy-unallocated-sectors-from-the-base.patch [bz#832336]
  - kvm-x86-cpuid-add-host-to-the-list-of-supported-CPU-mode.patch [bz#833152]
  - kvm-target-i386-Fold-cpu-cpuid-model-output-into-cpu-hel.patch [bz#833152]
  - kvm-target-i386-Add-missing-CPUID_-constants.patch [bz#833152]
  - kvm-target-i386-Move-CPU-models-from-cpus-x86_64.conf-to.patch [bz#833152]
  - kvm-Eliminate-cpus-x86_64.conf-file-v2.patch [bz#833152]
  - kvm-target-i386-x86_cpudef_setup-coding-style-change.patch [bz#833152]
  - kvm-target-i386-Kill-cpudef-config-section-support.patch [bz#833152]
  - kvm-target-i386-Drop-unused-setscalar-macro.patch [bz#833152]
  - kvm-target-i386-move-compatibility-static-variables-to-t.patch [bz#833152]
  - kvm-target-i386-group-declarations-of-compatibility-func.patch [bz#833152]
  - kvm-disable-SEP-on-all-CPU-models.patch [bz#745717]
  - kvm-replace-disable_cpuid_leaf10-with-set_pmu_passthroug.patch [bz#833152 bz#852083]
  - kvm-enable-PMU-emulation-only-on-cpu-host-v3.patch [bz#852083]
  - kvm-expose-tsc-deadline-timer-feature-to-guest.patch [bz#767944]
  - kvm-enable-TSC-deadline-on-SandyBridge-CPU-model-on-rhel.patch [bz#767944]
  - kvm-introduce-CPU-model-compat-function-to-set-level-fie.patch [bz#689665]
  - kvm-set-level-4-on-CPU-models-Conroe-Penryn-Nehalem-v2.patch [bz#689665]
  - kvm-convert-boot-to-QemuOpts.patch [bz#854191]
  - kvm-add-a-boot-parameter-to-set-reboot-timeout.patch [bz#854191]
  - kvm-sockets-Drop-sockets_debug-debug-code.patch [bz#680356]
  - kvm-sockets-Clean-up-inet_listen_opts-s-convoluted-bind-.patch [bz#680356]
  - kvm-qerror-add-five-qerror-strings.patch [bz#680356]
  - kvm-sockets-change-inet_connect-to-support-nonblock-sock.patch [bz#680356]
  - kvm-sockets-use-error-class-to-pass-listen-error.patch [bz#680356]
  - kvm-use-inet_listen-inet_connect-to-support-ipv6-migrati.patch [bz#680356]
  - kvm-socket-clean-up-redundant-assignment.patch [bz#680356]
  - kvm-net-inet_connect-inet_connect_opts-add-in_progress-a.patch [bz#680356]
  - kvm-migration-don-t-rely-on-any-QERR_SOCKET_.patch [bz#680356]
  - kvm-qerror-drop-QERR_SOCKET_CONNECT_IN_PROGRESS.patch [bz#680356]
  - kvm-Refactor-inet_connect_opts-function.patch [bz#680356]
  - kvm-Separate-inet_connect-into-inet_connect-blocking-and.patch [bz#680356]
  - kvm-Fix-address-handling-in-inet_nonblocking_connect.patch [bz#680356]
  - kvm-Clear-handler-only-for-valid-fd.patch [bz#680356]
  - Resolves: bz#680356
    (Live migration failed in ipv6 environment)
  - Resolves: bz#689665
    (Specify the number of cpu cores failed with cpu model Nehalem Penryn and Conroe)
  - Resolves: bz#745717
    (SEP flag is not exposed to guest, but is defined on CPU model config)
  - Resolves: bz#767944
    ([Intel 6.4 FEAT] VIRT: TSC deadline support for qemu-kvm)
  - Resolves: bz#832336
    (block streaming "explodes" a qcow2 file to the full virtual size of the disk)
  - Resolves: bz#833152
    (per-machine-type CPU models for safe migration)
  - Resolves: bz#852083
    (qemu-kvm "vPMU passthrough" mode breaks migration, shouldn't be enabled by default)
  - Resolves: bz#854191
    (Add a new boot parameter to set the delay time before rebooting)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.321.el6
changelog:
  - kvm-support-TSC-deadline-MSR-with-subsection.patch [bz#767944]
  - kvm-doc-correct-default-NIC-to-rtl8139.patch [bz#833687]
  - kvm-Add-API-to-create-memory-mapping-list.patch [bz#832458]
  - kvm-exec-add-cpu_physical_memory_is_io.patch [bz#832458]
  - kvm-target-i386-cpu.h-add-CPUArchState.patch [bz#832458]
  - kvm-implement-cpu_get_memory_mapping.patch [bz#832458]
  - kvm-Add-API-to-check-whether-paging-mode-is-enabled.patch [bz#832458]
  - kvm-Add-API-to-get-memory-mapping.patch [bz#832458]
  - kvm-Add-API-to-get-memory-mapping-without-do-paging.patch [bz#832458]
  - kvm-target-i386-Add-API-to-write-elf-notes-to-core-file.patch [bz#832458]
  - kvm-target-i386-Add-API-to-write-cpu-status-to-core-file.patch [bz#832458]
  - kvm-target-i386-add-API-to-get-dump-info.patch [bz#832458]
  - kvm-target-i386-Add-API-to-get-note-s-size.patch [bz#832458]
  - kvm-make-gdb_id-generally-avialable-and-rename-it-to-cpu.patch [bz#832458]
  - kvm-hmp.h-include-qdict.h.patch [bz#832458]
  - kvm-monitor-allow-qapi-and-old-hmp-to-share-the-same-dis.patch [bz#832458]
  - kvm-introduce-a-new-monitor-command-dump-guest-memory-to.patch [bz#832458]
  - kvm-qmp-dump-guest-memory-improve-schema-doc.patch [bz#832458]
  - kvm-qmp-dump-guest-memory-improve-schema-doc-again.patch [bz#832458]
  - kvm-qmp-dump-guest-memory-don-t-spin-if-non-blocking-fd-.patch [bz#832458]
  - kvm-hmp-dump-guest-memory-hardcode-protocol-argument-to-.patch [bz#832458]
  - Resolves: bz#767944
    ([Intel 6.4 FEAT] VIRT: TSC deadline support for qemu-kvm)
  - Resolves: bz#832458
    ([FEAT RHEL6.4]: Support dump-guest-memory monitor command)
  - Resolves: bz#833687
    (manpage says e1000 is the default nic (default is rtl8139))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.322.el6
changelog:
  - kvm-spice-switch-to-queue-for-vga-mode-updates.patch [bz#854528]
  - kvm-spice-split-qemu_spice_create_update.patch [bz#854528]
  - kvm-spice-add-screen-mirror.patch [bz#854528]
  - kvm-spice-send-updates-only-for-changed-screen-content.patch [bz#854528]
  - kvm-tracetool-support-format-strings-containing-parenthe.patch [bz#820136]
  - kvm-qxl-add-dev-id-to-guest-prints.patch [bz#820136]
  - kvm-qxl-logger-add-timestamp-to-command-log.patch [bz#820136]
  - kvm-hw-qxl-Fix-format-string-errors.patch [bz#820136]
  - kvm-qxl-switch-qxl.c-to-trace-events.patch [bz#820136]
  - kvm-qxl-better-cleanup-for-surface-destroy.patch [bz#820136]
  - kvm-qxl-qxl_render.c-add-trace-events.patch [bz#820136]
  - Resolves: bz#820136
    (RFE: Improve qxl logging by adding trace-events from upstream)
  - Resolves: bz#854528
    (spice: fix vga mode performance)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.323.el6
changelog:
  - kvm-create_config-separate-section-for-qemu_-dir-variabl.patch [bz#856422]
  - kvm-configure-add-localstatedir.patch [bz#856422]
  - kvm-qemu-ga-use-state-dir-from-CONFIG_QEMU_LOCALSTATEDIR.patch [bz#856422]
  - kvm-qemu-ga-ga_open_pidfile-add-new-line-to-pidfile.patch [bz#856422]
  - kvm-spec-pass-localstatedir-in-configure.patch [bz#856422]
  - kvm-add-tsc-deadline-flag-name-to-feature_ecx-table.patch [bz#767944]
  - kvm-qerror-OpenFileFailed-add-__com.redhat_error_message.patch [bz#806775]
  - kvm-monitor-memory_save-pass-error-message-to-OpenFileFa.patch [bz#806775]
  - kvm-dump-qmp_dump_guest_memory-pass-error-message-to-Ope.patch [bz#806775]
  - kvm-blockdev-do_change_block-pass-error-message-to-OpenF.patch [bz#806775]
  - kvm-blockdev-qmp_transaction-pass-error-message-to-OpenF.patch [bz#806775]
  - kvm-blockdev-drive_reopen-pass-error-message-to-OpenFile.patch [bz#806775]
  - Resolves: bz#767944
    ([Intel 6.4 FEAT] VIRT: TSC deadline support for qemu-kvm)
  - Resolves: bz#806775
    (QMP: add errno information to OpenFileFailed error)
  - Resolves: bz#856422
    (qemu-ga: after reboot of frozen fs, guest-fsfreeze-status is wrong)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.324.el6
changelog:
  - kvm-qxl-Add-set_client_capabilities-interface-to-QXLInte.patch [bz#860017]
  - kvm-qxl-Ignore-set_client_capabilities-pre-post-migrate.patch [bz#860017]
  - kvm-qxl-Set-default-revision-to-4.patch [bz#860017]
  - Resolves: bz#860017
    ([RFE] -spice- Add rendering support in order to improve spice performance)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.325.el6
changelog:
  - kvm-x86-cpuid-add-missing-CPUID-feature-flag-names.patch [bz#843084]
  - kvm-x86-Implement-SMEP-and-SMAP.patch [bz#843084]
  - kvm-i386-cpu-add-missing-CPUID-EAX-7-ECX-0-flag-names.patch [bz#843084]
  - kvm-add-missing-CPUID-bit-constants.patch [bz#843084]
  - kvm-add-Haswell-CPU-model.patch [bz#843084]
  - kvm-scsi-introduce-hotplug-and-hot_unplug-interfaces-for.patch [bz#808660]
  - kvm-scsi-establish-precedence-levels-for-unit-attention.patch [bz#808660]
  - kvm-scsi-disk-report-resized-disk-via-sense-codes.patch [bz#808660]
  - kvm-scsi-report-parameter-changes-to-HBA-drivers.patch [bz#808660]
  - kvm-virtio-scsi-do-not-crash-on-adding-buffers-to-the-ev.patch [bz#808660]
  - kvm-virtio-scsi-Implement-hotplug-support-for-virtio-scs.patch [bz#808660]
  - kvm-virtio-scsi-Report-missed-events.patch [bz#808660]
  - kvm-virtio-scsi-do-not-report-dropped-events-after-reset.patch [bz#808660]
  - kvm-virtio-scsi-report-parameter-change-events.patch [bz#808660]
  - kvm-virtio-scsi-add-backwards-compatibility-properties-f.patch [bz#808660]
  - kvm-x86-Fix-DPL-write-back-of-segment-registers.patch [bz#852612]
  - kvm-x86-Remove-obsolete-SS.RPL-DPL-aligment.patch [bz#852612]
  - Resolves: bz#808660
    (RFE - Virtio-scsi should support block_resize)
  - Resolves: bz#843084
    ([Intel 6.4 FEAT] Haswell new instructions support for qemu-kvm)
  - Resolves: bz#852612
    (guest hang if query cpu frequently during pxe boot)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.326.el6
changelog:
  - kvm-bitmap-add-a-generic-bitmap-and-bitops-library.patch [bz#844627]
  - kvm-bitops-fix-test_and_change_bit.patch [bz#844627]
  - kvm-add-hierarchical-bitmap-data-type-and-test-cases.patch [bz#844627]
  - kvm-block-implement-dirty-bitmap-using-HBitmap.patch [bz#844627]
  - kvm-block-return-count-of-dirty-sectors-not-chunks.patch [bz#844627]
  - kvm-block-allow-customizing-the-granularity-of-the-dirty.patch [bz#844627]
  - kvm-mirror-use-target-cluster-size-as-granularity.patch [bz#844627]
  - kvm-qxl-don-t-abort-on-guest-trigerrable-ring-indices-mi.patch [bz#770842]
  - kvm-qxl-Slot-sanity-check-in-qxl_phys2virt-is-off-by-one.patch [bz#770842]
  - kvm-hw-qxl.c-qxl_phys2virt-replace-panics-with-guest_bug.patch [bz#770842]
  - kvm-qxl-check-for-NULL-return-from-qxl_phys2virt.patch [bz#770842]
  - kvm-qxl-replace-panic-with-guest-bug-in-qxl_track_comman.patch [bz#770842]
  - kvm-qxl-qxl_add_memslot-remove-guest-trigerrable-panics.patch [bz#770842]
  - kvm-qxl-don-t-assert-on-guest-create_guest_primary.patch [bz#770842]
  - kvm-qxl-Add-missing-GCC_FMT_ATTR-and-fix-format-specifie.patch [bz#770842]
  - kvm-qxl-ioport_write-remove-guest-trigerrable-abort.patch [bz#770842]
  - kvm-hw-qxl-s-qxl_guest_bug-qxl_set_guest_bug.patch [bz#770842]
  - kvm-hw-qxl-ignore-guest-from-guestbug-until-reset.patch [bz#770842]
  - kvm-qxl-reset-current_async-on-qxl_soft_reset.patch [bz#770842]
  - kvm-qxl-update_area_io-guest_bug-on-invalid-parameters.patch [bz#770842]
  - kvm-qxl-disallow-unknown-revisions.patch [bz#770842]
  - kvm-qxl-add-QXL_IO_MONITORS_CONFIG_ASYNC.patch [bz#770842]
  - kvm-configure-print-spice-protocol-and-spice-server-vers.patch [bz#770842]
  - kvm-qemu-ga-switch-to-the-new-error-format-on-the-wire.patch [bz#797227]
  - kvm-rtl8139-implement-8139cp-link-status.patch [bz#852965]
  - kvm-e1000-update-nc.link_down-in-e1000_post_load.patch [bz#852965]
  - kvm-virtio-net-update-nc.link_down-in-virtio_net_load.patch [bz#852965]
  - Resolves: bz#770842
    (RFE: qemu-kvm: qxl device should support multiple monitors)
  - Resolves: bz#797227
    (qemu guest agent should report error description)
  - Resolves: bz#844627
    (copy cluster-sized blocks to the target of live storage migration)
  - Resolves: bz#852965
    (set_link can not change rtl8139 network card's status)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.327.el6
changelog:
  - kvm-fdc-fix-DIR-register-migration.patch [bz#854474]
  - kvm-fdc-introduce-new-property-migrate_dir.patch [bz#854474]
  - kvm-usb-redir-Change-usbredir_open_chardev-into-usbredir.patch [bz#861331]
  - kvm-usb-redir-Don-t-make-migration-fail-in-none-seamless.patch [bz#861331]
  - Resolves: bz#854474
    (floppy I/O error after do live migration with floppy in used)
  - Resolves: bz#861331
    (Allow non-seamless migration of vms with usb-redir devices)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.328.el6
changelog:
  - kvm-raw-posix-don-t-assign-bs-read_only.patch [bz#767233]
  - kvm-block-clarify-the-meaning-of-BDRV_O_NOCACHE.patch [bz#767233]
  - kvm-qcow2-Update-whole-header-at-once.patch [bz#767233]
  - kvm-qcow2-Keep-unknown-header-extension-when-rewriting-h.patch [bz#767233]
  - kvm-block-push-bdrv_change_backing_file-error-checking-u.patch [bz#767233]
  - kvm-block-update-in-memory-backing-file-and-format.patch [bz#767233]
  - kvm-stream-fix-ratelimiting-corner-case.patch [bz#767233]
  - kvm-stream-tweak-usage-of-bdrv_co_is_allocated.patch [bz#767233]
  - kvm-stream-move-is_allocated_above-to-block.c.patch [bz#767233]
  - kvm-block-New-bdrv_get_flags.patch [bz#767233]
  - kvm-block-correctly-set-the-keep_read_only-flag.patch [bz#767233]
  - kvm-block-Framework-for-reopening-files-safely.patch [bz#767233]
  - kvm-block-move-aio-initialization-into-a-helper-function.patch [bz#767233]
  - kvm-block-move-open-flag-parsing-in-raw-block-drivers-to.patch [bz#767233]
  - kvm-block-use-BDRV_O_NOCACHE-instead-of-s-aligned_buf-in.patch [bz#767233]
  - kvm-block-purge-s-aligned_buf-and-s-aligned_buf_size-fro.patch [bz#767233]
  - kvm-cutils-break-fcntl_setfl-out-into-accesible-helper-f.patch [bz#767233]
  - kvm-block-raw-posix-image-file-reopen.patch [bz#767233]
  - kvm-block-raw-image-file-reopen.patch [bz#767233]
  - kvm-block-qed-image-file-reopen.patch [bz#767233]
  - kvm-block-qcow2-image-file-reopen.patch [bz#767233]
  - kvm-block-qcow-image-file-reopen.patch [bz#767233]
  - kvm-block-vdi-image-file-reopen.patch [bz#767233]
  - kvm-block-vpc-image-file-reopen.patch [bz#767233]
  - kvm-block-convert-bdrv_commit-to-use-bdrv_reopen.patch [bz#767233]
  - kvm-block-remove-keep_read_only-flag-from-BlockDriverSta.patch [bz#767233]
  - kvm-block-after-creating-a-live-snapshot-make-old-image-.patch [bz#767233]
  - kvm-block-add-support-functions-for-live-commit-to-find-.patch [bz#767233]
  - kvm-qerror-add-QERR_INVALID_PARAMETER_COMBINATION.patch [bz#767233]
  - kvm-qerror-Error-types-for-block-commit.patch [bz#767233]
  - kvm-block-add-live-block-commit-functionality.patch [bz#767233]
  - kvm-block-helper-function-to-find-the-base-image-of-a-ch.patch [bz#767233]
  - kvm-QAPI-add-command-for-live-block-commit-block-commit.patch [bz#767233]
  - kvm-block-make-bdrv_find_backing_image-compare-canonical.patch [bz#767233]
  - kvm-block-in-commit-determine-base-image-from-the-top-im.patch [bz#767233]
  - Resolves: bz#767233
    (RFE - Support advanced (bi-directional) live deletion / merge of snapshots)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.329.el6
changelog:
  - kvm-Introduce-machine-command-option.patch [bz#859447]
  - kvm-Generalize-machine-command-line-option.patch [bz#859447]
  - kvm-Allow-to-leave-type-on-default-in-machine.patch [bz#859447]
  - kvm-qemu-option-Introduce-default-mechanism.patch [bz#859447]
  - kvm-qemu-option-Add-support-for-merged-QemuOptsLists.patch [bz#859447]
  - kvm-Make-machine-enable-kvm-options-merge-into-a-single-.patch [bz#859447]
  - kvm-memory-add-machine-dump-guest-core-on-off.patch [bz#859447]
  - Resolves: bz#859447
    ([Hitachi 6.4 FEAT] Coredump filter to exclude KVM guest OS memory out of QEMU process)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.330.el6
changelog:
  - kvm-e1000-switch-to-symbolic-names-for-pci-registers.patch [bz#866736]
  - kvm-pci-interrupt-pin-documentation-update.patch [bz#866736]
  - kvm-e1000-Don-t-set-the-Capabilities-List-bit.patch [bz#866736]
  - kvm-qemu-ga-pass-error-message-to-OpenFileFailed-error.patch [bz#867983]
  - Resolves: bz#866736
    ([hck][svvp] PCI Hardware Compliance Test for Systems job failed when e1000 is in use)
  - Resolves: bz#867983
    (qemu-ga: empty reason string for OpenFileFailed error)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.331.el6
changelog:
  - kvm-scsi-simplify-handling-of-the-VPD-page-length-field.patch [bz#831102]
  - kvm-scsi-block-remove-properties-that-are-not-relevant-f.patch [bz#831102]
  - kvm-scsi-more-fixes-to-properties-for-passthrough-device.patch [bz#831102]
  - Resolves: bz#831102
    (add the ability to set a wwn for SCSI disks)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.332.el6
changelog:
  - kvm-Fixes-related-to-processing-of-qemu-s-numa-option.patch [bz#733720]
  - kvm-create-kvm_arch_vcpu_id-function.patch [bz#733720]
  - kvm-target-i386-kvm-set-vcpu_id-to-APIC-ID-instead-of-CP.patch [bz#733720]
  - kvm-fw_cfg-remove-FW_CFG_MAX_CPUS-from-fw_cfg_init.patch [bz#733720]
  - kvm-pc-set-CPU-APIC-ID-explicitly.patch [bz#733720]
  - kvm-pc-set-fw_cfg-data-based-on-APIC-ID-calculation.patch [bz#733720]
  - kvm-CPU-hotplug-use-apic_id_for_cpu.patch [bz#733720]
  - kvm-target-i386-topology-and-APIC-ID-utility-functions.patch [bz#733720]
  - kvm-sysemu.h-add-extern-declarations-for-smp_cores-smp_t.patch [bz#733720]
  - kvm-pc-generate-APIC-IDs-according-to-CPU-topology.patch [bz#733720]
  - Resolves: bz#733720
    ('-smp 24,sockets=2,cores=6,threads=2' exposes 8 & 4 cores to CPUs on RHEL6 Linux guests)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.333.el6
changelog:
  - kvm-i386-kvm-kvm_arch_get_supported_cpuid-move-R_EDX-hac.patch [bz#691638]
  - kvm-i386-kvm-kvm_arch_get_supported_cpuid-replace-nested.patch [bz#691638]
  - kvm-i386-kvm-set-CPUID_EXT_HYPERVISOR-on-kvm_arch_get_su.patch [bz#691638]
  - kvm-i386-kvm-set-CPUID_EXT_TSC_DEADLINE_TIMER-on-kvm_arc.patch [bz#691638]
  - kvm-i386-kvm-x2apic-is-not-supported-without-in-kernel-i.patch [bz#691638]
  - kvm-target-i385-make-cpu_x86_fill_host-void.patch [bz#691638]
  - kvm-target-i386-cpu-make-cpu-host-check-enforce-code-KVM.patch [bz#691638]
  - kvm-target-i386-kvm_cpu_fill_host-use-GET_SUPPORTED_CPUI.patch [bz#691638]
  - Resolves: bz#691638
    (x2apic is not exported to guest when boot guest with -cpu host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.334.el6
changelog:
  - kvm-i386-cpu-name-new-CPUID-bits.patch [bz#838126]
  - kvm-x86-cpu-add-new-Opteron-CPU-model.patch [bz#838126]
  - Resolves: bz#838126
    ([FEAT RHEL 6.4] Include support for AMD Seoul (AMD Opteron™ 4xxx series) processor)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.335.el6
changelog:
  - kvm-vl-Fix-cross-version-migration-for-odd-RAM-sizes.patch [bz#860573]
  - Resolves: bz#860573
    (Live migration from rhel6.3 release version to rhel6.4 newest version with 501MB memory in guest will fail)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.336.el6
changelog:
  - kvm-usb-host-scan-for-usb-devices-when-the-vm-starts.patch [bz#876534]
  - kvm-qxl-call-dpy_gfx_resize-when-entering-vga-mode.patch [bz#865767]
  - kvm-vga-fix-bochs-alignment-issue.patch [bz#877933]
  - Resolves: bz#865767
    (qemu crashed when rhel6.3 64 bit guest reboots)
  - Resolves: bz#876534
    ([regression] unable to boot from usb-host devices)
  - Resolves: bz#877933
    (vga: fix bochs alignment issue)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.337.el6
changelog:
  - kvm-hyper-v-Minimal-hyper-v-support.patch [bz#801196]
  - Resolves: bz#801196
    (Win28k KVM guest on RHEL6.1 BSOD with CLOCK_WATCHDOG_TIMEOUT)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.338.el6
changelog:
  - kvm-remove-rdtscp-flag-from-Opteron_G5-model-definition.patch [bz#874400]
  - kvm-block-add-bdrv_reopen-support-for-raw-hdev-floppy-an.patch [bz#877339]
  - kvm-qcow2-Fix-refcount-table-size-calculation.patch [bz#870917]
  - kvm-qapi-disable-block-commit-command-for-rhel.patch [bz#878991]
  - Resolves: bz#870917
    (qcow2: Crash when growing large refcount table)
  - Resolves: bz#874400
    ("rdtscp" flag defined on Opteron_G5 model and cann't be exposed to guest)
  - Resolves: bz#877339
    (fail to commit live snapshot image(lv) to a backing image(lv))
  - Resolves: bz#878991
    (block-commit functionality should be RHEV-only, and disabled for RHEL)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.339.el6
changelog:
  - kvm-Recognize-PCID-feature.patch [bz#869214]
  - kvm-target-i386-cpu-add-CPUID_EXT_PCID-constant.patch [bz#869214]
  - kvm-add-PCID-feature-to-Haswell-CPU-model-definition.patch [bz#869214]
  - Resolves: bz#869214
    (Cpu flag "invpcid" is not exposed to guest on Hashwell host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.340.el6
changelog:
  - kvm-qxl-reload-memslots-after-migration-when-qxl-is-in-U.patch [bz#874574]
  - Resolves: bz#874574
    (VM terminates when changing display configuration during migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.341.el6
changelog:
  - Add Conflicts to spec file [bz#877901]
  - Resolves: bz#877901
    (qemu-img and qemu-kvm conflict with qemu-img-rhev and qemu-kvm-rhev)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.342.el6
changelog:
  - kvm-add-cscope.-to-.gitignore.patch
  - kvm-.gitignore-ignore-vi-swap-files-and-ctags-files.patch
  - kvm-Add-TAGS-and-to-.gitignore.patch


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.343.el6
changelog:
  - kvm-Revert-hyper-v-Minimal-hyper-v-support.patch [bz#801196]
  - Related: bz#801196
    (Win28k KVM guest on RHEL6.1 BSOD with CLOCK_WATCHDOG_TIMEOUT)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.344.el6
changelog:
  - kvm-hw-pc-Correctly-order-compatibility-props.patch [bz#733302]
  - kvm-trace-trace-monitor-qmp-dispatch-completion.patch [bz#881732]
  - kvm-Add-query-events-command-to-QMP-to-query-async-event.patch [bz#881732]
  - kvm-Add-event-notification-for-guest-balloon-changes.patch [bz#881732]
  - kvm-Add-rate-limiting-of-RTC_CHANGE-BALLOON_CHANGE-WATCH.patch [bz#881732]
  - Resolves: bz#733302
    (Migration failed with error "warning: error while loading state for instance 0x0 of device '0000:00:02.0/qxl")
  - Resolves: bz#881732
    (vdsm: vdsm is stuck in recovery for almost an hour on NFS storage with running vm's when blocking storage from host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.345.el6
changelog:
  - Update spec file to generate i686 and win32 packages [bz#787723 bz#815180]
  - Resolves: bz#787723 bz#815180


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.347.el6
changelog:
  - kvm-qxl-vnc-register-a-vm-state-change-handler-for-dummy.patch [#873563]
  - kvm-hyper-v-Minimal-hyper-v-support-v5.patch [#801196]
  - kvm-audio-split-sample-conversion-and-volume-mixing.patch [bz#884253]
  - kvm-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-audio-don-t-apply-volume-effect-if-backend-has-VOICE.patch [bz#884253]
  - kvm-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - Resolves: bz#873563
    (Guest aborted when boot with vnc and qxl)
  - Resolves: bz#801196
    (Win28k KVM guest on RHEL6.1 BSOD with CLOCK_WATCHDOG_TIMEOUT)
  - Resolves bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.348.el6
changelog:
  - kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
  - kvm-vmmouse-add-reset-handler.patch [bz#884450]
  - kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
  - kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
  - kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
  - kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
  - Resolves: bz#879559
    (spice with non-qxl vga dumps core)
  - Resolves: bz#884450
    (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
  - Resolves: bz#887897
    (Backport vpc initialization of the Dynamic Disk Header fix)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.349.el6
changelog:
  - kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
  - kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
  - kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
  - kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
  - Resolves: bz#886798
    (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
  - Resolves: bz#890288
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.350.el6
changelog:
  - kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
  - kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
  - kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
  - kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
  - kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
  - kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
  - kvm-dataplane-add-event-loop.patch [bz#877836]
  - kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
  - kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
  - kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
  - kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
  - kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
  - kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
  - kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
  - kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
  - kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
  - Resolves: bz#877836
    (backport virtio-blk data-plane patches)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.351.el6
changelog:
  - kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
  - Resolves: bz#839832
    (qemu-ga: document selinux policy for read/write of guest files)
  - Resolves: bz#885644
    (Memory leak and use after free in qxl_render_update_area_unlocked())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.353.el6
changelog:
  - kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
  - kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
  - kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
  - kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
  - kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
  - Resolves: bz#869981
    (Cross version migration between different host with spice is broken)
  - Resolves: bz#876982
    (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
  - Resolves: bz#894995
    (core dump when install windows guest with x-data-plane=on)
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.354.el6
changelog:
  - spec: add Epoch to old_conflict_ver
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6
changelog:
  - kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
  - kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.356.el6
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.357.el6
changelog:
  - kvm-block-fix-block-tray-status.patch [bz#890012]
  - kvm-qdev-add-blocksize-property-type.patch [bz#889135]
  - kvm-block-enforce-constraints-on-block-size-properties.patch [bz#889135]
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910842]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910842]
  - Resolves: bz#889135
    (core trace/dump if specify the value of physical_block_size/logical_block_size is not multiple of 512 bytes)
  - Resolves: bz#890012
    (tray-open should be 1 after ejects the CD-ROM for virtio-scsi device)
  - Resolves: bz#910842
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.5])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.358.el6
changelog:
  - kvm-Revert-block-fix-block-tray-status.patch [bz#890012]
  - Related: bz#890012
    (tray-open should be 1 after ejects the CD-ROM for virtio-scsi device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.359.el6
changelog:
  - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
  - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
  - Resolves: bz#907716
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.360.el6
changelog:
  - kvm-Fix-regression-introduced-by-machine-accel.patch [bz#916020]
  - Resolves: bz#916020
    ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.361.el6
changelog:
  - kvm-vnc-disable-VNC-password-authentication-security-typ.patch [bz#817066]
  - kvm-vga-simplify-screendump.patch [bz#869496]
  - kvm-virtio-net-stop-start-bh-when-appropriate.patch [bz#843797]
  - kvm-net-clean-up-network-at-qemu-process-termination.patch [bz#884590]
  - kvm-qemu-img-add-image-fragmentation-statistics.patch [bz#888008]
  - kvm-qemu-img-check-r-for-repairing-images.patch [bz#888008]
  - kvm-qemu-img-check-Print-fixed-clusters-and-recheck.patch [bz#888008]
  - kvm-qcow2-Support-for-fixing-refcount-inconsistencies.patch [bz#888008]
  - kvm-qemu-img-find-the-image-end-offset-during-check.patch [bz#888008]
  - kvm-block-add-BLOCK_O_CHECK-for-qemu-img-check.patch [bz#888008]
  - kvm-qemu.img.c-Use-error_report-instead-of-own-error-imp.patch [bz#888008]
  - kvm-Remove-NULL-checks-for-bdrv_new-return-value.patch [bz#888008]
  - kvm-qemu-img-Improve-error-messages-for-failed-bdrv_open.patch [bz#888008]
  - kvm-Don-t-require-encryption-password-for-qemu-img-info-.patch [bz#888008]
  - kvm-block-Replace-bdrv_get_format-by-bdrv_get_format_nam.patch [bz#888008]
  - kvm-qemu-img-add-json-output-option-to-the-check-command.patch [bz#888008]
  - kvm-block-raw-posix-detect-readonly-Linux-block-devices-.patch [bz#901484]
  - kvm-qemu-img-convert-Remove-s-from-getopt-string.patch [bz#924165]
  - kvm-qemu-img-Fix-division-by-zero-for-zero-size-images.patch [bz#864378]
  - Resolves: bz#817066
    (QEMU should disable VNC password auth when in FIPS 140-2 mode)
  - Resolves: bz#843797
    (qemu-kvm core dumps when virtio-net(w/ tx=timer and vhost=on) RHEL.6(w/ msi-x enabled) guest shutting down)
  - Resolves: bz#864378
    (qemu-img convert fails with Floating Point Exception with zero length source image)
  - Resolves: bz#869496
    (screendump wont save PPM image file if qemu-kvm booted with '-S')
  - Resolves: bz#884590
    (ovs-ifup affect but ovs-ifdown not affect when run a guest with a wrong netdriver(e.g. ... -device virtio-pci-net,...))
  - Resolves: bz#888008
    (RFE: qemu-img should be able to report the amount of space used by a qcow2 image stored on a block device)
  - Resolves: bz#901484
    (Read-only LVM volume can be opened r/w)
  - Resolves: bz#924165
    (qemu-img convert -s is silently ignored)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.362.el6
changelog:
  - kvm-add-a-boot-option-to-do-strict-boot.patch [bz#903204]
  - kvm-qxl-set-revision-to-1-for-rhel6.0.0.patch [bz#893344]
  - kvm-usb-tag-usb-host-adapters-as-not-hotpluggable.patch [bz#879096]
  - kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#927336]
  - Resolves: bz#879096
    (qemu should disable hot-unplug usb-ehci controller and give a prompt if not support)
  - Resolves: bz#893344
    ("info qtree" output for qxl-vga does not match between rhel6.0 host and rhel6.4 host with -M rhel6.0.0)
  - Resolves: bz#903204
    (don't boot from un-selected devices (add a boot option 'strict' to qemu))
  - Resolves: bz#927336
    (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.363.el6
changelog:
  - kvm-ksmtuned-more-flexible-process-name-search-pattern.patch [bz#902688]
  - Resolves: bz#902688
    (incorrect committed_memory if set_process_name=1)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.364.el6
changelog:
  - kvm-qemu-ga-align-versioning-with-QEMU_VERSION.patch [bz#952873]
  - kvm-qemu-ga-make-names-more-generic-for-mount-list-funct.patch [bz#918311 bz#952873]
  - kvm-qemu-ga-add-guest-fstrim-command.patch [bz#918311 bz#952873]
  - kvm-error-drop-error_get_qobject-error_set_qobject.patch [bz#952873]
  - kvm-qemu-ga-don-t-leak-a-file-descriptor-upon-failed-loc.patch [bz#952873]
  - kvm-qemu-ga-Fix-null-pointer-passed-to-unlink-in-failure.patch [bz#952873]
  - kvm-qapi-Fix-enumeration-typo-error.patch [bz#952873]
  - kvm-qemu-ga-Remove-unreachable-code-after-g_error.patch [bz#952873]
  - kvm-qemu-ga-prefer-pstrcpy-consistently-NUL-terminate-if.patch [bz#952873]
  - kvm-cleanup-useless-return-sentence.patch [bz#952873]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#952873]
  - kvm-qemu-sockets-add-Error-to-all-functions.patch [bz#952873]
  - kvm-qemu-ga-ask-and-print-error-information-from-qemu-so.patch [bz#952873]
  - kvm-qga-channel-posix.c-Include-headers-it-needs.patch [bz#952873]
  - kvm-qemu-ga-guest_file_handle_find-take-an-Error-argumen.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_file_close-fix-fclose-error-check.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_shutdown-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-build_fs_mount_list-take-an-Error-argument.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_fsfreeze_-get-rid-of-sprintf-error.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_fstrim-get-rid-of-sprintf-error_se.patch [bz#952873]
  - kvm-qemu-ga-bios_supports_mode-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-guest_suspend-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-execute-hook-to-quiesce-the-guest-on-fsfreez.patch [bz#911569 bz#952873]
  - kvm-qemu-ga-sample-fsfreeze-hooks.patch [bz#911569 bz#952873]
  - kvm-qga-channel-posix.c-Explicitly-include-string.h.patch [bz#952873]
  - kvm-qemu-ga-ga_open_pidfile-use-qemu_open.patch [bz#892996 bz#952873]
  - kvm-qemu-ga-add-ga_open_logfile.patch [bz#892996 bz#952873]
  - kvm-qemu-ga-Document-intentional-fall-through-in-channel.patch [bz#952873]
  - kvm-qemu-ga-Drop-pointless-lseek-from-ga_open_pidfile.patch [bz#952873]
  - kvm-qemu-ga-Plug-file-descriptor-leak-on-ga_open_pidfile.patch [bz#952873]
  - kvm-qemu-ga-Plug-fd-leak-on-ga_channel_listen_accept-err.patch [bz#952873]
  - kvm-qemu-ga-Plug-fd-leak-on-ga_channel_open-error-paths.patch [bz#952873]
  - kvm-qemu-ga-Handle-errors-uniformely-in-ga_channel_open.patch [bz#952873]
  - kvm-qga-add-missing-commas-in-json-docs.patch [bz#952873]
  - kvm-qemu-ga-Plug-memory-leak-in-guest_fsfreeze_cleanup.patch [bz#952873]
  - kvm-qemu-ga-Fix-unchecked-strdup-by-converting-to-g_strd.patch [bz#952873]
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#952873]
  - kvm-qemu-ga-fix-confusing-GAChannelMethod-comparison.patch [bz#952873]
  - kvm-qemu-ga-make-guest-sync-delimited-available-during-f.patch [bz#952873]
  - kvm-qga-add-guest-get-time-command.patch [bz#952873]
  - kvm-qga-add-guest-set-time-command.patch [bz#952873]
  - kvm-qga-introduce-guest-get-vcpus-guest-set-vcpus-with-s.patch [bz#924684 bz#952873]
  - kvm-qga-implement-qmp_guest_get_vcpus-for-Linux-with-sys.patch [bz#924684 bz#952873]
  - kvm-qga-implement-qmp_guest_set_vcpus-for-Linux-with-sys.patch [bz#924684 bz#952873]
  - kvm-Fix-typos-and-misspellings.patch [bz#952873]
  - kvm-qga-add-windows-implementation-for-guest-get-time.patch [bz#952873]
  - kvm-qga-add-windows-implementation-for-guest-set-time.patch [bz#952873]
  - kvm-qga-schema-document-generic-QERR_UNSUPPORTED.patch [bz#924684 bz#952873]
  - kvm-qga-convert-qemu_mallocz-to-g_malloc0-and-qemu_free-.patch [bz#952873]
  - Resolves: bz#892996
    (qemu-ga leaks fds to exec()ed processes [TestOnly])
  - Resolves: bz#911569
    ([Hitachi 6.5 FEAT] Application-consistent online backup (qemu-ga freeze/thaw hooks for linux guests))
  - Resolves: bz#918311
    (Backport qemu-ga guest-fstrim command to RHEL 6.x [TestOnly])
  - Resolves: bz#924684
    ([FEAT] KVM guest agent vCPU plug/hot-unplug capability (RHEL 6) [TestOnly])
  - Resolves: bz#952873
    ([RH Engineering 6.5 FEAT] Synchronize qemu guest agent with upstream)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.365.el6
changelog:
  - kvm-qemu-ga-qmp_guest_file_-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_network_get_interfaces-get-rid-of-.patch [bz#952873]
  - kvm-Replace-non-portable-asprintf-by-g_strdup_printf.patch [bz#952873]
  - kvm-qemu-ga-Plug-leaks-on-qmp_guest_network_get_interfac.patch [bz#952873]
  - kvm-qemu-ga-use-key-value-store-to-avoid-recycling-fd-ha.patch [bz#952873]
  - kvm-qga-schema-mark-optional-GuestLogicalProcessor.can-o.patch [bz#924684 bz#952873]
  - kvm-qemu-ga-ga_get_fd_handle-abort-if-fd_counter-overflo.patch [bz#952873]
  - Resolves: bz#924684
    ([FEAT] KVM guest agent vCPU plug/hot-unplug capability (RHEL 6) [TestOnly])
  - Resolves: bz#952873
    ([RH Engineering 6.5 FEAT] Synchronize qemu guest agent with upstream)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.366.el6
changelog:
  - kvm-Revert-redhat-updating-version-info-for-qemu-kvm-0.1.patch []
  - kvm-Revert-qemu-ga-ga_get_fd_handle-abort-if-fd_counter-.patch []
  - kvm-Revert-qga-schema-mark-optional-GuestLogicalProcesso.patch []
  - kvm-Revert-qemu-ga-use-key-value-store-to-avoid-recyclin.patch []
  - kvm-Revert-qemu-ga-Plug-leaks-on-qmp_guest_network_get_i.patch []
  - kvm-Revert-Replace-non-portable-asprintf-by-g_strdup_pri.patch []
  - kvm-Revert-qemu-ga-qmp_guest_network_get_interfaces-get-.patch []
  - kvm-Revert-qemu-ga-qmp_guest_file_-improve-error-reporti.patch []
  - kvm-Revert-redhat-updating-version-info-for-qemu-kvm-0.1.patch []
  - kvm-Revert-qga-convert-qemu_mallocz-to-g_malloc0-and-qem.patch []
  - kvm-Revert-qga-schema-document-generic-QERR_UNSUPPORTED.patch []
  - kvm-Revert-qga-add-windows-implementation-for-guest-set-.patch []
  - kvm-Revert-qga-add-windows-implementation-for-guest-get-.patch []
  - kvm-Revert-Fix-typos-and-misspellings.patch []
  - kvm-Revert-qga-implement-qmp_guest_set_vcpus-for-Linux-w.patch []
  - kvm-Revert-qga-implement-qmp_guest_get_vcpus-for-Linux-w.patch []
  - kvm-Revert-qga-introduce-guest-get-vcpus-guest-set-vcpus.patch []
  - kvm-Revert-qga-add-guest-set-time-command.patch []
  - kvm-Revert-qga-add-guest-get-time-command.patch []
  - kvm-Revert-qemu-ga-make-guest-sync-delimited-available-d.patch []
  - kvm-Revert-qemu-ga-fix-confusing-GAChannelMethod-compari.patch []
  - kvm-Revert-qga-cast-to-int-for-DWORD-type.patch []
  - kvm-Revert-qemu-ga-Fix-unchecked-strdup-by-converting-to.patch []
  - kvm-Revert-qemu-ga-Plug-memory-leak-in-guest_fsfreeze_cl.patch []
  - kvm-Revert-qga-add-missing-commas-in-json-docs.patch []
  - kvm-Revert-qemu-ga-Handle-errors-uniformely-in-ga_channe.patch []
  - kvm-Revert-qemu-ga-Plug-fd-leak-on-ga_channel_open-error.patch []
  - kvm-Revert-qemu-ga-Plug-fd-leak-on-ga_channel_listen_acc.patch []
  - kvm-Revert-qemu-ga-Plug-file-descriptor-leak-on-ga_open_.patch []
  - kvm-Revert-qemu-ga-Drop-pointless-lseek-from-ga_open_pid.patch []
  - kvm-Revert-qemu-ga-Document-intentional-fall-through-in-.patch []
  - kvm-Revert-qemu-ga-add-ga_open_logfile.patch []
  - kvm-Revert-qemu-ga-ga_open_pidfile-use-qemu_open.patch []
  - kvm-Revert-qga-channel-posix.c-Explicitly-include-string.patch []
  - kvm-Revert-qemu-ga-sample-fsfreeze-hooks.patch []
  - kvm-Revert-qemu-ga-execute-hook-to-quiesce-the-guest-on-.patch []
  - kvm-Revert-qemu-ga-guest_suspend-improve-error-reporting.patch []
  - kvm-Revert-qemu-ga-bios_supports_mode-improve-error-repo.patch []
  - kvm-Revert-qemu-ga-qmp_guest_fstrim-get-rid-of-sprintf-e.patch []
  - kvm-Revert-qemu-ga-qmp_guest_fsfreeze_-get-rid-of-sprint.patch []
  - kvm-Revert-qemu-ga-build_fs_mount_list-take-an-Error-arg.patch []
  - kvm-Revert-qemu-ga-qmp_guest_shutdown-improve-error-repo.patch []
  - kvm-Revert-qemu-ga-qmp_guest_file_close-fix-fclose-error.patch []
  - kvm-Revert-qemu-ga-guest_file_handle_find-take-an-Error-.patch []
  - kvm-Revert-qga-channel-posix.c-Include-headers-it-needs.patch []
  - kvm-Revert-qemu-ga-ask-and-print-error-information-from-.patch []
  - kvm-Revert-qemu-sockets-add-Error-to-all-functions.patch []
  - kvm-Revert-reimplement-error_setg-and-error_setg_errno-f.patch []
  - kvm-Revert-cleanup-useless-return-sentence.patch []
  - kvm-Revert-qemu-ga-prefer-pstrcpy-consistently-NUL-termi.patch []
  - kvm-Revert-qemu-ga-Remove-unreachable-code-after-g_error.patch []
  - kvm-Revert-qapi-Fix-enumeration-typo-error.patch []
  - kvm-Revert-qemu-ga-Fix-null-pointer-passed-to-unlink-in-.patch []
  - kvm-Revert-qemu-ga-don-t-leak-a-file-descriptor-upon-fai.patch []
  - kvm-Revert-error-drop-error_get_qobject-error_set_qobjec.patch []
  - kvm-Revert-qemu-ga-add-guest-fstrim-command.patch []
  - kvm-Revert-qemu-ga-make-names-more-generic-for-mount-lis.patch []
  - kvm-Revert-qemu-ga-align-versioning-with-QEMU_VERSION.patch []
  - kvm-qga-convert-qemu_mallocz-to-g_malloc0-and-qemu_free-.patch [bz#952873]
  - kvm-qemu-ga-align-versioning-with-QEMU_VERSION.patch [bz#952873]
  - kvm-qemu-ga-make-names-more-generic-for-mount-list-funct.patch [bz#918311 bz#952873]
  - kvm-qemu-ga-add-guest-fstrim-command.patch [bz#918311 bz#952873]
  - kvm-error-drop-error_get_qobject-error_set_qobject.patch [bz#952873]
  - kvm-qemu-ga-don-t-leak-a-file-descriptor-upon-failed-loc.patch [bz#952873]
  - kvm-qemu-ga-Fix-null-pointer-passed-to-unlink-in-failure.patch [bz#952873]
  - kvm-qapi-Fix-enumeration-typo-error.patch [bz#952873]
  - kvm-qemu-ga-Remove-unreachable-code-after-g_error.patch [bz#952873]
  - kvm-qemu-ga-prefer-pstrcpy-consistently-NUL-terminate-if.patch [bz#952873]
  - kvm-cleanup-useless-return-sentence.patch [bz#952873]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#952873]
  - kvm-qemu-sockets-add-Error-to-all-functions.patch [bz#952873]
  - kvm-qemu-ga-ask-and-print-error-information-from-qemu-so.patch [bz#952873]
  - kvm-qga-channel-posix.c-Include-headers-it-needs.patch [bz#952873]
  - kvm-qemu-ga-guest_file_handle_find-take-an-Error-argumen.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_file_close-fix-fclose-error-check.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_file_-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_shutdown-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-build_fs_mount_list-take-an-Error-argument.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_fsfreeze_-get-rid-of-sprintf-error.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_fstrim-get-rid-of-sprintf-error_se.patch [bz#952873]
  - kvm-qemu-ga-qmp_guest_network_get_interfaces-get-rid-of-.patch [bz#952873]
  - kvm-qemu-ga-bios_supports_mode-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-guest_suspend-improve-error-reporting.patch [bz#952873]
  - kvm-qemu-ga-execute-hook-to-quiesce-the-guest-on-fsfreez.patch [bz#911569 bz#952873]
  - kvm-qemu-ga-sample-fsfreeze-hooks.patch [bz#911569 bz#952873]
  - kvm-qga-channel-posix.c-Explicitly-include-string.h.patch [bz#952873]
  - kvm-qemu-ga-ga_open_pidfile-use-qemu_open.patch [bz#892996 bz#952873]
  - kvm-qemu-ga-add-ga_open_logfile.patch [bz#892996 bz#952873]
  - kvm-qemu-ga-Document-intentional-fall-through-in-channel.patch [bz#952873]
  - kvm-qemu-ga-Drop-pointless-lseek-from-ga_open_pidfile.patch [bz#952873]
  - kvm-qemu-ga-Plug-file-descriptor-leak-on-ga_open_pidfile.patch [bz#952873]
  - kvm-qemu-ga-Plug-fd-leak-on-ga_channel_listen_accept-err.patch [bz#952873]
  - kvm-qemu-ga-Plug-fd-leak-on-ga_channel_open-error-paths.patch [bz#952873]
  - kvm-qemu-ga-Handle-errors-uniformely-in-ga_channel_open.patch [bz#952873]
  - kvm-qga-add-missing-commas-in-json-docs.patch [bz#952873]
  - kvm-Replace-non-portable-asprintf-by-g_strdup_printf.patch [bz#952873]
  - kvm-qemu-ga-Plug-memory-leak-in-guest_fsfreeze_cleanup.patch [bz#952873]
  - kvm-qemu-ga-Plug-leaks-on-qmp_guest_network_get_interfac.patch [bz#952873]
  - kvm-qemu-ga-Fix-unchecked-strdup-by-converting-to-g_strd.patch [bz#952873]
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#952873]
  - kvm-qemu-ga-fix-confusing-GAChannelMethod-comparison.patch [bz#952873]
  - kvm-qemu-ga-make-guest-sync-delimited-available-during-f.patch [bz#952873]
  - kvm-qemu-ga-use-key-value-store-to-avoid-recycling-fd-ha.patch [bz#952873]
  - kvm-qga-add-guest-get-time-command.patch [bz#952873]
  - kvm-qga-add-guest-set-time-command.patch [bz#952873]
  - kvm-qga-introduce-guest-get-vcpus-guest-set-vcpus-with-s.patch [bz#924684 bz#952873]
  - kvm-qga-implement-qmp_guest_get_vcpus-for-Linux-with-sys.patch [bz#924684 bz#952873]
  - kvm-qga-implement-qmp_guest_set_vcpus-for-Linux-with-sys.patch [bz#924684 bz#952873]
  - kvm-Fix-typos-and-misspellings.patch [bz#952873]
  - kvm-qga-add-windows-implementation-for-guest-get-time.patch [bz#952873]
  - kvm-qga-add-windows-implementation-for-guest-set-time.patch [bz#952873]
  - kvm-qga-schema-mark-optional-GuestLogicalProcessor.can-o.patch [bz#924684 bz#952873]
  - kvm-qga-schema-document-generic-QERR_UNSUPPORTED.patch [bz#924684 bz#952873]
  - kvm-qemu-ga-ga_get_fd_handle-abort-if-fd_counter-overflo.patch [bz#952873]
  - Resolves: bz#892996
    (qemu-ga leaks fds to exec()ed processes [TestOnly])
  - Resolves: bz#911569
    ([Hitachi 6.5 FEAT] Application-consistent online backup (qemu-ga freeze/thaw hooks for linux guests))
  - Resolves: bz#918311
    (Backport qemu-ga guest-fstrim command to RHEL 6.x [TestOnly])
  - Resolves: bz#924684
    ([FEAT] KVM guest agent vCPU plug/hot-unplug capability (RHEL 6) [TestOnly])
  - Resolves: bz#952873
    ([RH Engineering 6.5 FEAT] Synchronize qemu guest agent with upstream)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.367.el6
changelog:
  - kvm-qcow2-Return-real-error-code-in-qcow2_read_snapshots2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-code-in-qcow2_write_snapshot2.patch [bz#796011]
  - kvm-Add-new-macro-QEMU_PACKED-for-packed-C-structures2.patch [bz#796011]
  - kvm-qcow2-Update-snapshot-table-information-at-once2.patch [bz#796011]
  - kvm-qcow2-Cleanups-and-memleak-fix-in-qcow2_snapshot_cre2.patch [bz#796011]
  - kvm-qcow2-Rework-qcow2_snapshot_create-error-handling2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-in-qcow2_snapshot_goto2.patch [bz#796011]
  - kvm-qcow2-refcount-remove-dead-assignment2.patch [bz#796011]
  - kvm-qcow2-Fix-order-of-refcount-updates-in-qcow2_snapsho2.patch [bz#796011]
  - kvm-qcow2-Fix-order-in-qcow2_snapshot_delete2.patch [bz#796011]
  - kvm-qcow2-Return-real-error-in-qcow2_update_snapshot_ref2.patch [bz#796011]
  - kvm-qcow2-Fix-L1-write-error-handling-in-qcow2_update_sn2.patch [bz#796011]
  - kvm-Documentation-Remove-outdated-host_device-note2.patch [bz#953108]
  - kvm-pci-assign-Convert-iommu-property-to-booleam2.patch [bz#925170]
  - kvm-pci-assign-Allow-to-disable-MSI-perference-for-host-.patch [bz#925170]
  - kvm-block-bdrv_img_create-add-Error-argument2.patch [bz#877240]
  - kvm-qemu-img-img_create-pass-Error-object-to-bdrv_img_cr.patch [bz#877240]
  - kvm-qemu-img-img_create-drop-unneeded-goto-and-ret-varia2.patch [bz#877240]
  - kvm-qmp-qmp_transaction-pass-Error-object-to-bdrv_img_cr2.patch [bz#877240]
  - kvm-block-bdrv_img_create-drop-unused-error-handling-cod2.patch [bz#877240]
  - kvm-pc-Add-a-new-machine-type-rhel6.5.0.patch [bz#821741]
  - kvm-target-i386-cpu-Enable-SEP-by-default-for-rhel6.5.0-.patch [bz#821741]
  - kvm-revert-disable-SEP-on-all-CPU-models-745717.patch [bz#821741]
  - kvm-target-i386-cpu-Enable-SEP-for-Haswell-models.patch [bz#821741]
  - Resolves: bz#796011
    (Prompt error of trigger blkdebug: BLKDBG_CLUSTER_FREE event is not the same as expected)
  - Resolves: bz#821741
    ((re-)enable SEP flag on CPU models)
  - Resolves: bz#877240
    (QMP: improve error message for blockdev-snapshot-sync failure)
  - Resolves: bz#925170
    (MSI routing for 1553 card to guest stops working)
  - Resolves: bz#953108
    (qemu-img man page still mentions host_device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.368.el6
changelog:
  - kvm-Revert-usb-redir-Add-flow-control-supportn.patch [bz#909059]
  - kvm-Revert-spice-qemu-char.c-remove-intermediate-buffern.patch [bz#909059]
  - kvm-Revert-spice-qemu-char.c-add-throttlingn.patch [bz#909059]
  - kvm-Revert-virtio-console-Enable-port-throttling-when-chn.patch [bz#909059]
  - kvm-Revert-char-Throttle-when-host-connection-is-downn.patch [bz#909059]
  - kvm-Revert-char-Equip-the-unix-tcp-backend-to-handle-nonn.patch [bz#909059]
  - kvm-Revert-char-Update-send_all-to-handle-nonblocking-chn.patch [bz#909059]
  - kvm-Revert-char-Disable-write-callback-if-throttled-charn.patch [bz#909059]
  - kvm-Revert-char-Add-framework-for-a-write-unblocked-calln.patch [bz#909059]
  - kvm-Revert-iohandlers-Add-enable-disable_write_fd_handlen.patch [bz#909059]
  - kvm-Revert-char-Add-a-QemuChrHandlers-struct-to-initialin.patch [bz#909059]
  - kvm-Revert-char-mark-socket-closed-if-write-fails-with-En.patch [bz#909059]
  - kvm-Revert-char-Split-out-tcp-socket-close-code-in-a-sepn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_write-qemu_chr_fe_writen.patch [bz#909059]
  - kvm-char-rename-qemu_chr_printf-qemu_chr_fe_printfn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_read-qemu_chr_be_writen.patch [bz#909059]
  - kvm-char-rename-qemu_chr_can_read-qemu_chr_be_can_readn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_guest_open-qemu_chr_fe_openn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_guest_close-qemu_chr_fe_closen.patch [bz#909059]
  - kvm-char-qemu_chr_ioctl-qemu_chr_fe_ioctln.patch [bz#909059]
  - kvm-char-rename-qemu_chr_set_echo-qemu_chr_fe_set_echon.patch [bz#909059]
  - kvm-char-rename-qemu_chr_open-qemu_chr_newn.patch [bz#909059]
  - kvm-char-qemu_chr_open_opts-qemu_chr_new_from_optsn.patch [bz#909059]
  - kvm-char-rename-qemu_chr_close-qemu_chr_deleten.patch [bz#909059]
  - kvm-char-rename-qemu_chr_get_msgfd-qemu_chr_fe_get_msgfdn.patch [bz#909059]
  - kvm-char-remove-qemu_chr_send_eventn.patch [bz#909059]
  - kvm-char-document-the-functions-that-will-be-the-publicn.patch [bz#909059]
  - kvm-qemu-char-rename-qemu_chr_event-to-qemu_chr_be_eventn.patch [bz#909059]
  - kvm-rename-IOCanRWHandler-to-IOCanReadHandlern.patch [bz#909059]
  - kvm-qemu-char-Plug-memory-leak-on-qemu_chr_open_pty-erron.patch [bz#909059]
  - kvm-char-socket-fix-error-reportingn.patch [bz#909059]
  - kvm-qemu-char-remove-dead-confusing-logic-with-nb_stdio_n.patch [bz#909059]
  - kvm-char-add-IOWatchPoll-supportn.patch [bz#909059]
  - kvm-qemu-char-convert-fd_chr-to-use-a-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-convert-pty-to-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-convert-pty-to-GIOChannelnn.patch [bz#909059]
  - kvm-qemu-char-tcp-make-use-GIOChanneln.patch [bz#909059]
  - kvm-qemu-char-add-watch-supportn.patch [bz#909059]
  - kvm-qemu-char-add-pty-watchn.patch [bz#909059]
  - kvm-char-add-gio-watch-fn-for-tcp-backendsn.patch [bz#909059]
  - kvm-qemu-char-use-a-glib-timeout-instead-of-qemu-timern.patch [bz#909059]
  - kvm-virtio-console-add-flow-controln.patch [bz#909059]
  - kvm-virtio-serial-make-flow-control-explicit-in-virtio-cn.patch [bz#909059]
  - kvm-Add-glib-support-to-main-loopn.patch [bz#909059]
  - kvm-virtio-console-Add-some-trace-eventsn.patch [bz#909059]
  - kvm-char-Fix-return-type-of-qemu_chr_fe_add_watchn.patch [bz#909059]
  - kvm-fix-monitorn.patch [bz#909059]
  - kvm-qemu-char-rewrite-io_channel_send_all-and-drop-the-n.patch [bz#909059]
  - kvm-qstring-add-qstring_get_lengthn.patch [bz#909059]
  - kvm-Monitor-Make-output-buffer-dynamicn.patch [bz#909059]
  - kvm-usb-redir-Add-flow-control-supportn.patch [bz#909059]
  - kvm-qemu-char-eliminate-busy-waiting-on-can_read-returnin.patch [bz#909059]
  - kvm-qemu-char-really-fix-behavior-on-can_read-0n.patch [bz#909059]
  - kvm-qemu-char-another-io_add_watch_poll-fixn.patch [bz#909059]
  - kvm-virtio-console-Also-throttle-when-less-was-written-tn.patch [bz#909059]
  - kvm-virtio-console-Remove-any-pending-watches-on-closen.patch [bz#909059]
  - kvm-spice-qemu-char-Remove-dead-debugging-coden.patch [bz#909059]
  - kvm-spice-qemu-char-Add-watch-supportn.patch [bz#909059]
  - kvm-spice-qemu-char-Remove-intermediate-buffern.patch [bz#909059]
  - kvm-qemu-char-use-consistent-idiom-for-removing-sourcesn.patch [bz#909059]
  - kvm-qemu-char-simplify-pty-pollingn.patch [bz#909059]
  - kvm-qemu-char-correct-return-value-from-chr_read-function.patch [bz#909059]
  - kvm-qemu-char-do-not-operate-on-sources-from-finalize-can.patch [bz#909059]
  - kvm-char-introduce-a-blocking-version-of-qemu_chr_fe_wrin.patch [bz#909059]
  - kvm-virtio-console-add-a-no-flow-control-mode-for-compatn.patch [bz#909059]
  - Resolves: bz#909059
    (Switch to upstream solution for chardev flow control)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.369.el6
changelog:
  - kvm-qemu-img-allow-rebase-to-a-NULL-backing-file-when-un.patch [bz#670162]
  - kvm-qemu-img-rebase-use-empty-string-to-rebase-without-b.patch [bz#670162]
  - Spec file and qemu-ga files changes for qemu-ga [bz#911569]
  - Resolves: bz#670162
    ([RFE] Removing the backing file using qemu-img re-base)
  - Resolves: bz#911569
    ([Hitachi 6.5 FEAT] Application-consistent online backup (qemu-ga freeze/thaw hooks for linux guests))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.370.el6
changelog:
  - kvm-virtio-blk-fix-unplug-virsh-reboot.patch [bz#869586]
  - kvm-target-i386-cpuid-check-cpuid_7_0_ebx-too-on-check-e.patch [bz#882834]
  - kvm-qdev-New-qdev_prop_set_string.patch [bz#947416]
  - kvm-constify-value-pointer-for-qdev_prop_set_string.patch [bz#947416]
  - kvm-usb-storage-Forward-serial-number-to-scsi-disk.patch [bz#947416]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#953932]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#953932]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#953932]
  - Resolves: bz#869586
    (core dump happens when quitting qemu via monitor)
  - Resolves: bz#882834
    (no warning while check the lacked cpuid_7_0_ebx_feature_name flag)
  - Resolves: bz#947416
    (fail to specify the serial number for usb storage device)
  - Resolves: bz#953932
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.5])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.371.el6
changelog:
  - kvm-vmdk-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#960685]
  - kvm-block-Remove-unused-s-hd-in-various-drivers3.patch [bz#960685]
  - kvm-vmdk-fix-endianness-bugs.patch [bz#960685]
  - kvm-VMDK-introduce-VmdkExtent.patch [bz#960685]
  - kvm-VMDK-bugfix-align-offset-to-cluster-in-get_whole_clu.patch [bz#960685]
  - kvm-VMDK-probe-for-monolithicFlat-images.patch [bz#960685]
  - kvm-VMDK-separate-vmdk_open-by-format-version.patch [bz#960685]
  - kvm-VMDK-add-field-BDRVVmdkState.desc_offset.patch [bz#960685]
  - kvm-VMDK-flush-multiple-extents.patch [bz#960685]
  - kvm-VMDK-move-static-cid_update-flag-to-bs-field.patch [bz#960685]
  - kvm-VMDK-change-get_cluster_offset-return-type.patch [bz#960685]
  - kvm-VMDK-open-read-write-for-monolithicFlat-image.patch [bz#960685]
  - kvm-VMDK-create-different-subformats.patch [bz#960685]
  - kvm-VMDK-fix-coding-style.patch [bz#960685]
  - kvm-block-add-bdrv_get_allocated_file_size-operation.patch [bz#960685]
  - kvm-Use-new-macro-QEMU_PACKED-for-packed-structures.patch [bz#960685]
  - kvm-VMDK-enable-twoGbMaxExtentFlat.patch [bz#960685]
  - kvm-VMDK-add-twoGbMaxExtentSparse-support.patch [bz#960685]
  - kvm-VMDK-separate-vmdk_read_extent-vmdk_write_extent.patch [bz#960685]
  - kvm-VMDK-Opening-compressed-extent.patch [bz#960685]
  - kvm-VMDK-read-write-compressed-extent.patch [bz#960685]
  - kvm-VMDK-creating-streamOptimized-subformat.patch [bz#960685]
  - kvm-VMDK-bugfix-open-Haiku-vmdk-image.patch [bz#960685]
  - kvm-VMDK-bugfix-opening-vSphere-4-exported-image.patch [bz#960685]
  - kvm-VMDK-fix-leak-of-extent_file.patch [bz#960685]
  - kvm-vmdk-fix-return-values-of-vmdk_parent_open.patch [bz#960685]
  - kvm-vmdk-clean-up-open.patch [bz#960685]
  - kvm-vmdk-remove-unneeded-variable-assignment.patch [bz#960685]
  - kvm-vmdk-vmdk_read_cid-returns-garbage-if-p_name-is-NULL.patch [bz#960685]
  - kvm-vmdk-Improve-error-handling.patch [bz#960685]
  - kvm-vmdk-Fix-possible-segfaults.patch [bz#960685]
  - kvm-Include-zlib.h-using-include.patch [bz#960685]
  - kvm-block-vmdk-Fix-warning-from-splint-comparision-of-un.patch [bz#960685]
  - kvm-vmdk-Fix-header-structure.patch [bz#960685]
  - kvm-vmdk-Read-footer-for-streamOptimized-images.patch [bz#960685]
  - kvm-block-vmdk-image-file-reopen.patch [bz#960685]
  - kvm-vmdk-relative_path-use-pstrcpy-in-place-of-strncpy.patch [bz#960685]
  - kvm-vmdk-Fix-data-corruption-bug-in-WRITE-and-READ-handl.patch [bz#960685]
  - kvm-block-Use-error-code-EMEDIUMTYPE-for-wrong-format-in.patch [bz#960685]
  - kvm-vmdk-Allow-selecting-SCSI-adapter-in-image-creation.patch [bz#960685]
  - kvm-vmdk-Allow-space-in-file-name.patch [bz#960685]
  - kvm-vmdk-named-return-code.patch [bz#960685]
  - kvm-vmdk-add-support-for-zeroed-grain-GTE.patch [bz#960685]
  - kvm-vmdk-Add-option-to-create-zeroed-grain-image.patch [bz#960685]
  - kvm-vmdk-change-magic-number-to-macro.patch [bz#960685]
  - kvm-vmdk-store-fields-of-VmdkMetaData-in-cpu-endian.patch [bz#960685]
  - kvm-vmdk-add-bdrv_co_write_zeroes.patch [bz#960685]
  - Resolves: bz#960685
    ([RHEL-6.5] Backport support for vmdk image format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.372.el6
changelog:
  - kvm-usb-hub-limit-chain-length.patch [bz#905851]
  - kvm-usb-hub-report-status-changes-only-once.patch [bz#905851]
  - Resolves: bz#905851
    (Fail to start  guest which contains more than 51 usbs disk with multifunction)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.373.el6
changelog:
  - kvm-atapi-reset-cdrom-tray-statuses-on-ide_reset.patch [bz#886878]
  - kvm-build-sys-add-guards-to-generated-headers.patch [bz#884253]
  - kvm-audio-allow-machine-to-specify-if-mixemu-is-disabled.patch [bz#884253]
  - kvm-pc-machine-rhel-6.4-do-not-have-mixemu.patch [bz#884253]
  - kvm-hda-audio-do-not-export-vmstate_hda_audio_v1.patch [bz#884253]
  - kvm-hda-audio-register-different-device-depending-on-mix.patch [bz#884253]
  - kvm-audio-split-sample-conversion-and-volume-mixing3.patch [bz#884253]
  - kvm-audio-add-VOICE_VOLUME-ctl3.patch [bz#884253]
  - kvm-audio-don-t-apply-volume-effect-if-backend-has-VOICE3.patch [bz#884253]
  - kvm-hw-ac97-remove-USE_MIXER-code3.patch [bz#884253]
  - kvm-hw-ac97-the-volume-mask-is-not-only-0x1f3.patch [bz#884253]
  - kvm-hw-ac97-add-support-for-volume-control3.patch [bz#884253]
  - kvm-audio-spice-add-support-for-volume-control3.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))
  - Resolves: bz#886878
    (atapi: tray statuses (locked and open) are not reset on boot/reboot of guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.374.el6
changelog:
  - kvm-vnc-Add-SCROLL-lock-key-to-kbd_leds.patch [bz#955302]
  - kvm-vnc-Support-for-LED-state-extension.patch [bz#955302]
  - kvm-vnc-Adjust-lock-state-sync-logic-with-VNC_FEATURE_LE.patch [bz#955302]
  - kvm-doc-document-the-Pseudo-encoding-of-LED-state.patch [bz#955302]
  - kvm-block-fix-qcow2_co_flush-deadlock.patch [bz#962378]
  - kvm-add-a-new-runstate-RUN_STATE_GUEST_PANICKED.patch [bz#833530]
  - kvm-add-a-new-qevent-QEVENT_GUEST_PANICKED.patch [bz#833530]
  - kvm-introduce-a-new-qom-device-to-deal-with-panicked-eve.patch [bz#833530]
  - kvm-fw_cfg-add-required-header-files.patch [bz#833530]
  - kvm-generalize-rom_set_fw-RHEL-6-only.patch [bz#833530]
  - kvm-pvpanic-pass-configurable-ioport-to-seabios.patch [bz#833530]
  - kvm-pvpanic-add-document-of-pvpanic.patch [bz#833530]
  - kvm-pvpanic-create-pvpanic-by-default-for-machine-1.5.patch [bz#833530]
  - kvm-vl-new-runstate-transition-RUN_STATE_GUEST_PANICKED-.patch [bz#833530]
  - kvm-acpi-drop-debug-port.patch [bz#952240]
  - Resolves: bz#833530
    ([Hitachi 6.5 FEAT] (qemu-kvm) "virsh dump" support for automatic capturing and automatic actions after capturing.)
  - Resolves: bz#952240
    (hot-plugging multi-func devices caused: qemu: hardware error: register_ioport_write: invalid opaque)
  - Resolves: bz#955302
    ([6.5 FEAT] Support for LED state extension to Qemu VNC)
  - Resolves: bz#962378
    (I/O requests of RHEL6.3 KVM guest are hung indefinitely - suspected issue in qcow2_co_flush().)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.375.el6
changelog:
  - kvm-vnc-Make-ledstate-comparison-before-modifiers-update.patch [bz#955302]
  - Resolves: bz#955302
    ([6.5 FEAT] Support for LED state extension to Qemu VNC)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.376.el6
changelog:
  - kvm-Add-option-to-mlock-qemu-and-guest-memory.patch [bz#826340]
  - kvm-pci-assign-Add-MSI-affinity-support.patch [bz#919761]
  - kvm-block-add-block-driver-read-only-whitelist.patch [bz#960685]
  - kvm-qcow2-Reinitialise-counter-when-restarting-allocatio.patch [bz#974617]
  - kvm-scsi-reset-cdrom-tray-statuses-on-scsi_disk_reset.patch [bz#963773]
  - Resolves: bz#826340
    ([Hitachi 6.5 FEAT] Support mlock guest memory)
  - Resolves: bz#919761
    (IRQs are not distributed on a KVM guest correctly.)
  - Resolves: bz#960685
    ([RHEL-6.5] Backport support for vmdk image format)
  - Resolves: bz#963773
    (scsi-cd: tray statuses (locked and open) are not reset on boot/reboot of guest)
  - Resolves: bz#974617
    (qcow2 corruption bug in cluster allocation code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.377.el6
changelog:
  - ksm.init: Properly handle return value of init scripts [bz#972314]
  - kvm-osdep-add-qemu_get_local_state_pathname.patch [bz#962669]
  - kvm-qga-determine-default-state-dir-and-pidfile-dynamica.patch [bz#962669]
  - kvm-configure-don-t-save-any-fixed-local_statedir-for-wi.patch [bz#962669]
  - kvm-qga-create-state-directory-on-win32.patch [bz#962669]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#962669]
  - kvm-qga-save-state-directory-in-ga_install_service.patch [bz#962669]
  - kvm-Makefile-create-.-var-run-when-installing-the-POSIX-.patch [bz#962669]
  - kvm-scsi-change-removable-field-to-host-many-features.patch [bz#890011]
  - kvm-scsi-disk-scsi-block-device-for-scsi-pass-through-sh.patch [bz#890011]
  - kvm-use-atexit-for-quit_timers.patch [bz#843797]
  - Resolves: bz#843797
    (qemu-kvm core dumps when virtio-net(w/ tx=timer and vhost=on) RHEL.6(w/ msi-x enabled) guest shutting down)
  - Resolves: bz#890011
    (flooding with 'scsi-generic: execute_command: read failed !' error if eject the pass-through SCSI CD-ROM)
  - Resolves: bz#962669
    (Windows guest agent service failed to be started)
  - Resolves: bz#972314
    (Every upgrade starts 'ksmd' due to broken initscript 'status' function)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.378.el6
changelog:
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#976478]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#976478]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#976478]
  - Resolves: bz#976478
    (CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.379.el6
changelog:
  - kvm-block-add-the-blockio-limits-command-line-support.patch [bz#956825]
  - kvm-CoQueue-introduce-qemu_co_queue_wait_insert_head.patch [bz#956825]
  - kvm-block-add-I-O-throttling-algorithm.patch [bz#956825]
  - kvm-hmp-qmp-add-block_set_io_throttle.patch [bz#956825]
  - kvm-block-disable-I-O-throttling-on-sync-api.patch [bz#956825]
  - kvm-block-add-the-support-to-drain-throttled-requests.patch [bz#956825]
  - kvm-block-Factor-bdrv_read_unthrottled-out-of-guess_disk.patch [bz#956825]
  - kvm-block-fix-initialization-in-bdrv_io_limits_enable.patch [bz#956825]
  - kvm-qapi-Introduce-blockdev-group-snapshot-sync-comman2.patch [bz#956825]
  - kvm-block-fix-I-O-throttling-accounting-blind-spot.patch [bz#956825]
  - kvm-block-keep-I-O-throttling-slice-time-constant.patch [bz#956825]
  - kvm-block-drop-duplicated-slice-extension-code.patch [bz#956825]
  - kvm-block-clean-up-I-O-throttling-wait_time-code.patch [bz#956825]
  - kvm-ide-convert-ide_sector_read-to-asynchronous-I-O.patch [bz#956825]
  - kvm-ide-convert-ide_sector_write-to-asynchronous-I-O.patch [bz#956825]
  - kvm-serial-add-pci-variant.patch [bz#872015]
  - kvm-serial-fix-error-handling.patch [bz#872015]
  - kvm-qapi-shortcut-visits-on-errors.patch [bz#983635]
  - kvm-qapi-allow-freeing-partially-allocated-objects.patch [bz#983635]
  - kvm-qapi-untangle-next_list.patch [bz#983635]
  - kvm-qapi-fix-error-propagation.patch [bz#983635]
  - Resolves: bz#872015
    (A Windows VM can only see 2 of 4 assigned COM ports (Serial Devices))
  - Resolves: bz#956825
    (Backport IO throttling into RHEL 6.x KVM)
  - Resolves: bz#983635
    (QMP: bad input crashes QEMU)
  - Resolves: bz#977760
    (fail to boot guest attaching with vmdk format data disk(virito/virtio-scsi interface))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.380.el6
changelog:
  - kvm-kvmclock-clock-should-count-only-if-vm-is-running.patch [bz#903454]
  - kvm-spice-Add-spice-disable-agent-file-transfer-cmdline-.patch [bz#961850]
  - Update spice-server requirement [bz#961850]
  - Resolves: bz#903454
    (kvm guest crash after long stop/cont cycle)
  - Resolves: bz#961850
    (RFE: add -spice disable-agent-file-transfer cmdline option)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.381.el6
changelog:
  - kvm-qemu-char-Set-foo_tag-0-when-returning-FALSE-from-ca.patch [bz#676568]
  - kvm-qapi-generate-correct-enum-names-for-camel-case-enum.patch [bz#676568]
  - kvm-qapi-don-t-convert-enum-strings-to-lowercase.patch [bz#676568]
  - kvm-qapi-avoid-reserved-keywords.patch [bz#676568]
  - kvm-qapi-do-not-protect-enum-values-from-namespace-pollu.patch [bz#676568]
  - kvm-qapi-add-unix-to-the-set-of-reserved-words.patch [bz#676568]
  - kvm-qapi-generate-C-types-for-fixed-width-integers.patch [bz#676568]
  - kvm-qapi-Add-Visitor-interfaces-for-uint-_t-and-int-_t.patch [bz#676568]
  - kvm-qapi-add-String.patch [bz#676568]
  - kvm-qapi-add-socket-address-types.patch [bz#676568]
  - kvm-qmp-add-and-use-q-type-specifier.patch [bz#676568]
  - kvm-qemu-Add-opt_set_bool-functionality.patch [bz#676568]
  - kvm-build-add-QAPI-files-to-the-tools.patch [bz#676568]
  - kvm-qemu-sockets-unix_listen-and-unix_connect-are-portab.patch [bz#676568]
  - kvm-qemu-sockets-add-nonblocking-connect-for-Unix-socket.patch [bz#676568]
  - kvm-qemu-sockets-include-strerror-or-gai_strerror-output.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_connect_a.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_dgram_opt.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-inet_parse.patch [bz#676568]
  - kvm-qemu-sockets-add-error-propagation-to-Unix-socket-fu.patch [bz#676568]
  - kvm-qemu-ga-drop-temporary-extra-check-for-unix_listen-r.patch [bz#676568]
  - kvm-qemu-sockets-return-InetSocketAddress-from-inet_pars.patch [bz#676568]
  - kvm-qemu-sockets-add-socket_listen-socket_connect-socket.patch [bz#676568]
  - kvm-qemu-sockets-Fix-parsing-of-the-inet-option-to.patch [bz#676568]
  - kvm-qemu-socket-set-passed-fd-non-blocking-in-socket_con.patch [bz#676568]
  - kvm-qemu-char-ask-and-print-error-information-from-qemu-.patch [bz#676568]
  - kvm-vnc-avoid-Yoda-conditionals.patch [bz#676568]
  - kvm-vnc-introduce-a-single-label-for-error-returns.patch [bz#676568]
  - kvm-vnc-add-error-propagation-to-vnc_display_open.patch [bz#676568]
  - kvm-chardev-add-error-reporting-for-qemu_chr_new_from_op.patch [bz#676568]
  - kvm-chardev-fix-QemuOpts-lifecycle.patch [bz#676568]
  - kvm-chardev-reduce-chardev-ifdef-mess-a-bit.patch [bz#676568]
  - kvm-chardev-add-qmp-hotplug-commands-with-null-chardev-s.patch [bz#676568]
  - kvm-chardev-add-file-chardev-support-to-chardev-add-qmp.patch [bz#676568]
  - kvm-chardev-add-serial-chardev-support-to-chardev-add-qm.patch [bz#676568]
  - kvm-chardev-add-parallel-chardev-support-to-chardev-add-.patch [bz#676568]
  - kvm-chardev-add-socket-chardev-support-to-chardev-add-qm.patch [bz#676568]
  - kvm-chardev-add-pty-chardev-support-to-chardev-add-qmp.patch [bz#676568]
  - kvm-qemu-char-Avoid-unused-variable-warning-in-some-conf.patch [bz#676568]
  - kvm-qapi-Flatten-away-ChardevPort.patch [bz#676568]
  - kvm-qemu-char-make-char-drivers-dynamically-registerable.patch [bz#676568]
  - kvm-qemu-char-move-spice-registration-to-spice-qemu-char.patch [bz#676568]
  - kvm-qemu-char-move-baum-registration-to-baum.c.patch [bz#676568]
  - kvm-qemu-char-move-msmouse-registeration-to-msmouse.c.patch [bz#676568]
  - kvm-qemu-char-move-text-console-init-to-console.c.patch [bz#676568]
  - kvm-qemu-char.c-fix-waiting-for-telnet-connection-messag.patch [bz#676568]
  - kvm-chardev-add-support-for-qapi-based-chardev-initializ.patch [bz#676568]
  - kvm-chardev-add-mux-chardev-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-null-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-msmouse-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-braille-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-file-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-stdio-support-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-serial-tty-init-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-parallel-init-to-qapi.patch [bz#676568]
  - kvm-chardev-switch-pty-init-to-qapi.patch [bz#676568]
  - kvm-chardev-add-console-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-pipe-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-spice-support-to-qapi.patch [bz#676568]
  - kvm-create-TextConsole-together-with-the-CharDeviceState.patch [bz#676568]
  - kvm-remove-text_console_opts.patch [bz#676568]
  - kvm-chardev-add-vc-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-memory-ringbuf-support-to-qapi.patch [bz#676568]
  - kvm-chardev-add-udp-support-to-qapi.patch [bz#676568]
  - kvm-chardev-fix-info-chardev-output.patch [bz#676568]
  - Resolves: bz#676568
    (RFE: support hotplugging chardev & virtio-serial ports)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.382.el6
changelog:
  - kvm-vmdk-remove-wrong-calculation-of-relative-path.patch [bz#977767]
  - kvm-Fix-real-mode-guest-migration.patch [bz#888767]
  - kvm-Fix-real-mode-guest-segments-dpl-value-in-savevm.patch [bz#888767]
  - kvm-virtio-scsi-enable-MSI-X-support.patch [bz#987025]
  - Resolves: bz#888767
    ("kvm: unhandled exit 80000021" when migrating to some hosts)
  - Resolves: bz#977767
    (there is wrong backing file specified for making external snapshot with vmdk format disk)
  - Resolves: bz#987025
    (enable MSI-X for virtio-scsi)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.383.el6
changelog:
  - kvm-virtio-net-properly-check-the-vhost-status-during-st.patch [bz#957319]
  - kvm-configure-add-option-for-io-throttling-RHEL-6-only.patch [bz#975468]
  - kvm-Only-enable-IO-throttling-for-RHEV.patch [bz#975468]
  - kvm-qapi-qapi-commands-fix-possible-leaks-on-visitor-dea.patch [bz#990316]
  - Resolves: bz#957319
    (Guest w/ vhost=on over virtio-net-pci, under hmp, 'set_link $id_of_netdev off', then migrate, migrate failed, src qemu-kvm process core dumped)
  - Resolves: bz#975468
    (RFE: Enable qemu IO throttling only in qemu-kvm-rhev)
  - Resolves: bz#990316
    (QMP: possible memory leaks on commands failure)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.384.el6
changelog:
  - kvm-Fix-compilation-of-I-O-throttling.patch [bz#975468]
  - Resolves: bz#975468
    (RFE: Enable qemu IO throttling only in qemu-kvm-rhev)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#917860]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#917860]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#917860]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#917860]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#917860]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#917860]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#917860]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#917860]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#917860]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#917860]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#917860]
  - kvm-libcacard-remove-sql-prefix.patch [bz#917860]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#917860]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#917860]
  - kvm-libcacard-change-default-ATR.patch [bz#917860]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#917860]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#917860]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#917860]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#917860]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#917860]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#917860]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#917860]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#917860]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#917860]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#917860]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#917860]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#917860]
  - kvm-uhci-egsm-fix.patch [bz#917860]
  - kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#990225]
  - kvm-char-io_channel_send-don-t-lose-written-bytes.patch [bz#985334]
  - kvm-monitor-maintain-at-most-one-G_IO_OUT-watch.patch [bz#985334]
  - kvm-register-exit-function-after-starting-timers.patch [bz#843797]
  - kvm-virtio-properly-validate-address-before-accessing-co.patch [bz#956953]
  - Resolves: bz#843797
    (qemu-kvm core dumps when virtio-net(w/ tx=timer and vhost=on) RHEL.6(w/ msi-x enabled) guest shutting down)
  - Resolves: bz#917860
    (Smartcard emulation with Windows guest fails)
  - Resolves: bz#956953
    (insufficient address validation during config access of virtio device)
  - Resolves: bz#985334
    (query mem info from monitor would cause qemu-kvm hang [RHEL-6.5])
  - Resolves: bz#990225
    ([RHEV/RHEL] Integrate dynamic offloads into virtio-net device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.386.el6
changelog:
  - kvm-block-fix-initialization-of-IO-limits-for-RHEL.patch [bz#994374]
  - Resolves: bz#994374
    (boot up guest failed, hung in "booting from hard disk")


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.387.el6
changelog:
  - kvm-Add-spent-time-for-migration.patch [bz#981235]
  - kvm-migration-print-total-downtime-for-final-phase-of-mi.patch [bz#981235]
  - kvm-blockdev-reset-werror-rerror-on-drive_del.patch [bz#970159]
  - kvm-scsi-generic-fix-sign-extension-of-READ-CAPACITY-10-.patch [bz#963151]
  - Resolves: bz#963151
    ([FJ6.4 Bug] Once a guest OS issues READ_CAPACITY(10), it becomes unable to access beyond 2TB on the disk)
  - Resolves: bz#970159
    (qemu-kvm-rhevm [race]: vm pauses with 'block I/O error in device '': No medium found (123)' when hounplug a disk and cannot be resumed)
  - Resolves: bz#981235
    (RFE: Request detail migration statistics output for live migration on RHEL6.5)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.388.el6
changelog:
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#994804]
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#994804]
  - kvm-vmdk-byteswap-VMDK4Header.desc_offset-field.patch [bz#994804]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#994804]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#994804]
  - kvm-vmdk-refuse-to-open-higher-version-than-supported.patch [bz#994804]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#994804]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#994804]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#994804]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#994804]
  - kvm-vmdk-Allow-reading-variable-size-descriptor-files.patch [bz#994804]
  - kvm-qemu-char-Fix-ID-reuse-after-chardev-remove-for-qapi.patch [bz#994891]
  - kvm-dataplane-refuse-to-start-if-device-is-already-in-us.patch [bz#995530]
  - Resolves: bz#994804
    (qemu-kvm should verify image header fields before opening VMDK)
  - Resolves: bz#994891
    (duplicate chardev reported after chardev-remove)
  - Resolves: bz#995530
    (dataplane: refuse to start if device is already in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.389.el6
changelog:
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#676568]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#676568]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#676568]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#676568]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#676568]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#676568]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#676568]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#676568]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#676568]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#676568]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-block-Allow-IO-throttling-fields-in-__com.redhat_dri.patch [bz#987745]
  - kvm-qemu-add-castagnoli-crc32c-checksum-algorithm.patch [bz#963420]
  - kvm-block-vhdx-header-for-the-QEMU-support-of-VHDX-image.patch [bz#963420]
  - kvm-block-initial-VHDX-driver-support-framework-supports.patch [bz#963420]
  - kvm-block-add-read-only-support-to-VHDX-image-format.patch [bz#963420]
  - Resolves: bz#676568
    (RFE: support hotplugging chardev & virtio-serial ports)
  - Resolves: bz#963420
    ([RHEL-6.5] Backport support for vhd(x) image format)
  - Resolves: bz#987745
    (fail to do hotplug with qemu i/o throttling including iops,iops_wr,iops_rd,bps,bps_wr,bps_rd inofs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.390.el6
changelog:
  - Disable qemu-guest-agent for Win32 build [bz#996580]
  - kvm-Do-not-quit-QEMU-if-cpu-set-is-called-in-non-ACPI-mo.patch [bz#990237]
  - kvm-acl-Fix-acl_remove-not-to-mess-up-the-ACL.patch [bz#889255]
  - kvm-acl-acl_add-can-t-insert-before-last-list-element-fi.patch [bz#970516]
  - kvm-hw-misc-don-t-create-pvpanic-device-by-default.patch [bz#991100]
  - kvm-hw-misc-make-pvpanic-known-to-user.patch [bz#991100]
  - Resolves: bz#889255
    (Monitor command acl_remove messes up the ACL)
  - Resolves: bz#970516
    (Monitor command acl_add can't insert before last list element)
  - Resolves: bz#990237
    (qemu-kvm exits when hotplugging a cpu with --no-acpi)
  - Resolves: bz#991100
    (pvpanic device triggers guest bugs when present by default)
  - Resolves: bz#996580
    (Remove qemu-ga-win32 from our rpm packages)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.391.el6
changelog:
  - Set qemu-guest-agent to be started automatically [bz#888297]
  - kvm-migration-add-migrate_set_state-tracepoint.patch [bz#903429]
  - kvm-vl-add-runstate_set-tracepoint.patch [bz#903429]
  - kvm-all-add-kvm_ioctl-kvm_vm_ioctl-kvm_vcpu_ioctl-tr.patch [bz#903429]
  - kvm-all-add-kvm_run_exit-tracepoint.patch [bz#903429]
  - kvm-aio-Fix-qemu_aio_wait-to-maintain-correct-walking_ha.patch [bz#848070]
  - kvm-aio-Another-fix-to-the-walking_handlers-logic.patch [bz#848070]
  - kvm-qemu-URI-parsing-library.patch [bz#848070]
  - kvm-qemu-tool-Add-dummy-qemu_mutex_lock_iothread-and-qem.patch [bz#848070]
  - kvm-block-Support-GlusterFS-as-a-QEMU-block-backend.patch [bz#848070]
  - kvm-configure-Add-a-config-option-for-GlusterFS-as-block.patch [bz#848070]
  - kvm-qcow2-Simplify-image-creation.patch [bz#848070]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#848070]
  - kvm-block-vdi-Fix-wrong-size-in-conditionally-used-memse.patch [bz#848070]
  - kvm-qcow2-Remove-old-image-creation-function.patch [bz#848070]
  - kvm-gluster-Add-image-resize-support.patch [bz#848070]
  - kvm-vdi-don-t-override-libuuid-symbols.patch [bz#848070]
  - kvm-gluster-Return-bdrv_has_zero_init-0.patch [bz#848070]
  - kvm-qcow2-Really-use-cache-unsafe-for-image-creation.patch [bz#848070]
  - kvm-gluster-Handle-BDRV_O_CACHE_WB-in-gluster-driver.patch [bz#848070]
  - Resolves: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)
  - Resolves: bz#888297
    (qemu-ga should be enabled right after installation)
  - Resolves: bz#903429
    ([Fujitsu 6.5 FEAT]: QEMU: Add tracepoints in live migration processing.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.392.el6
changelog:
  - Whitelist rbd block driver [bz#988079]
  - kvm-ceph-rbd-block-driver-for-qemu-kvm.patch [bz#988079]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#988079]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#988079]
  - kvm-Build-rbd-block-driver-only-for-qemu-kvm-rhev.patch [bz#988079]
  - kvm-block-call-the-snapshot-handlers-of-the-protocol-dri.patch [bz#988079]
  - Resolves: bz#988079
    ([6.5 FEAT] qemu runtime support for librbd backend (ceph))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.393.el6
changelog:
  - kvm-add-timestamp-to-error_report.patch [bz#906931]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906931]
  - Resolves: bz#906931
    ([Hitachi 6.5 FEAT][QEMU]Add a time stamp to error message (*))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.394.el6
changelog:
  - kvm-dump-clamp-guest-provided-mapping-lengths-to-rambloc.patch [bz#989585]
  - kvm-dump-introduce-GuestPhysBlockList.patch [bz#989585]
  - kvm-dump-populate-guest_phys_blocks.patch [bz#989585]
  - kvm-dump-rebase-from-host-private-RAMBlock-offsets-to-gu.patch [bz#989585]
  - kvm-virtio-net-remove-layout-assumptions-for-ctrl-vq.patch [bz#904927]
  - kvm-virtio-net-introduce-a-new-macaddr-control.patch [bz#904927]
  - kvm-net-add-compat-property-to-disable-ctrl_mac_addr-fea.patch [bz#904927]
  - kvm-virtio-net-rename-ctrl-rx-commands.patch [bz#904927]
  - kvm-target-i386-fix-bits-39-32-of-the-final-physical-add.patch [bz#880990]
  - kvm-qxl-Don-t-drop-client-capability-bits.patch [bz#880990]
  - kvm-block-fix-null-pointer-bug-on-error-case-in-block-co.patch [bz#880990]
  - Resolves: bz#880990
    ([coverity] suspicious use of sizeof, bad use of strncpy(), etc)
  - Resolves: bz#904927
    (RFE: (qemu) Introduce a vq command to robust virtio net mac programming)
  - Resolves: bz#989585
    (crash command can not read the dump-guest-memory file when paging=false [RHEL-6])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.396.el6
changelog:
  - Fix glusterfs support in the qemu white-list
  - Related: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.397.el6
changelog:
  - kvm-block-Decouple-block-device-commit-all-from-DriveInf.patch [bz#856505]
  - kvm-block-Monitor-command-commit-neglects-to-report-some.patch [bz#856505]
  - kvm-block-for-HMP-commit-operations-on-all-skip-non-COW-.patch [bz#856505]
  - Resolves: bz#856505
    (Missing error message in bdrv_commit to read-only backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.398.el6
changelog:
  - kvm-block-use-Error-in-do_check_io_limits.patch [bz#987725]
  - kvm-block-refuse-negative-iops-and-bps-values.patch [bz#987725]
  - Resolves: bz#987725
    (Guest should failed to be booted if specifying iops,bps as negative value)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.399.el6
changelog:
  - kvm-block-migration-propagate-return-value-when-bdrv_wri.patch [bz#994813]
  - kvm-block-migration-actually-disable-dirty-tracking-on-c.patch [bz#994813]
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#994813
    ([FJ6.4 Bug] the guest doesn't operate normally after block live migration with out of disk space)
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.400.el6
changelog:
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995865]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995865]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995865]
  - kvm-vmdk-support-vmfs-files.patch [bz#995865]
  - kvm-block-initialize-do_check_io_limits-error-pointer-to.patch [bz#1001436]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#997220]
  - Resolves: bz#1001436
    (Qemu core dumped when set iops,bps... to a negative value var monitor)
  - Resolves: bz#995865
    (fix vmdk support to ESX images)
  - Resolves: bz#997220
    (Race in gluster_finish_aiocb)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.401.el6
changelog:
  - Add block VHD/VPC format to block driver whitelist [bz#999779]
  - kvm-block-vpc-Fix-conversion-from-size-to-disk-geometry.patch [bz#999779]
  - kvm-vpc-Read-write-multiple-sectors-at-once.patch [bz#999779]
  - kvm-vpc-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#999779]
  - kvm-vpc-fix-a-file-descriptor-leak.patch [bz#999779]
  - kvm-vpc.c-Use-get_option_parameter-does-the-search.patch [bz#999779]
  - kvm-block-vpc.c-Detect-too-large-vpc-file.patch [bz#999779]
  - kvm-vpc-Add-missing-error-handling-in-alloc_block.patch [bz#999779]
  - kvm-vpc-Add-support-for-Fixed-Disk-type.patch [bz#999779]
  - kvm-vpc-Round-up-image-size-during-fixed-image-creation.patch [bz#999779]
  - kvm-block-vpc-initialize-the-uuid-footer-field.patch [bz#999779]
  - kvm-block-vpc-support-for-2-TB-disks.patch [bz#999779]
  - kvm-vpc-Fix-bdrv_open-error-handling.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.402.el6
changelog:
  - Move VPC from r/w whitelist to r/o whitelist [bz#999779]
  - kvm-migrate-add-migration-blockers.patch [bz#999779]
  - kvm-qed-add-migration-blocker-v2.patch [bz#999779]
  - kvm-qed-remove-incoming-live-migration-blocker.patch [bz#999779]
  - kvm-vpc-Add-migration-blocker.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.403.el6
changelog:
  - kvm-block-Remove-semicolon-in-BDRV_SECTOR_MASK-macro.patch [bz#914802]
  - kvm-block-implement-is_allocated-for-raw.patch [bz#914802]
  - kvm-qemu-io-fix-the-alloc-command.patch [bz#914802]
  - kvm-stream-complete-early-if-end-of-backing-file-is-reac.patch [bz#914802]
  - kvm-block-cow-Return-real-error-code.patch [bz#914802]
  - kvm-cow-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#914802]
  - kvm-cow-make-reads-go-at-a-decent-speed.patch [bz#914802]
  - kvm-cow-make-writes-go-at-a-less-indecent-speed.patch [bz#914802]
  - kvm-cow-do-not-call-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-block-keep-bs-total_sectors-up-to-date-even-for-grow.patch [bz#914802]
  - kvm-block-make-bdrv_co_is_allocated-static.patch [bz#914802]
  - kvm-block-do-not-use-total_sectors-in-bdrv_co_is_allocat.patch [bz#914802]
  - kvm-block-remove-bdrv_is_allocated_above-bdrv_co_is_allo.patch [bz#914802]
  - kvm-block-expect-errors-from-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-qemu-img-always-probe-the-input-image-for-allocated-.patch [bz#914802]
  - kvm-block-make-bdrv_has_zero_init-return-false-for-copy-.patch [bz#914802]
  - kvm-block-introduce-bdrv_get_block_status-API.patch [bz#914802]
  - kvm-block-define-get_block_status-return-value.patch [bz#914802]
  - kvm-block-return-get_block_status-data-and-flags-for-for.patch [bz#914802]
  - kvm-block-use-bdrv_has_zero_init-to-return-BDRV_BLOCK_ZE.patch [bz#914802]
  - kvm-block-return-BDRV_BLOCK_ZERO-past-end-of-backing-fil.patch [bz#914802]
  - kvm-qemu-img-add-a-map-subcommand.patch [bz#914802]
  - kvm-docs-qapi-document-qemu-img-map.patch [bz#914802]
  - kvm-block-add-default-get_block_status-implementation-fo.patch [bz#914802]
  - kvm-qemu-img-fix-invalid-JSON.patch [bz#914802]
  - Resolves: bz#914802
    (Support backup vendors in qemu to access qcow disk readonly (qemu-img metadata dump))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.404.el6
changelog:
  - kvm-target-i386-kvm-save-restore-steal-time-MSR.patch [bz#903123]
  - Resolves: bz#903123
    (The value of steal time in "top" command always is "0.0% st" after guest migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.405.el6
changelog:
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1002888]
  - kvm-virtio-net-revert-mac-on-reset.patch [bz#890265]
  - kvm-virtio-net-fix-up-HMP-NIC-info-string-on-reset.patch [bz#890265]
  - Resolves: bz#1002888
    (usb hub doesn't work properly (win2012 sees downstream port #1 only))
  - Resolves: bz#890265
    (change the mac of virtio_net device temporary but will effect forever after reboot guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.416.el6
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.417.el6
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1022548 bz#1025596]
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.418.el6
changelog:
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1018451]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1028252]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1028252]
  - Resolves: bz#1018451
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1028252
    (fix vmdk support to ESX images)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.419.el6
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005037]
  - kvm-qxl-Fix-QXLRam-initialisation.patch [bz#1013300]
  - kvm-virtio-net-broken-RX-filtering-logic-fixed.patch [bz#1010688]
  - Resolves: bz#1005037
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1010688
    ([whql][netkvm][wlk] Virtio-net device handles RX multicast filtering improperly)
  - Resolves: bz#1013300
    (Guest coredump while boot guest with " MALLOC_PERTURB_=234 ....--vnc :10,acl,sasl -vga qxl")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.420.el6
changelog:
  - kvm-build-add-rules-for-nesting.patch [bz#786407]
  - kvm-build-add-rule-to-create-directories.patch [bz#786407]
  - kvm-support-to-nested-declare-for-common-obj-y.patch [bz#786407]
  - kvm-qapi-add-string-based-visitors.patch [bz#786407]
  - kvm-introduce-two-error-to-qerror.h.patch [bz#786407]
  - kvm-qom-Unify-type-registration.patch [bz#786407]
  - kvm-qom-add-QEMU-Object-Model-infrastructure.patch [bz#786407]
  - kvm-vl-add-object-option-to-create-QOM-objects-from-the-.patch [bz#786407]
  - kvm-rng-add-RndBackend-abstract-object-class.patch [bz#786407]
  - kvm-rng-random-add-an-RNG-backend-that-uses-dev-random-v.patch [bz#786407]
  - kvm-rng-egd-introduce-EGD-compliant-RNG-backend.patch [bz#786407]
  - kvm-rng-egd-don-t-use-gslist_free_full.patch [bz#786407]
  - kvm-virtio-rng-hardware-random-number-generator-device.patch [bz#786407]
  - kvm-virtio-rng-add-rate-limiting-support.patch [bz#786407]
  - kvm-virtio-rng-pci-create-a-default-backend-if-none-exis.patch [bz#786407]
  - kvm-virtio-rng-remove-extra-request-for-entropy.patch [bz#786407]
  - kvm-virtio-use-unsigned-int-for-counting-bytes-in-vq.patch [bz#786407]
  - kvm-virtio-Introduce-virtqueue_get_avail_bytes.patch [bz#786407]
  - kvm-virtio-rng-use-virtqueue_get_avail_bytes-fix-migrati.patch [bz#786407]
  - kvm-virtio-limit-avail-bytes-lookahead.patch [bz#786407]
  - kvm-virtio-rng-disable-timer-on-device-removal.patch [bz#786407]
  - kvm-virtio-rng-fix-typos-comments.patch [bz#786407]
  - kvm-introduce-qemu_close.patch [bz#786407]
  - kvm-rng-random-Use-qemu_open-qemu_close.patch [bz#786407]
  - kvm-rng-random-backend-check-for-EAGAIN-errors-on-read.patch [bz#786407]
  - kvm-virtio-virtqueue_get_avail_bytes-fix-desc_pa-when-lo.patch [bz#786407]
  - kvm-qemu-options.hx-Document-missing-drive-options.patch [bz#1024335]
  - kvm-Monitor-Make-mon_set_cpu-public.patch [bz#1026903]
  - kvm-qapi-Convert-human-monitor-command.patch [bz#1026903]
  - kvm-hmp-human-monitor-command-stop-using-the-Memory-char.patch [bz#1026903]
  - kvm-chardev-drop-the-Memory-chardev-driver.patch [bz#1026903]
  - kvm-chardev-remove-the-headers-of-Memory-chardev-driver.patch [bz#1026903]
  - kvm-pc-drop-unused-compat-property-for-the-virtio-balloo.patch [bz#1027561]
  - kvm-blockdev-Clean-up-how-readonly-persists-across-virtu.patch [bz#1025235]
  - kvm-virtio-rng-add-check-of-period.patch [bz#786407]
  - kvm-rng-egd-remove-redundant-free.patch [bz#786407]
  - kvm-rng-egd-offset-the-point-when-repeatedly-read-from-t.patch [bz#786407]
  - kvm-Improve-reporting-of-fatal-errors.patch [bz#1054137]
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1007708 bz#1029852]
  - Resolves: bz#1007708
    ([RFE] Enable qemu-img to support VMDK version 3)
  - Resolves: bz#1024335
    (Manpage doesn't document -drive rerror/werror/readonly)
  - Resolves: bz#1025235
    (the readonly permission of floppy will be changed after eject/change)
  - Resolves: bz#1026903
    (QMP: human-monitor-command: fix buffer duplication)
  - Resolves: bz#1027561
    (Cleanup unused event_idx compat property from rhel6.0.0 and rhel6.1.0 machine types)
  - Resolves: bz#1029852
    (qemu-img fails to convert vmdk image with "qemu-img: Could not open 'image.vmdk'")
  - Resolves: bz#1054137
    (improve error reporting)
  - Resolves: bz#786407
    ([RFE] Add ability to pull system entropy from host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.421.el6
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1060024]
  - Resolves: bz#1060024
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.422.el6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1067576]
  - Resolves: bz#1067576
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.423.el6
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1017858]
  - kvm-sasl-Avoid-Could-not-find-keytab-file-in-syslog.patch [bz#1018434]
  - Resolves: bz#1017858
    ([Intel 6.6 Bug] virsh setvcpus can not setup correct vcpu number)
  - Resolves: bz#1018434
    (qemu-kvm: Could not find keytab file: /etc/qemu/krb5.tab: No such file or directory)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.424.el6
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518]
  - Resolves: bz#1078605
    (EMBARGOED CVE-2014-0150 qemu: virtio-net: fix guest-triggerable buffer overrun [rhel-6.6])
  - Resolves: bz#1079314
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.6])
  - Resolves: bz#1079319
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.6])
  - Resolves: bz#1079324
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.6])
  - Resolves: bz#1079331
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.6])
  - Resolves: bz#1079338
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.6])
  - Resolves: bz#1079344
    ()
  - Resolves: bz#1079453
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.6])
  - Resolves: bz#1079518
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.425.el6
changelog:
  - kvm-blkdebug-pass-getlength-to-underlying-file.patch [bz#1023874 bz#1031883]
  - kvm-qapi-generate-list-struct-and-visit_list-for-enum.patch [bz#1035162]
  - kvm-qapi-Fix-potential-NULL-pointer-segfault.patch [bz#1035162]
  - kvm-dump-change-cpu_get_note_size-to-return-ssize_t.patch [bz#1035162]
  - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1035162]
  - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1035162]
  - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1035162]
  - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1035162]
  - kvm-dump-add-API-to-write-vmcore.patch [bz#1035162]
  - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1035162]
  - kvm-dump-add-support-for-lzo-snappy.patch [bz#1035162]
  - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1035162]
  - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-header.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1035162]
  - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-pages.patch [bz#1035162]
  - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1035162]
  - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1035162]
  - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1035162]
  - kvm-x86-fix-migration-from-pre-version-12.patch [bz#1023268]
  - kvm-x86-cpuid-reconstruct-leaf-0Dh-data.patch [bz#1023268]
  - kvm-net-Update-netdev-peer-on-link-change.patch [bz#965396]
  - kvm-qga-Don-t-require-time-argument-in-guest-set-time-co.patch [bz#1066191]
  - kvm-only-unset-set-mask-notifier-when-kvm-irqchip-is-sup.patch [bz#1074762]
  - kvm-qdev-Allow-vlan-or-netdev-for-device-not-both.patch [bz#998865]
  - kvm-spice-add-SASL-support.patch [bz#1021575]
  - kvm-block-fix-snapshot-on-QED.patch [bz#1012244]
  - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088610]
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087979]
  - Resolves: bz#1012244
    (make live snapshot with QED disk specified qcow2 format will cause guest hang and host call trace)
  - Resolves: bz#1021575
    (Missing SASL support for SPICE)
  - Resolves: bz#1023268
    (Error Code: 0x0000000A at first reboot after fresh installing Win8.1-32 guest on AMD system)
  - Resolves: bz#1023874
    ([Regression] Prompt error of trigger blkdebug: BLKDBG_CLUSTER_FREE event is not the same as expected)
  - Resolves: bz#1031883
    (qemu-io error prompt "Operation is supported" is not expected)
  - Resolves: bz#1035162
    ([FEAT RHEL6.6]: qemu: Support compression for dump-guest-memory command)
  - Resolves: bz#1066191
    (RHEL6: backport guest-set-time command to qemu-guest-agent)
  - Resolves: bz#1074762
    (qemu-kvm  Segmentation fault when using -no-kvm-irqchip option and virtio-nic-pci device as the same time)
  - Resolves: bz#1087979
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.6])
  - Resolves: bz#1088610
    (qemu-img coredumpd when try to create a gluster format image)
  - Resolves: bz#965396
    (turn down tap link off under hmp, rhel6.4 guest boot stalled  at "starting certmonger" after “system-reset”)
  - Resolves: bz#998865
    (Add vlan parameter in device_add command would cause device_add qemu_new_net_client: Assertion `!peer')


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.426.el6
changelog:
  - kvm-Python-lang-gdb-script-to-extract-x86_64-guest-vmcor.patch [bz#826266]
  - kvm-dump-guest-memory.py-port-guest_phys_blocks_append-t.patch [bz#826266]
  - kvm-dump-guest-memory.py-ram_blocks-is-a-QLIST-not-a-QTA.patch [bz#826266]
  - kvm-dump-guest-memory.py-convert-PhysPageDesc.phys_offse.patch [bz#826266]
  - kvm-dump-guest-memory.py-hoist-gdb-round-trip-from-inner.patch [bz#826266]
  - kvm-dump-guest-memory.py-trim-logs-in-memory-listener-ca.patch [bz#826266]
  - kvm-RPM-spec-install-dump-guest-memory.py-RHEL-only.patch [bz#826266]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1081451]
  - kvm-spice-fix-info-spice.patch [bz#1029983]
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1096089]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1096117]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_02.patch [bz#1096117]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1096097]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1096093]
  - kvm-posix-aio-compat-fix-latency-issues.patch [bz#1097031]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1096093 bz#1096124]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1066430]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095780]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096826]
  - Resolves: bz#1029983
    (spice-server reports incorrect listening address on monitor with "ipv6" option)
  - Resolves: bz#1066430
    (CVE-2013-4148 qemu: virtio-net: buffer overflow on invalid state load [rhel-6.6])
  - Resolves: bz#1081451
    (qemu-kvm-rhev does not support Non Zero PCI domain for SRIOV Virtual Functions)
  - Resolves: bz#1095780
    (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-6.6])
  - Resolves: bz#1096089
    (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-6.6])
  - Resolves: bz#1096093
    (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-6.6])
  - Resolves: bz#1096097
    (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-6.6])
  - Resolves: bz#1096117
    (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-6.6])
  - Resolves: bz#1096124
    (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-6.6])
  - Resolves: bz#1096826
    (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-6.6])
  - Resolves: bz#1097031
    (Improve posix-aio-compat latency by backporting upstream fix)
  - Resolves: bz#826266
    ([Hitachi 6.6 FEAT] Extract guest memory dump from qemu-kvm core)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.427.el6
changelog:
  - kvm-Introduce-range.h.patch [bz#1004420]
  - kvm-qcow2-fix-typo-in-documentation-for-qcow2_get_cluste.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-get_cluster_offset.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-refcount-table-entries.patch [bz#1004420]
  - kvm-qcow2-handle_alloc-Get-rid-of-keep_clusters-paramete.patch [bz#1004420]
  - kvm-qcow2-Finalise-interface-of-handle_alloc.patch [bz#1004420]
  - kvm-qcow2-Metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-Employ-metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Move-OFLAG_COPIED-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-OFLAG_COPIED-errors.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-shared-refcount-blocks.patch [bz#1004420]
  - kvm-qmp-Documentation-for-BLOCK_IMAGE_CORRUPTED.patch [bz#1004420]
  - kvm-qcow2-Correct-snapshots-size-for-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Correct-endianness-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Switch-L1-table-in-a-single-sequence.patch [bz#1004420]
  - kvm-qcow2-Use-pread-for-inactive-L1-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Remove-wrong-metadata-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Use-negated-overflow-check-mask.patch [bz#1004420]
  - kvm-qcow2-Make-overlap-check-mask-variable.patch [bz#1004420]
  - kvm-qcow2-Add-more-overlap-check-bitmask-macros.patch [bz#1004420]
  - kvm-qcow2-fix-wrong-value-of-L1E_OFFSET_MASK-L2E_OFFSET_.patch [bz#1004420]
  - kvm-qcow2-refcount-Sanitize-refcount-table-entry.patch [bz#1004420]
  - kvm-qcow2-Correct-comment-for-realloc_refcount_block.patch [bz#1004420]
  - kvm-qcow2-Fix-fail-path-in-realloc_refcount_block.patch [bz#1004420]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1099599]
  - kvm-device-assignment-don-t-update-msix-if-vector-s-unch.patch [bz#1096984]
  - Resolves: bz#1004420
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1096984
    ([Intel 6.6 Bug] 2x RHEL 5.10 VM running on RHEL 6.5 KVM have low TCP_STREAM throughput)
  - Resolves: bz#1099599
    (Some vCPU topologies not accepted by libvirt)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.428.el6
changelog:
  - kvm-qcow2-preserve-free_byte_offset-when-qcow2_alloc_byt.patch [bz#1101701]
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1092117]
  - kvm-PCI-Convert-pci_info-to-QObject.patch [bz#813748]
  - kvm-PCI-do_pci_info-PCI-bridge-devices-support.patch [bz#813748]
  - kvm-PCI-show-also-host-bridge-data-in-info-pci-output.patch [bz#813748]
  - kvm-pci-fix-info-pci-with-host-bridge.patch [bz#813748]
  - kvm-qapi-Convert-query-pci.patch [bz#813748]
  - kvm-qdev-DEVICE_DELETED-event.patch [bz#813748]
  - kvm-hmp-Fix-freeing-of-PciInfoList.patch [bz#813748]
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1101701
    (comparison always false at qcow2_refcount.c:613)
  - Resolves: bz#813748
    ([RFE] Report whether hot unplug completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.429.el6
changelog:
  - kvm-hw-qxl-support-client-monitor-configuration-via-devi.patch [bz#1075139]
  - kvm-usb-move-usb_-hi-lo-helpers-to-header-file.patch [bz#949547]
  - kvm-usb-add-vendor-request-defines.patch [bz#949547]
  - kvm-Add-rhel6.6.0-machine-type.patch [bz#949547]
  - kvm-add-msos-desc-compat-prop.patch [bz#949547]
  - kvm-usb-add-support-for-microsoft-os-descriptors.patch [bz#949547]
  - kvm-usb-hid-add-microsoft-os-descriptor-support.patch [bz#949547]
  - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097021]
  - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#998426]
  - kvm-qcow-Return-real-error-code-in-qcow_open.patch [bz#1097228]
  - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097228]
  - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097228]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097228]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097235]
  - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097235]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1106420]
  - kvm-Fix-pkgversion-value.patch [bz#1074396]
  - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990254]
  - kvm-block-fix-signed-int-overflow-in-qcow2_co_get_block_.patch [bz#1101430]
  - kvm-qemu-img-add-special-exit-code-if-bdrv_check-is-not-.patch [bz#1054753]
  - kvm-qemu-img-Report-error-even-with-oformat-json.patch [bz#1054753]
  - kvm-qemu-img-Document-check-exit-codes.patch [bz#1054753]
  - kvm-blockdev-preserve-readonly-and-snapshot-states-acros.patch [bz#1105428]
  - kvm-target-i386-Broadwell-CPU-model.patch [bz#1100380]
  - kvm-target-i386-support-invariant-tsc-flag.patch [bz#996771]
  - kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#996771]
  - Resolves: bz#1054753
    (qemu-img doesn't print error in json for raw images)
  - Resolves: bz#1074396
    (QMP: "query-version" doesn't include the -rhev prefix from the qemu-kvm-rhev package)
  - Resolves: bz#1075139
    (multi-monitor doesn't work with a RHEL 7 guest.)
  - Resolves: bz#1097021
    ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images)
  - Resolves: bz#1097228
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.6])
  - Resolves: bz#1097235
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.6])
  - Resolves: bz#1100380
    ([Intel 6.6 FEAT] Broadwell new instructions support for KVM - qemu-kvm)
  - Resolves: bz#1101430
    (qemu-kvm get "Unknown error 1539571707" when execute block-stream)
  - Resolves: bz#1105428
    (readonly=on has no effect for drive with no media)
  - Resolves: bz#1106420
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#949547
    (qemu-kvm process consumes 8% cpu even when windows guest is idle inside and 70% when guest uses 10% cpu inside)
  - Resolves: bz#990254
    (qemu-kvm failing when invalid machine type is provided)
  - Resolves: bz#996771
    (nonstop_tsc cpu flag support for KVM guests - QEMU support)
  - Resolves: bz#998426
    (there are four "gluster" in qemu-img supported format list)


author: Jeff E. Nelson <> - 0.12.1.2-2.430.el6
changelog:
  - kvm-qxl-render-add-sanity-check.txt [bz#1095612]
  - kvm-qxl-always-update-displaysurface-on-resize.txt [bz#1112078]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)
  - Resolves: bz#1112078
    (RHEL7 guest desktop hang when boot with qxl and vnc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.431.el6
changelog:
  - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1102659]
  - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1102659]
  - kvm-dump-simplify-write_start_flat_header.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1102659]
  - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1102659]
  - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1102659]
  - kvm-dump-simplify-get_len_buf_out.patch [bz#1102659]
  - kvm-virtio-rng-check-return-value-of-virtio_load-RHEL-6-.patch [bz#1102668]
  - kvm-block-add-ROUND_UP-into-osdep.h.patch [bz#1063559]
  - kvm-block-vhdx-add-migration-blocker.patch [bz#1063559]
  - kvm-block-vhdx-minor-comments-and-typo-correction.patch [bz#1063559]
  - kvm-block-vhdx-add-header-update-capability.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-VHDXMetadataEntries-and-BDR.patch [bz#1063559]
  - kvm-block-vhdx-log-support-struct-and-defines.patch [bz#1063559]
  - kvm-block-vhdx-break-endian-translation-functions-out.patch [bz#1063559]
  - kvm-block-vhdx-update-log-guid-in-header-and-first-write.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-move-vhdx_close-above-vhdx_.patch [bz#1063559]
  - kvm-block-vhdx-log-parsing-replay-and-flush-support.patch [bz#1063559]
  - kvm-block-vhdx-add-region-overlap-detection-for-image-fi.patch [bz#1063559]
  - kvm-block-vhdx-add-log-write-support.patch [bz#1063559]
  - kvm-block-vhdx-write-support.patch [bz#1063559]
  - kvm-block-vhdx-remove-BAT-file-offset-bit-shifting.patch [bz#1063559]
  - kvm-block-vhdx-move-more-endian-translations-to-vhdx-end.patch [bz#1063559]
  - kvm-block-vhdx-break-out-code-operations-to-functions.patch [bz#1063559]
  - kvm-block-vhdx-fix-comment-typos-in-header-fix-incorrect.patch [bz#1063559]
  - kvm-block-vhdx-add-.bdrv_create-support.patch [bz#1063559]
  - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1063559]
  - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1063559]
  - kvm-vpc-vhdx-add-get_info.patch [bz#1063559]
  - kvm-block-vhdx-improve-error-message-and-.bdrv_check-imp.patch [bz#1063559]
  - kvm-block-vhdx-Error-checking-fixes.patch [bz#1063559]
  - kvm-spec-explicitly-enable-vhdx-in-build.patch [bz#1063559]
  - kvm-Fix-multiboot-compilation.patch [bz#820641]
  - kvm-docs-update-qemu-img-man-page-to-reflect-vhdx-image-.patch [bz#1017649]
  - kvm-tracetool-add-tracetool-simpletrace_stap-format.patch [bz#905761]
  - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#905761]
  - kvm-trace-install-trace-events.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-script.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#905761]
  - kvm-simpletrace-install-simpletrace.py.patch [bz#905761]
  - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#905761]
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1092117]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1092117]
  - Resolves: bz#1017649
    (need to update qmeu-img man help docs page about "VHDX" format disk)
  - Resolves: bz#1063559
    (VHDX: journal log should not be replayed by default, but rather via qemu-img check -r all)
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1102659
    (Use-after-free of file descriptor in create_kdump_vmcore)
  - Resolves: bz#1102668
    (Return value of virtio_load not checked in virtio_rng_load)
  - Resolves: bz#820641
    (Unable to run kvm unit tests with -append option)
  - Resolves: bz#905761
    ([Fujitsu 6.6 FEAT]: QEMU: enable easy introspection of the list of trace events and their arguments)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.432.el6
changelog:
  - kvm-vmdk-refuse-enabling-zeroed-grain-with-flat-images.txt [bz#1088788]
  - kvm-vmdk-Only-read-cid-from-image-file-when-opening.txt [bz#1088788]
  - kvm-vmdk-Fix-creating-big-description-file.txt [bz#1088788]
  - kvm-vmdk-Check-VMFS-extent-line-field-number.txt [bz#1088788]
  - kvm-vmdk-Fix-big-flat-extent-IO.txt [bz#1088788]
  - kvm-scsi-disk-rd-wr-vr-protect-0-is-an-error.txt [bz#1064643]
  - kvm-scsi-disk-improve-the-lba-out-of-range-tests-for-read-.txt [bz#1064643]
  - kvm-scsi-disk-Fail-medium-writes-with-proper-sense-for-rea.txt [bz#1064643]
  - kvm-scsi-disk-improve-out-of-range-LBA-detection-for-WRITE.txt [bz#1064643]
  - kvm-scsi-disk-introduce-check_lba_range.txt [bz#1064643]
  - kvm-scsi-disk-fix-check-for-out-of-range-LBA.txt [bz#1064643]
  - kvm-virtio-blk-Fix-commit-f0f6bce-fail-unaligned-requests.txt [bz#1064643]
  - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_hand.txt [bz#1064643]
  - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on-i.txt [bz#1064643]
  - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-ide-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-scsi-Report-error-when-lun-number-is-in-use.txt [bz#1095609]
  - Resolves: bz#1064643
    (qemu makes no distinction between external and guest triggered block I/O errors)
  - Resolves: bz#1088788
    (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat)
  - Resolves: bz#1095609
    (qemu-kvm should give some hint when hot-plug a devices with the same existing "scsi-id  and lun")


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.433.el6
changelog:
  - kvm-qxl-dont-update-invalid-area.txt [bz#994388]
  - kvm-qxl-update_area_io-cleanup-invalid-parameters-handling.txt [bz#994388]
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.txt [bz#845667]
  - kvm-migrate-vPMU-state.txt [bz#845667]
  - kvm-vPMU-do-not-migrate-for-M-rhel6.5.0-or-older.txt [bz#845667]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.txt [bz#1123698]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.txt [bz#1113917]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.txt [bz#1113917]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.txt [bz#1113917]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.txt [bz#1113917]
  - kvm-virtio-scsi-implement-parse_cdb.txt [bz#1113917]
  - Resolves: bz#1113917
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)
  - Resolves: bz#1123698
    (qemu-kvm core dump when hot-plug a virtio-scsi disk to guest and reboot)
  - Resolves: bz#845667
    (Virtual PMU support during live migration)
  - Resolves: bz#994388
    (SpiceWorker-CRITICAL **: red_worker.c:4894:red_update_area: condition `area->left >= 0 && area->top >= 0 && area->left < area->right && area->top < area->bottom' failed)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.434.el6
changelog:
  - kvm-block-gluster-code-movements-state-storage-changes.txt [bz#1118543]
  - kvm-block-gluster-add-reopen-support.txt [bz#1118543]
  - Resolves: bz#1118543
    (Can not continue live commiting when using glusterfs(native) backend after relaunch qemu)


author: Jeff E. Nelson <> - 0.12.1.2-2.435.el6
changelog:
  - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118718]
  - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118718]
  - Resolves: bz#1118718
    (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.436.el6
changelog:
  - kvm-qcow2-Reject-too-large-header-extensions.patch [bz#1124443]
  - kvm-block-Fix-is_allocated_above-with-resized-files.patch [bz#1122992]
  - kvm-block-mirror-Use-bdrv_is_allocated_above.patch [bz#1122992]
  - kvm-qemu-io-New-command-map.patch [bz#1122410]
  - kvm-qemu-io-Implement-write-c-for-compressed-clusters.patch [bz#1122410]
  - kvm-qemu-img-Add-compare-subcommand.patch [bz#1122410]
  - kvm-qemu-img-Fix-overwriting-ret-before-using.patch [bz#1122410]
  - kvm-QMP-add-get_events-wait-True-option.patch [bz#1122410]
  - kvm-qmp-Check-for-returned-data-from-__json_read-in-get_.patch [bz#1122410]
  - kvm-QMP-add-server-mode-to-QEMUMonitorProtocol.patch [bz#1122410]
  - kvm-qemu-iotests-Import-from-upstream.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-tests-that-require-sample-image.patch [bz#1122410]
  - kvm-block-parse-cache-mode-flags-in-a-single-place.patch [bz#1122410]
  - kvm-qemu-io-Add-command-line-switch-for-cache-mode.patch [bz#1122410]
  - kvm-qemu-io-correctly-print-non-integer-values-as-decima.patch [bz#1122410]
  - kvm-qemu-iotests-Modify-scripts-to-run-with-qemu-kvm-rhe.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-cases-requiring-not-backported-.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-028.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-029.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-030.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-060.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-031.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-040.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-041.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-049.patch [bz#1122410]
  - kvm-qemu-iotests.-Backport-067.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-080.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-086.patch [bz#1122410]
  - kvm-qemu-iotests-Trivial-test-case-backports.patch [bz#1122410]
  - kvm-virtio-rng-Add-human-readable-error-message-for-nega.patch [bz#1119207]
  - kvm-virtio-rng-Move-error-checking-forward-to-prevent-me.patch [bz#1119207]
  - Resolves: bz#1119207
    ([rng]qemu-kvm process still can start when specify negative value for max-bytes)
  - Resolves: bz#1122410
    (backport qemu-iotests to the RHEL 6 internal repository)
  - Resolves: bz#1122992
    (Full mirroring with smaller backing file causes qemu to hang)
  - Resolves: bz#1124443
    (qcow2 doesn't catch invalid header extension sizes)


author: Jeff E. Nelson <> - 0.12.1.2-2.437.el6
changelog:
  - kvm-vmschk-check-rhel6.py-quickly-compare-RHEL6-jsons-ba.patch [bz#1125792]
  - kvm-tests-add-rhel6.0-to-rhel6.6-vmstate-json-files.patch [bz#1125792]
  - kvm-scsi-Ensure-command-and-transfer-lengths-are-set-for.patch [bz#1113068]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#1122885]
  - Resolves: bz#1113068
    (Qemu crashes when some commands are passed from guest to host tape device.)
  - Resolves: bz#1122885
    (qemu-img man doc should tell "should report progress bar when receives "SIGUSR1" signal if -p option is not used")
  - Resolves: bz#1125792
    (Add vmstate json representation files for RHEL6 releases to source tree)


author: Jeff E. Nelson <> - 0.12.1.2-2.438.el6
changelog:
  - kvm-hda-audio-fix-non-mixer-codecs.patch [bz#1080546]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#995931]
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#995931]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#995931]
  - Resolves: bz#1080546
    (pulse sound no longer works after changing KVM win 7 guest SID in RHEL 6.5)
  - Resolves: bz#995931
    (Qemu core dump (red_get_image: unknown type 184) when reboot a RHEL.6.4-64 guest 25 times)


author: Jeff E. Nelson <> - 0.12.1.2-2.439.el6
changelog:
  - kvm-spice-fix-libvirt-snapshots.patch [bz#1010670]
  - kvm-ide-Ignore-double-DMA-transfer-starts-stops.patch [bz#1104573]
  - kvm-ide-Reset-current_addr-after-stopping-DMA.patch [bz#1104573]
  - kvm-ide-Reset-BMIDEA-bit-when-the-bus-master-is-stopped.patch [bz#1104573]
  - Resolves: bz#1010670
    (spice session is closed when taking snapshot with ram)
  - Resolves: bz#1104573
    (DMA error when install RHEL.5.11.x86_64 guest (ide drive) on RHEL6.5.z host)


author: Jeff E. Nelson <> - 0.12.1.2-2.440.el6
changelog:
  - kvm-hw-qdev-emit-DEVICE_DELETED-event-only-if-the-device.patch [bz#1124314]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1120541]
  - Resolves: bz#1120541
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1124314
    (incorrect event reported by QMP on hot plugging an in-use VF to guest)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.441.el6
changelog:
  - kvm-block-Improve-bdrv_aio_co_cancel_em.patch [bz#1018537]
  - kvm-usb-Avoid-reentrancy-of-ehci_advance_async_state-dow.patch [bz#1018537]
  - kvm-scripts-add-sample-model-file-for-Coverity-Scan.patch [bz#1102409]
  - Resolves: bz#1018537
    (qemu core dump after run read/randwr fio in guest with usb or scsi disk)
  - Resolves: bz#1102409
    (Unable to handle NULL pointer dereference in qcow2_check_refcounts)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use resource-agents macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.7-2
changelog:
  - Drop support for drbd and smb (PM-drop-support-for-drbd-and-smb-resource-agents.patch)
  - Explicitly list python as BuildRequires


author: Marek Grac <mgrac@redhat.com> - 3.0.7-4
changelog:
  - Checksum error occurs on HA-LVM
  - status on clusterfs "gfs" returned 1 (generic error)
  - Resolves rhbz#563555 rhbz#558664


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - new upstream release
    Resolves: rhbz#569959
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * refresh patches with official SHA1 git commits from RHEL6
      upstream branch:
      - drop_support_for_drbd_and_smb.patch
    * Addresses the follwing issues:
      from 3.0.12 release:
    Resolves: rhbz#582754, rhbz#582753, rhbz#585217, rhbz#583789
    * Rebase:
    Resolves: rhbz#582353
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590997
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#584800
  - New pacemaker agents upstream release
    * Patched build process to correctly generate ldirectord man page
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-2
changelog:
  - Drop Requires on xfsprogs since package moved to another channel
    Resolves: rhbz#593433
  - Fix HALVM: lvm agent incorrectly reports vg is in volume_list
    (halvm_lvm_agent_incorrectly_reports_vg_in_volume_list.patch)
    Resolves: rhvz#593108


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-4
changelog:
  - Add missing man pages
    (Add Source2: ocf-tester.8 and Source3: sfex_init.8)
    Resolves: rhbz#594332


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix incorrect default for VM.sh agent
    (resolve_incorrect_default_for_vm_agent.patch)
    Resolves: rhbz#599643


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-9
changelog:
  - More SAPDatabase updates to fix SAP workloads
  - Allow rgmanager SAP resource agent to manage SAP Webdispatcher & TREX
  - Resolves: rhbz#726500 rhbz#746996


author: Chris Feist <cfeist@redhat.com> - 3.9.2-10
changelog:
  - Fix to prevent /dev/shm being filled up by ocf_log debug messages
  - NFS client resource are now recovered properly when they are missing in
    /var/lib/nfs/etab
  - Resolves: rhbz#797922 rhbz#749713


author: Chris Feist <cfeist@redhat.com> - 3.9.2-11
changelog:
  - In LVM HA agent, remove missing PVs before attempting to remove the tag
  - Rgmanager now properly detects when clvmd is not running when using HA LVM
  - vm.sh now supports a 'tunnelled' option
  - Resource agent script now have common directory set properly
  - Fixed apache resource agent configuration with IPv6
  - fs-lib.sh now will now properly work with all return codes of mount
  - netfs now allows you to have the same NFS export mounted in different locations
  - The timeout in rhev-check has been increased to 90 seconds
  - Resolves: rhbz#772773 rhbz#729481 rhbz#712174 rhbz#784357 rhbz#742859 rhbz#728086 rhbz#799998 rhbz#727546


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12
changelog:
  - Fix for LVM HA agent for service relocation after leg failure (we now
    properly remove tag).
  - Resolves: rhbz#772773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-25
changelog:
  - fast filesystem mounts
  - properly handle NFS v4 mounts
  - fix uppercase ipv6 addresses
  - named transfer source options
  - fix restart postgres
  - fix honor self fence option
  - fix mount log level
  - fix wrong selinux context for nfs directory

    Resolves: rhbz#919231
    Resolves: rhbz#851188
    Resolves: rhbz#895075
    Resolves: rhbz#711586
    Resolves: rhbz#871659
    Resolves: rhbz#908457
    Resolves: rhbz#948730
    Resolves: rhbz#959520


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-41
changelog:
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#993329
    Resolves: rhbz#1023340
    Resolves: rhbz#1028421
    Resolves: rhbz#1022793


author: David Vossel <dvossel@redhat.com> - 3.9.2-42
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051115


author: David Vossel <dvossel@redhat.com> - 3.9.2-44
changelog:
  - New 'httpd' option for rgmanager apache.sh agent that allows
    custom httpd binary path to be set.
  - Fixes issue with pending sm-notify processes preventing
    nfs-server instances from stopping.
  - Fixes issue reported by coverity. 
  - Fixes syntax error in some log error messages in the LVM agent
  - Optimize fs-lib based agent's monitor operation
  - Allow monitoring of kvm based virtual machines using the
    VirtualDomain agent without requiring libvirtd.
  - Allows named to run as user other than root.

    Resolves: rhbz#952132
    Resolves: rhbz#974239
    Resolves: rhbz#999537
    Resolves: rhbz#1022277
    Resolves: rhbz#1023099
    Resolves: rhbz#1054327
    Resolves: rhbz#1067023


author: David Vossel <dvossel@redhat.com> - 3.9.2-46
changelog:
  - Updates the ocf:heartbeat:tomcat agent so it can be used
    in rhel6 with Pacemaker.

    Resolves: rhbz#1022792


author: David Vossel <dvossel@redhat.com> - 3.9.2-47
changelog:
  - Allow vm.sh to monitor kvm domains without requiring libvirtd
  - Adds 'no_kill' option to vm.sh to prevent force killing vm
    during stop operation after timeout expires.

    Resolves: rhbz#853698
    Resolves: rhbz#1079039


author: David Vossel <dvossel@redhat.com> - 3.9.2-48
changelog:
  - Configurable startup_wait timeout for rgmanager's 
    postgres-8.sh resource-agent
  - Allow non rhel builds to included unsupported agents.
  - Add bind-mount.sh rgmanager resource-agent.
  - Add 'statdport' option to nfsserver resource.

    Resolves: rhbz#1035380
    Resolves: rhbz#1069621
    Resolves: rhbz#1094789
    Resolves: rhbz#918315


author: David Vossel <dvossel@redhat.com> - 3.9.5-1
changelog:
  - Package cleanup. This change is a no-op. The heartbeat
    agents were updated to the 3.9.5 upstream release in this
    package months ago. The release number is now being
    incremented to reflect this.

    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-5
changelog:
  - fix segfault on failed url retrieval (#557118)
  - fix verification error code depending on verbosity level (#557101)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-6
changelog:
  - Permit em64t architecture in query/erasure too (#547341)
  - Avoid accessing unrelated mount points in disk space checking (#495623)
  - Fix disk space reporting with erasures present in transaction (#561160)
  - Teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - Fix python match iterator regression wrt boolean representation
  - Support parallel python versions in python dependency extractor (#532118)
  - Python byte-compilation fixes + improvements (#538101)
  - Preserve empty lines in spec prep section (#573339)
  - Fix nosrc package generation regression
  - Avoid owning localized man directories through find_lang (#569536)
  - Lose useless symlink to berkeley_db_svc


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-17
changelog:
  - Allow self conflicts (#651951)
  - Add support for xz compression in rpm2cpio.sh (#674348)
  - Don't error out on already imported GPG keys (#680889)
  - Fix file conflict handling for uncolored files (#705115)
  - Fix file attribute handling with %defattr(-) (#705993)
  - Don't error out when trying to add the same signature again (#707449)
  - Fix signature checking (#721363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-20
changelog:
  - -D is for --define, not --predefine (#785236)
  - Add runtime detection for /usr move (#761000)
  - Fix brace matching on multiline constructs in perl.req (#752119)
  - Make pretrans scriptlet failure fail the package installation (#736960)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-22
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-25
changelog:
  - Fix Lua script current directory behavior (#746190)
  - Copy rpmpkgs "log" into place instead of moving (#746637)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-33
changelog:
  - Fix build-time double-free on file capability processing (#904818)
  - Fix include-directive getting processed on false branch (#920190)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163059)


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
  			  ruby-list#33047: regex bug
  			  PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
  		   variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163993
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163993


author: Jindrich Novy <jnovy@redhat.com> 0.1-6
changelog:
  - %stack_name: initial part of stack prefix and name of
    meta package providing scriptlets
  - %stack_prefix: stack namespacing part to be prepended to
    original non-stack package name, can be used for Provides
    namespacing as well
  - %stack_runtime: run-time package name providing scriptlets
  - %stack_require: macro to define dependency to other stacks


author: Jindrich Novy <jnovy@redhat.com> 0.1-9
changelog:
  - introduce stack enablement tracking
  - introduce "stack_enabled" helper utility to let a stack
    application figure out which stacks are actually enabled
  - disallow running stacks recursively


author: Jindrich Novy <jnovy@redhat.com> 0.1-11
changelog:
  - avoid redefinition of %_root* macros by multiple
    occurence of %stack_package
  - make the Stack root path configurable


author: Jindrich Novy <jnovy@redhat.com> 0.1-14
changelog:
  - define %_defaultdocdir to properly relocate docs into
    a stack
  - document a way how to pass command to stack via stdin


author: Jindrich Novy <jnovy@redhat.com> 20120209-1
changelog:
  - fix minor bugs (#788194)
    - clear temp files
    - handle commands from stdin properly
    - run command even if ran as "scl enable SCL command" from already
      enabled SCL


author: Jindrich Novy <jnovy@redhat.com> 20120423-1
changelog:
  - update to the latest upstream scl-utils-20120423 (#713147)
   - filesystem ownership by meta package
   - add man page
   - fix memory leak when parsing commands from stdin
   - use more descriptive error message if /etc/prefixes is missing
   - do not prepend scl_* prefix to package names
   - unify package naming to <SCL>-package-version
   - add scl --list functionality to list available SCLs


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - Allow overriding values in macro scl_package (#957185)
  - Delete redundant argument from check_asprintf (#957183)
  - Enable all collections given as arguments, not just the first one (#949995)
  - Prevent collections to be enabled multiple times (#955669)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-9
changelog:
  - add scl_source script for intercollection dependencies (#874417)
  - updated macros in macros.scl-filesystem (#1029515, #1029516)
  - add delimiter between collections and command (#1029517)


author: Jan Zeleny <jzeleny@redhat.com> - 20120827-11
changelog:
  - reverted the last patch, as it breaks some collections. The revert
    is necessary for RHSCL compose, we are looking for other solutions.


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1071834)
  - added capability of dynamically registering and deregistering collections (#1099394)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-23
changelog:
  - Add cmirrord policy
  - Fixes for accountsd policy
  - Fixes for boinc policy
  - Allow cups-pdf to set attributes on fonts cache directory
  - Allow radiusd to setrlimit
  - Allow nscd sys_ptrace capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-24
changelog:
  - Add support for /dev/vhost-net
  - Allow psad to read files in /usr
  - Allow systat to use nscd socket
  - Fixes for boinc policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-25
changelog:
  - Fixes for cmirrord policy
  - Dontaudit xauth to list inotifyfs filesystem.
  - Allow xserver to translate contexts.
  - Allow kdumpgui domain sys_admin capability
  - Allow vpnc to relabelfrom tun_socket
  - Allow prelink_cron_system_t to signal
  - Fixes for gitolite
  - Allow virt domain to read symbolic links in device directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-26
changelog:
  - Allow krb5kdc to write krb5kdc_principal_t file
  - Allow hald to send generic signal to dhcp client
  - Fix dev_rw_vhost interface
  - Add /var/run/abrt.socket label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-27
changelog:
  - Allow ftpd ipc_lock capability
  - Allow audisp-remote to getcap and setcap
  - Allow iscsid to read and write raw memory devices
  - Fixes for bitlbee policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-30
changelog:
  - Allow sysadm to run ncftool
  - Fixes for cobbler policy
  - Allow Network Manager to transition to ipsec_mgmt domain
  - Add label for /usr/libexec/nm-openswan-service
  - Add label for /dev


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-31
changelog:
  - Remove daemons dontaudit to search all dirs 
  - Add support for epylog
  - All all domains to read lib files
  - Allow denyhosts to send syslog messages
  - Allow mysql-safe setrlimit
  - Allow rpm to execute rpm_tmp_t
  - Allow dmesg to appen abrt_var_cache files
  - Fixed label for abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-32
changelog:
  - Allow sectool to connect to users over unix stream socket
  - Add label for /var/spool/abrt-upload
  - Add audio_home_t type for homedir/Music files
  - Allow aiccu to read network config files
  - Allow qpidd to setsched
  - Allow virt domains to manage svirt_image_t fifo files
  - Fixes for NM-openswan
  - Fixes for admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-36
changelog:
  - Allow netutils to read and write USB monitor devices
  - Fix label for /rhev
  - Add user_setrlimit boolean
  - Allow initrc to manage virt lib files
  - Add support for ebtables
  - Add label for /bin/mksh
  - Dontaudit aiccu sys_tty_config capability
  - Add httpd_setrlimit boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-37
changelog:
  - Redefine hi_reserved_port_t to include ports from 512 to 599 
  - Add label for /sbin/sushell
  - Fixes for munin plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-38
changelog:
  - Allow xdm_t to manage gnome homedir content
  - Allow s-c-firewall to read and write virtual memory sysctls
  - Fixes for logwatch policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-39
changelog:
  - Allow munin_system_plugin to read files in /usr
  - Do not audit insmod attempts to write virt daemon unnamed pipes
  - Allow corosync to read ricci lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-40
changelog:
  - Fixes for puppetmaster
  - Fix label for kadmin init script
  - Fixes for logwatch-mail policy
  - Allow arpwatch to request the kernel to load modules
  - Allow cron jobs to run with context of user that started them


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-41
changelog:
  - Allow logwatch_mail to read read the networking state information.
  - Add label for /usr/bin/dosbox
  - Allow systat sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-42
changelog:
  - Allow kdump to read information from the debugging filesystem
  - Update boinc policy
  - Fixes for logwatch-mail policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-43
changelog:
  - Allow ncftool to run brctl
  - Fixes for ricci-modclusterd policy
  - Allow uucpd to execute ssh client
  - Add label for dayplanner
  - Allow sandbox_xserver execstack


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-55
changelog:
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  - Add labeling for /root/.debug
  - Remove permissive from cmirrord domain
  - Dontaudit cmirrord_t sys_tty_config capability
  - Allow virtd to read from processes up to its clearance
  - Allow dovecot-deliver to create tmp files
  - Allow tor to send signals to itself
  - Handle /var/db/sudo
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #631564


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-56
changelog:
  - Allow smartd to read usr files
  - Allow devicekit-power transition to dhcpc
  - Add label for /etc/timezone
  - Remove transition from unconfined_t to iptables_t
  - Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
  Resolves: #634945
  - Allow nrpe to send signal and sigkill to the plugins
  - Fix up xguest to allow it to read hwdata and gconf_etc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-57
changelog:
  - Allow system_mail_t to append ~/dead.letter
  - Allow mount to communicate with gfs_controld
  Resolves: #636683
  - Dontaudit hal leaks in setfiles
  - gpm needs to use the user terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-58
changelog:
  - Fix httpd_setrlimit boolean to allow sys_resource capability
  - Fix label for ip6tables.save
  - Allow ssh_t to exec ssh_exec_t
  - Dontaudit init leaks
  Resolves: #639083


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-59
changelog:
  - Allow cdrecord setrlimiit
  Resolves: #615731
  - Define debugfs_t as mountpoint
  Resolves: #646856
  - Fix fenced_can_network_connect boolean description
  Resolves: #650136
  - Add label for /var/run/faillock
  - Add dirsrv and dirsrv-admin policy
  Resolves: #655206
  - Fixes for cobbler policy
  - Allow certmonger to manage dirsrv config
  Resolves: #658591


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-60
changelog:
  - Fixes for certmonger
  - Backport passenger policy
  - Allow run_init to read console_device
  Resolves: #657568
  - Add label for /var/lib/dkim-milter
  - Fixes for munin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-61
changelog:
  - Fixes for passenger policy
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  Resolves: #663054


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-64
changelog:
  - Add namespace policy
  - Allow udev to stream connect to init
  Resolves: #667370
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-69
changelog:
  - Make Spacewalk to work with selinux-policy
  Resolves: #673112
  - Fix /root/.ssh labeling
  Resolves: #637109	
  - Fix for the spec file


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-71
changelog:
  - Allow cmirrord to create physical disk devices in /dev
  - Allow cluster domains to use the system bus and send each other dbus messages
  - Add label for /dev/tgt


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-74
changelog:
  - Add virt_home_ type files located in ~/.libvirt directory
  - virt creates monitor sockets in the users home dir
  - Allow lvm setfscreate
  Resolves: #680388
  - Make lsusb and lsblk working on MLS
  Resolves: #680426


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-75
changelog:
  - Allow svirt to manage sock_file in ~/.libvirt directory
  - Allow sysamd to run udev in udev_t domain
  - Remove capability from svirt
  - Add lvm_exec_t label for kpartx


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-76
changelog:
  - Fixes for ssh_keygen policy
  - Allow sysadm_t to run ssh-keygen in ssh_keygen_t domain
  - Backport spice vdagent policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-79
changelog:
  - Fixes for sandbox/seunshare policy 
  Resolves:#684919
  - Allow ssh_keygen_t dac_override
  - Add matahari policy 
  - Add label for /etc/securetty 
  - Fixes for pirahna-pulse policy
  - Fixes for radius, samba, dirsrv, kerberos policies 
  - Allow console login on MLS
  - Fix file context to show several labels as SystemHigh
  - Add port definition for dogtag, matahari, movaz ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-80
changelog:
  - Add support for a new cluster service - foghorn
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - Add support for vdsm
  - Allow syslogd setrlimit, sys_nice
  Resolves: #689431
  - ipsec_mgmt_t wants to cause ipsec_t to dump core, needs to be allowed


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-81
changelog:
  - Add allow_sysadm_manage_security boolean
  - Add label for /dev/dlm.*
  - Allow auditadm_screen_t and secadm_screen_t dac_override capability
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Fixes for nslcd policy
  Resolves: #693368
  - Allow qpidd to manage pid and lib matahari files
  - Allow rgmanager to send the kill signal to all users


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-83
changelog:
  - Add label for matahari-broker.pid file
  - Allow foghor to read snmp lib files
  - Make sysadm security admin
  - Fix ssh_sysadm_login boolean
  Resolves: #694551


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-95
changelog:
  - Allow secadm to manage selinux config files
  - Allow apache to use jboss management port
  - Add fenced_can_ssh boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-97
changelog:
  - Allow postfix-pickup to write files and directories regardless of their MCS category set.
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  Resolves: #705772


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-104
changelog:
  - Allow puppet to Check access to the passwd executable
  - Add label for /var/www/html/logs directory
  - Add label for /var/lib/squeezeboxserver directory
  - Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-107
changelog:
  - Make new domains as unconfined
  - Add abrt_handle_event_t domain for ABRT event script
  - Add selinux_mysql man page
  - Fix httpd selinux man page
  - Fix interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-108
changelog:
  - Add squid man page
  - Add git man page
  - Make puppet working with passenger
  - Allow procmail to execute hostname command


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-110
changelog:
  - Add label for passwd.adjunct
  - Allow pulse to execute  /usr/sbin/fos
  - Fix labeling for passenger
  - Add selinux policy support for IP-in-SSH tunnelling
  - Allow sulogin to write /dev/pts/0 in single user mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-111
changelog:
  - Add git_cgit_read_gitosis_content boolean
  - Add support for cma port
  - Add virt_use_sanlock boolean and make sanlock working together libvirt
  - Make passenger and puppet working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-112
changelog:
  - Fix description of allow_* booleans
  - Allow sanlock to manage libvirt lib files
  - Fix bug in lsassd policy
  - Add label for /var/run/luci
  - move port 18001 from http_port_t to jboss_management_port_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-114
changelog:
  - Fix httpd_selinux man page
  - Add corenet_packet() interface
  - Add support for Clustered Samba commands


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-115
changelog:
  - Add unlabelednet policy module
  - Add chrome role for xguest
  - Fix for vdagent policy
  - Add fix to allow confined apps to execmod on chrome


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-128
changelog:
  - Add cronjob_role for sysadm
  - Change label for /var/spool/cron
  - Add interface to allow exec of mongod


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-131
changelog:
  - Fixes for rhev policy
  - Make ssh-keygen as unconfined domain
  - Add sanlock_use_nfs boolean
  - Add ssh_dontaudit_search_user_home_dir interface
  - namespace_init and MLS fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-132
changelog:
  - Fixes for nagios policy
  - Add a new interface for libra
  - Fix spec file to be testing SELinux status correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-134
changelog:
  - Backport ABRT policy
  - Backport matahari policy
  - Add interfaces for libra
  - Add jboss_dubeg port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-135
changelog:
  - Add fixes for qpidd policy, support for tmpfs_t
  Resolves:#769352
  - Add fixes for mcelog policy, for new location of pid,sock files
  - Make sendmail and postfix working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-136
changelog:
  - backport mozilla_plugin policy
  - backport sandbox policy to support nacl
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow system cronjobs to read kernel network state
  - Allow corosync to read and write to qpidd shared memory
  - More fixes for qpidd
  Resolves:#769352
  - Add policy for quota-nld


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-137
changelog:
  - Remove nfs_* booleans because nfs runs in kernel_t domain
  Resolves:#760405
  - Add httpd_manage_ipa boolean
  - Dontaudit sys_ptrace for matahari-netd
  - Allow vhostmd to getattr on virtd
  - Allow snmpd to connect to the ricci_modcluster
  - qpidd should be allowed to connect to the amqp port


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-138
changelog:
  - Add new policy for cfengine
  - Add new policy for sge gridengine jobs
  - Add support for nagios eventhandlers
  - Make system cron jobs run in the proper domain
  - Add policy to support privsep ssh process running in user domain
  - Add fixes relates to nss/FIPS
  - Add new rsync_use_* booleans
  - Allow qpidd to connect to matahari ports
  - Allow sysadm_u to read system_r in MLS
  - Remove razor labeling because we treat razor with spam policy
  - Add support for matahari-qmf-sysconfig-consoled, clean up matahari policy
  - Fixes for interfaces
  Resolves:#791294
  Resolves:#796351


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-139
changelog:
  - Allow nfsd_t to getattr on all fs
  Resolves:#738628
  - Make mailx working together with cron without unconfined module
  - Allow sssd sys_resource capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-140
changelog:
  - Add additional fixes for nagios handlers
  Resolves:#749311
  - Add 7600 and 4447 as jboss_management ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-141
changelog:
  - Add man pages for apps, services
  - Allow nagios to use user terminals
  Resolves:#782325
  - Add support for unconfined certmonger scripts
  - Add support for matahari-qmf-rpcd service
  - Allow chsh to use PAM
  - Allow rpc.statd to execute sm-notify which has bin_t label
  - Make sure files which are created by /usr/bin/R get proper label in home directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-142
changelog:
  - Fixes for man pages
  - Allow rpcd to execute sm-notify
  Resolves:#802247
  - Add support for matahari-qmf-rpcd
  - Add support matahari vios-proxy-* apps
  - Allow quota-check to create files on nonxattr filesystems
  - Add support for ~/Maildir
  - Allow unconfined dyntransition
  - Fixes for certmonger_unconfined and certmonger
  - Fixes for certmonger policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-144
changelog:
  - Fixes for cfengine policy
    * changed labeling for /var/cfengine/outputs from var_log to cfengine_var_log_t
    * re-arranged policy to use template and cfengine_domain 
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Bacport libvirt-qmf policy for Fedora
  - Remove labeling for postmaster.pid file 
  - Fix for virtual network which looses network connection
  - Add man pages for SELinux users
  - cgconfig needs to use getpw calls
  - Allow lvm and fsadm to write sysfs_t
  - Allow rpc.mounted to list user tmp files
  - Fix permissivedomains declarations
  Resolves:#806220
  - Fix spec file to instal minimum policy properly


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-146
changelog:
  - Add sysadm_secadm policy module to separate in secadm_r, sysadm_r
  Resolves:#787413
  - Fixes for libvirt-qmf
  - Add label for package-cleanup 
  - Add support for zfs
  - Make cfengine domains as unconfined
  Resolves:#753184
  - Allow sshd_t to dyntransition to sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-156
changelog:
  - Allow user to login using ssh with random MLS range
  Resolves:#837815
  - Allow virtd_t to create mtab with the proper labeling
  - Add support for check_icmp nagios plugin
  - Make chkconfig working on MLS for sysadm_t
  - Allow dovecot to manage mail_home_rw_t
  - Add support for fsav
  - Allow clamscan to use amavisd-new
  - Add support for rhnsd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-157
changelog:
  - Allow procmail to manage mail home data
  - We should only block MCS node_bind on mcsuntrustedproc
  - Fixes for amavis
  Resolves:#837815


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-159
changelog:
  - Allow munin_stats to read munin logs
  - Allow updpwd to write all MLS levels
  - Make piranha_web_t as nsswitch domain
  - Allow munin mail plugins to read exim log files
  - Backport sanlock policy from Fedora
  Resolves:#831908
  - Allos dac_override, sys_nice for sasl
  - Add labeling for /var/named/chroot/usr/lib64
  - Add support for gitolite3
  - Allow confined users to send mail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-160
changelog:
  - Add named_bind_http_port boolean
  - Add port definition for 8953/tcp
  - spice-vdagent(d)'s are going to log over to syslog
  - Fix labeling for /usr/sbin/rpc.* binaries to label them as rpcd_exec_t
  - Add sensord policy
  - Allow oddjob_mkhomedir to write on nfs share
  - Add virt_bridgehelper policy
  - Allow clamd to write/delete own pid file with clamd_var_run_t label
  - Add support for wdmd tmpfs
  - Add initrc_domain attribute 
  - Add bcfg2 policy
  - Modify ssh_chroot_rw_homedirs boolean to allow manage apache system r/w content if for /var/www as home
  - Add pacemaker policy
  - Allow snmpd to connect to corosync over unix stream socket
  - Allow crontab to read NFS
  - Add new type selinux_login_config_t for /etc/selinux/TYPE/logins directory and allow sssd to manage files in this directory
  Resolves:#843814
  - Add labeling for /opt/sartest directory
  - Add initrc_domain attribute to allow domains to work as initrc_t domain
  - heartbeat should be running as rgmanager_t instead of corosync_t
  - Add glusterd policy
  - Add l2tpd policy
  - Add numad policy
  Resolves:#801493


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-162
changelog:
  - Add pkcslotd policy
  Resolves:#851483
  - Allow cyrus-imapd init script to write cyrus data
  - Fix labeling for /dev/twa


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-166
changelog:
  - More fixes for openshift and add support for opeshift labeling instead of stickshift
  - /etc/selinux/<type>/logins should be owned by the policy package
  Resolves:#855889
  - Add labeling for /var/tmp/DNS_25      
  - Allow postfix_local_t to execute files on nfs_t
  - Add fixes for kadmind
  - Add rhnsd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-167
changelog:
  - Allow postfix_locat to search stickshift lib files
  - Dontaudit sys_ptrace cap for httpd if httpd_stickshift is on
  - Allow openshift domains change process identity
  - SELinux is reporting that openshift domains are trying to write into their proc directories
  Resolves:#855889


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-168
changelog:
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - pppd wants to read /usr/share/radiusclient-ng/dictionary
  - Add ssh_chroot_manage_apache_content and ssh_chroot_full_access booleans
  - snmp wants to also manage snmp dirs for amavisd-snmp support
  - Add labeling for virsh_fenced
  - Allow nmbd_t to crate dirs with samba_var_t labeling
  - Add clamscan_can_scan_system boolean
  - Allow all domains to getattr on prelink_exec_t
  - Add postgresql_can_rsync boolean
  - Allow pulse to domain transition to iptables
  - Allow nslcd sys_nice capability
  - Allow corosync to connect to saphostctrl ports
  - Allow passwd to read generic /tmp dirs
  - Add policy for qemu-qa
  - Add new antivirus policy module for antivirus programs
  Resolves:#838260


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-169
changelog:
  - Fix spec file to silent restorecon errors on files which do not exist
  - Fix passenger backport
  Resolves:#839831


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-172
changelog:
  - Update httpd_runstickshift boolean
  - Remove transition from sysadm_t to fsadm_t
  Resolves:#852763
  - Make vmware-host as unconfined domain
  - Allow all domains to read usr_t
  - Fix labeling for all log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-173
changelog:
  - syslogd_t now support kerberos
  Resolves:#867001
  - Fix openshift labeling for binaries
  - Allow passwd to read usr_t links/files
  - Add labeling for /var/lib/sss/mc


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-174
changelog:
  - openshift user domains wants to r/w ssh tcp sockets
  - Allow mount to relabelfrom unlabeled file systems
  - Additional fix for syslog/kerberos
  Resolves:#867001


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-175
changelog:
  - Add initial openswitch policy. Domains are unconfined
  Resolves:#845417
  - Add labeling for /usr/sbin/mcollectived
  - Allow openshift domains to read /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-177
changelog:
  - Allow dnsmasq to manage virt run files
  Resolves:#843543
  - Allow setroubleshootd to read /proc/irq
  - Backport fixes for virt_use_* booleans
  - Allow qemu-ga to use ttyS0
  - Allow dhcpc to manage dhclient-eth0.pid labeled as virt_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-178
changelog:
  - Fix labeling for OpenShift binaries
  - Add samba_portmapper boolean and labeling for /var/run/samba
  Resolves:#871816
  - Backport dspam policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-180
changelog:
  - Allow openshift domains to execute tmux
  - Allow wdmd to getattr on tmpfs_t
  Resolves:#831908
  - Add labeling for /var/nmbd/unexpected
  - Allow winbind to create samba pid dir
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes for syslogd
  - Fenced communicates with libvirt
  - Fix labeling for libflashplayer.so
  - Add labeling for /var/lib/zarafa-webapp
  - Allow dspam to read localization
  - Add labeling for Z-Push
  - Allow rpc.svcgssd to search nfsd_fs_t dirs
  - Allo cgred to read all sysctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-181
changelog:
  - Allow kdumpgui to read/write to zipl.conf
  Resolves:#877108
  - Add /proc/numactl support for confined users
  - Make proc_numa_t an MLS Trusted Object
  - Make ccs_tool and cman_tool labeled as rgmanager_exec_t
  - Fix cron_admin_role interface
  - Add support for opendkim


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-182
changelog:
  - Fix labeling for /var/named/chroot/usr/lib
  Resolves:#843732
  - Allow amavis to stream connect to snmpd
  Resolves:#839250
  - Additional fixes for log files related to logrotate
  - Allow all domains to read base etc_t file type
  - Allow logrotate to list root home directory
  - Fix labeling for /var/log/z-push
  - Allow cyrus init scriptu to manage cyrus data files
  - Dontaudit leaks of locks or generic log files to systemprocesses
  - Allow ricci-modrpm to send syslog msgs
  - Allow munin to have kill capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-184
changelog:
  - Add support for tcp/10026 port as dspam_port_t
  - Allow dspam to connect/bind to dspam_port_t
  - Add uconfined_munin_plugin_exec_t for all plugins which are not covered by munin plugins policy
  - Allow domains that can read sssd_public_t files to also list the directory
  Resolves:#881413
  - Allow programs to run in fips_mode using fips_mode boolean
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow sshd to look into the mysql home directory for authorized_keys
  - Make rsync as homemanager which allows to manage CIFS/NFS	  
  -


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-185
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  -  Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Allow winbind to manage samba_var_t sock files
  - Allow git-daemon and httpd to serve the same dir
  Resolves:#883143
  - Allow dac_override for nrpe


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-196
changelog:
  - Backport openshfit fixes
  - Allow cgred to use notify 
  Resolves:#913673
  - Allow mount to transition to gluster 
  - Fix tuned policy to make it working with the lastet tuned package


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-197
changelog:
  - Fix /etc/dhcp labeling
  - Back port openshift fixes
  - Make dirsrv-admin server restarted from console working
  - Add ftpd_use_fusefs boolean
  Resolves:#913673
  - openshift_cron_t needs dac_override


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-198
changelog:
  - Allow dirsrv-admin script to exec apache modules
  - Add labeling for dirsrv-admin lock file
  - Add labeling for /var/lib/owncloud
  - Add labeling for /var/www/moodle
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-199
changelog:
  - qemu-ga needs to execute scripts in /usr/libexec/qemu-ga
  - Allow openshift_cron_t to manage openshift_var_lib_t sym links
  - Allow dovecot-auth to execute bin_t
  - Allow mysqld-safe to execute bin_t
  - Allow procmail to manage user tmp files
  - Allow sanlock to kill svirt_t
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-203
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#966106
  - Make openshift_initrc_t as initrc domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-204
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-205
changelog:
  - Remove domtrans for quantum which needs to stay in the same domain
  - Allow qemu to manage nova lib files
  - Allow hald to read svirt images
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-217
changelog:
  - Fix virtd_lxc_t to be able to communicate with hal
  - Allow NM and wireless working together
  Resolves:#1009661
  - Allow my_print_default to read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-218
changelog:
  - Add support for /var/log/qemu-ga directory
  - Regenerate man pages for domains
  Resolves:#880728
  - Allow setgid capability for ipsec_t
  - Allow ipsec to send signull to itself
  - Add tcp/9000 as http_port_t
  - Allow dirsrv_t to create tmpfs_t directories
  - Fix git_role() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-219
changelog:
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Allow tzdate to unlink etc_t lnk files
  - Allow jabberd to connect to jabber_interserver port
  - Fix description for logging_syslog_can_read_tmp boolean
  - Update ipsec rules and labels
  Resolves:#986883
  - Allow pegasus transition to mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-220
changelog:
  - Allow cobblerd to stream connect to MySQL
  - Allow cobblerd to execute ldconfig
  - Allow openstack-glance to access to amqp
  - Add labeling for /var/run/charon.*
  - Make munin "df" plugins working
  Resolves:#908095


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-221
changelog:
  - Fix /var/run/charon labeling
  - More fix for strongswant and ipsec.secretes
  - Allow sandbox domain to use inherited user terminals


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-232
changelog:
  - Add more fixes for zabbix-agent
  - Fix neutron labeling
  - Allow all domains to read sysfs_t due to glibc change
  - Allow ping to read inherited zabbix tmp files
  Resolves:#1039851
  - Allow hostname to read/write inherited rpm script files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-233
changelog:
  - Add support for OpenShift syslog plugin
  - Allow snmpd to getattr on removeable and fixed disks
  - Add shmemnetgrp and getnetgrp to access_vectors
  Resolves:#1025758


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-235
changelog:
  - Add support for nginx
  Resolves:#1045041
  - Change shutdown_t to also read wtmp
  - Added support for hypervkvpd
  - Add preupgrade policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-236
changelog:
  - Added conman policy
  - Added label for conman port
  - Added support for mip6d policy
  - Added support for isns
  - Added rtas_errd policy
  - Added support for keepalived policy
  - Add label samba_spool_t for /var/spool/samba
  - Allow httpd_t to bind preupgrade port if httpd_run_preupgrade boolean is enabled
  - Allow openshift_cron_t to append to openshift log files
  - dontaudit sudo domains listing /dev
  - Allow read/write to login records
  - Allow auditctl getattr access on blk_file
  - Allow nova-scheduler to read utmp
  - Added stapserver policy
  - Added support for freeipmi services
  - Added lsm policy
  - Added support for pcp service
  - Added chown capability to dhcpd_t domain
  - Add boolean to allow openshift domains nfs access
  - Allow abrt to read man pages and getcap
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Dontaudit smbd_t sending out random signuls
  - Backport all zabbix changes
  - Allow mcelog write access to nscd socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-237
changelog:
  - Fixes for mirrormanager
  - Fix swift interface
  - Allow lsmd_plugin_t to read localization
  - Allow keepalived read snmp libs, Allow keepalived connect to agentx port
  - Allow keepalived read localization
  - Added setuid capability to lsm service
  - Added some swift rules to rsync policy
  - Remove duplicate line entry in .fc
  - Do not send/receive packets when ftpd_use_passive_mode is disabled
  - Add mirrormanager policy to RHEL6 Fixes Bug 1042864
  - Update permissivedomains by mirrormanager
  - Add mirrormanager policy
  - Added support for openwsmand
  - Added policy for swift
  - Added support for sblim
  - label also 64bit heartbeat libs
  - Allow kill capability on varnish
  - Added haveged policy
  - Add missing kernel_rw_stream_socket_perms
  - Label tcp/udp port no. 3052 as apc, Allow apcups to bind on apc port
  - Allow logwatch stream connect to courier service
  - Fix mcelog policy
  - Back port rsyslog fixes from RHEL7 for rsyslog7
  - Fix whitespace
  - Add support for osad
  - Fix automount policy
  - Added policy for bacula
  - add radvd_read_pid_files inteface
  - Add missing syslog-conn port
  - Allow httpd_t write to kernel keyring
  - Allow httpd_sys_script_t domain to send system log messages 
  - Allow passwd_t to write to ipa trusted user files in /tmp 
  - Boolean to allow mcelog use all the user ttys 
  - Allow icecast to use any tcp ports 
  - Define oracleasm_t as a device node 
  - Allow sudomain to getattr of kernel interface
  - Add squid directory in /var/run
  - Allow automount read nfs symlinks
  - Allow asterisk to connect to the apache ports
  - allow abrt to read mcelog log file 
  - allow udev to search radvd files under the /run dir 
  - allow auditctl getattr access on blk_file 
  Resolves:#1080555
  - Allow ssh to manage nfs links


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-238
changelog:
  - Allow domain to read an append inherited tmp files
  - Dontauit leaks of var_t into ifconfig_t
  - Allow fsdaemon_t to read/write device_t char files 
  Resolves:#1035363
  - Remove sblim_filetrans_named_content in RHEL6
  - We don't have systemd in RHEL6.
  - one more fix for bacula_admin()
  - fix bacula_run_admin()
  - Remove shadow_t label from /etc/security/opasswd 
  - Fix logrotate_use_nfs boolean
  - Allow userdom to read inherited users files in /tmp 
  - Allow certmonger_t read puppet libs
  - Allow in logging_inherit_append_all_logs also ioctl and append
  - Label pacemaker_remoted as cluster_exec_t
  - Tag some conman exec files
  - Allow conman to read localization
  - Should use rw_socket_perms rather then sock_file on a unix_stream_socket
  - Added conman fixes
  - Allow apache to manage passenger sock_files
  - Allow bacula to bind on 9103 tcp port
  - Allow postfix stream connect to antivirus
  - Allow osad to read localization


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-239
changelog:
  - Fixed lsmd_plugin_t
  Resolves:#1111619
  - Added glusterd_conf_t alias glusterd_etc_t
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory 
  Resolves:#982160
  - Label zabbix-proxy files
  Resolves:#1018211
  - allow sshd to write to all process levels in order to change passwd when running at a level
  Resolves:#837616
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range 
  Resolves:#837616
  - Rename quantum port to neutron 
  Resolves:#1024927
  - Added zarafa_read_lib_files interface
  - Added dont audit list non security files in xdm_t 
  Resolves:#1030760
  - Added more fixes relates to 
  Resolves:#1060656
  - Added dontaudit rules to xdm_t 
  Resolves:#1030760
  - Allow procmail to run zarafa-degent 
  Resolves:#1060656
  - Add userdom_user_application_domain in xauth 
  Resolves:#1013832
  - Allow dmesg read raw memory 
  Resolves:#1030762
  - Allow communication between postfix and cyrus 
  Resolves:#1057307


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-240
changelog:
  - Allow nagios to stream connect to postgresqlBZ #1015708
  Resolves:#1015708
  - Allow hypervkvp read localization
  - Fix postfix_admin()
  - Add lldpad policy for MLS


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-241
changelog:
  - Remove deny_ptrace from interfaces
  - Add setpgid procces to mip6d_t
  - Added support for hv_vss_daemon
  - Allow keepalived also managed snmp lib dirs
  - Allow chroot_user_t unconfined shell domtrans
  Resolves:#1082183
  - Label swift-object-expirer as swift_exec_t
  - Allow keepalived manage snmp files, dontaudit list tmp files
  Resolves:#1053450
  - Additional fix for calling postfix interfaces in sysadm.te to make postfix_admin() working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-243
changelog:
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-244
changelog:
  - Add support for vdsm 
  Resolves:#1064270
  - Allow userdomain role to access prelink_mask_t
  - Rename module glusterfs to glusterd 
  Resolves:#1052206
  - Allow gfs_controld_t to getattr on all file systems 
  Resolves:#1110886
  - Allow apache to manage pid sock files 
  Resolves:#1042864
  - Bind TCP/UDP sockets to the nfs port
  - The /var/run/tuned directory is not a regular file 
  Resolves:#1117685
  - Allow utilize winbind for authentication to AD. 
  Resolves:#1084177
  - Dont audit access on /etc/init.d/mcollective for kdump_t
  - FIx labeling in networkmanager.fc
  - Allow passenger to connect to MySQL
  - ALlow passenger to read locales
  - Dontaudit relabelfrom/relabelto for all variablefiles for prelink_map_t
  - Change all var_lib_t types to have also variablestatefile attribute
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-245
changelog:
  - Allow setpgid for all sandbox domains.
  - Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
  - One more fix for osad.te
  - Back port osad changes from RHEL7.
  - Rename svirt_lxc_file_t to svirt_sandbox_file_t.
  - Label nginx init script as httpd_initrc_exec_t 
  Resolves:#1045041
  - Allow postfix_smtpd to stream connect to antivirus 
  Resolves:#1105889
  - Label init thttpd file as httpd_initrc_exec_t 
  Resolves:#1069843
  - Allow httpd to setattr on httpd_log files
  Resolves:#1111581
  - Add tomcat
  - Allow zabbix to read system network state
  - Allow ndc to read random and urandom device 
  Resolves:#1110397
  - Add kerberos support for radiusd.
  - Allow procmail to ioctl on zarafa-deliver executable.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-246
changelog:
  - Add boolean to allow user login programs access to /etc/shadow
  - Use old icecast_connect_any boolean name and dontaudit list /tmp with tmp_t labeling
  - Remove unused interface rtas_errd_systemctl 
  Resolves:#1121169
  - Allow prelink_mask to use user terminals and dontaudit relabel tmpfiles.
  - Dontaudit r/w inherited lockfiles/tmpfiles for prelink_mask_t.
  - Allow prelink_mask to append all log files.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-247
changelog:
  - Add all login domain auth_can_read_shadow_passwords attribute.
  - Added support for dhcrelay service
  Resolves: #1123338
  - We need to call auth_tunable_read_shadow in auth_shadow boolean.
  - Move authlogin_shadow to authlogin.if.
  - Add filetrans also for bacula log files.
  - Dontaudit kdumpgui to read openshift_initrc_exec_t
  Resolves: #1023336
  - Allow squid to manage squid_var_run_t sock_file
  Resolves: #1102346
  - Alloe bacula manage bacula_log_t dirs
  Resolves: #1122545
  - Added sys_ptrace cap. to stapserver_t
  Resolves: #811366
  - Label also /var/run/glusterd.socket file as glusterd_var_run_t
  Resolves: #1052206
  - Added support for collectd daemon
  Resolves: #1024715
  - Label conmans pid file as conman_var_run_t, Resolves: #1122106
  - Fix authlogin_shadow boolean to have it for all login_pgm domains
  - Dontaudit r/w inherited all log files for prelink_mask_t
  - Label zabbix_var_lib_t directories
  Resolves: #1053205
  - Allow all sblim domain to read localization data
  Resolves:##1122022


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-248
changelog:
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift 
  Resolves: #1034206
  - Do not send/receive packets when ftpd_use_passive_mode is disabled 
  Resolves: #1105544
  - Allow qemu-ga domtrans to hwclock 
  Resolves: #1062384
  - Allow sshd read access to files on ftp directory 
  Resolves: #1097387
  - dontaudit r/w inherited certs for prelink_mask_t.
  - Allow sblim_gatherd_t to search all mountpoints. This is caused by ps. Should not be needed in Fedora.
  - Fix labeling in dhcpc.fc.
  - Add labels also for glusterd sockets.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-249
changelog:
  - Add support for luci.
  - Add support for rhsmd and treat it with rhsmcertd_t.
  - Make zabbix_agent_t as unconfined domain for rhel6.6.
  - Allow chroot_user_t to change process identity.
  Resolves:#1082183
  - Revert "Remove shadow_t label from /etc/security/opasswd
  - Dontaudit relabel lib_t files for prelink_mask_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-250
changelog:
  - Dontaudit read/write/setattr all pipes for prelink domains on all domains
  Resolves:#1103674
  - Allow chroot_user_t to change the role.
  - Add sys_time caps for virt_qemu_ga_t
  - Add label for /usr/sbin/luci


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260.el6_6.1
changelog:
  - Allow osad to execute rhn_check
  - Make osad_t as unconfined domain
  - Allow osad connect to jabber client port
  Resolves:#1169688
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move to Applications/Internet group
  - clean up %post script
  - make stunnel.pem %ghost %config(noreplace)
  - provide a sample file for use with xinetd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.11
  - chuck the SIGHUP patch (went upstream)
  - chuck parts of the 64-bit clean patch (went upstream)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove explicit requirement on openssl (specific version isn't enough,
    we have to depend on shared library version anyway)


author: Nalin Dahyabhai <nalin@redhat.com> 3.19-1
changelog:
  - update to 3.19 to avoid problems with stunnel being multithreaded, but
    tcp wrappers not being thrad-safe


author: Nalin Dahyabhai <nalin@redhat.com> 3.20-1
changelog:
  - log using LOG_AUTHPRIV facility by default (#47289)
  - make permissions on stunnel binary 0755
  - implicitly trust certificates in %{_datadir}/ssl/trusted (#24034)


author: Miloslav Trmac <mitr@redhat.com> - 4.11-1
changelog:
  - Update to stunnel-4.11
  - Fix int/size_t mismatches in stack_info ()
  - Update Certificate-Creation for /etc/pki


author: Miloslav Trmac <mitr@redhat.com> - 4.14-1
changelog:
  - Update to stunnel-4.14
  - Override changed default pid file location, keep it in %{_localstatedir}/run


author: Miloslav Trmač <mitr@redhat.com> - 4.20-4
changelog:
  - Revert the port to NSS, wait for NSS-based stunnel 5.x instead
    Resolves: #301971
  - Mark localized man pages with %lang (patch by Ville Skyttä)
    Resolves: #322281


author: Avesh Agarwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-1
changelog:
  - fixed startup and description texts
  - added missing requirement for system-config-network-tui
  - moved base python files into tui sub package
  - fixed requirements
  - made package noarch


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-2
changelog:
  - fixed disabled string in fw_gui
  - set mode after copying of ip*tables-config to 0600
  - fixed categories in desktop file


author: Thomas Woerner <twoerner@redhat.com> 1.0.2-1
changelog:
  - obsolete and provide system-config-securitylevel package
  - added compat files for anaconda, firstboot and system-config-kickstart
  - lokkit fixes for nostart option:
    - only write config for iptables and ip6tables if enabled
    - stop iptables and ip6tables if disabled
    - unlink iptables and ip6tables rule files if disabled
  - lokkit: new option --update to regenerate firewall configuration if not 
    disabled
  - check for include files only when writing firewall configuration
  - clean buildroot in install
  - made system-config-securitylevel a synonym for system-config-firewall
  - ip6tables: reject with icmp6-adm-prohibited instead of icmp6-port-unreachable
    (rhbz#250915)
  - moved config files from /etc/sysconfig into tui sub package
  - removed x bit from import files


author: Thomas Woerner <twoerner@redhat.com> 1.0.3-1
changelog:
  - added missing system-config-securitylevel compatibility files
  - string and documentation fixes
  - fixed typos reported by Alain Portal
  - more translations
  - fixed buildroot
  - cleanup and changes according to review (rhbz#253232)
  - moved doc to tui sub package


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-1
changelog:
  - more translations
  - build environment changes
  - dropped build stage, because it is not needed at all


author: Thomas Woerner <twoerner@redhat.com> 1.0.5-4
changelog:
  - fixed problem if /etc/sysconfig/system-config-securtylevel and 
    /etc/sysconfig/system-config-firewall are not readable


author: Thomas Woerner <twoerner@redhat.com> 1.0.6-1
changelog:
  - dropped --stop option from fw_gui::genArgs
  - new translations
  - sysctl support for masquerading (net.ipv4.ip_forward will be set)
  - glade file: fixed spacings, dropped not needed containers


author: Thomas Woerner <twoerner@redhat.com> 1.0.7-1
changelog:
  - new translations
  - added openvpn to services (rhbz#)
  - fixed typo in description text for ipsec
  - using port numbers instead of port names for services
  - renamed some variables to be consistent
  - make tolltip better: bigger text, helper modules
  - dropped unused code: inconsistent handling
  - make port check button inactive in add_port_cb
  - new function _addDevice: code cleanup
  - allow to set variables in ipXtablesConfig, which were not set before
  - fixed os.system calls in ipXtablesClass to return proper return values
  - fixed status funciton in ipXtablesClass
  - new _append_unique function in fw_parser to prevent duplicates
  - added warning dialog for missing or unusable /etc/sysconfig/ip*tables files
  - fixed expand of the warning label in the startup dialog


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-1
changelog:
  - use extension match for protocols (rhbz#229879)
  - use ipv6-icmp instead of icmpv6 (rhbz#291001)
  - use ':' in tui as port/proto delimiter for other ports (rhbz#292171)
  - some translation fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-2
changelog:
  - lokkit: write new config with nostart option (rhbz#353961)
  - translation fixes for de, it, nb, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.0.9-1
changelog:
  - do not report configuration failed if ipv6 is disabled (rhbz#355561)
  - print messages if lokkit failed
  - lokkit be more verbose on restarting ipXtables in verbose mode


author: Thomas Woerner <twoerner@redhat.com> 1.0.10-1
changelog:
  - fixed problem with network devices (rhbz#331671)
  - dropped obsolete translation no.po (rhbz#332331)


author: Thomas Woerner <twoerner@redhat.com> 1.0.11-1
changelog:
  - fixed crash on startup for network device aliases (rhbz#384891)
    thanks to Loran Freval for the patch
  - added port entry max length in other ports dialog (rhbz#385931)
  - added version number to about dialog (rhbz#387891)
  - improved some english texts (rhbz#383741)
    thanks to Paul W. Frields for the initial patch
  - code cleanup with start speedup
  - do not allow to add custm rules for ipv6:nat
  - also translate parser error messages


author: Thomas Woerner <twoerner@redhat.com> 1.0.12-1
changelog:
  - allow to activate checkboxes by row activation in treeviews
  - code cleanup in view_toggle_cb
  - fixed port display for IPSec
  - use system icons where possible, new wizard icons
  - added fallback for CellRendererCheck if icons are missing, size fixes
  - added tooltips for toolbar and menu entries (if needed)
  - improved more english texts (rhbz#395801)
    thanks to Paul W. Frields for the initial patch


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-0
changelog:
  - ports are ports and services are services: there is a new service tag to
    enable services; a port is not enabling a service anymore
  - new conversion tool for 1.0.X to 1.1.X configuration
  - new version option for lokkit
  - wizard
    - dropped network connection selection tab
    - using keep configuration check instead of clear configuration check
    - added default configuration selection
  - gui: new menu for skill level and load default configuration
  - use choices in optparse, removed obsolete check functions


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-1
changelog:
  - new default configurations: server, desktop
  - cleanup of wizard: dropped network connection tab
  - new option in wizard to keep configuration or load a default configuration
  - new menu entry and dialog to configure iptables and ip6tables service settings
  - some enhancements to the gtk_cellrenderercheck for better look and feel


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - use radio buttons for skill menu entries to show active level
  - fixed convert-config problem if there is no configuration to convert
    (rhbz#426477)
  - minor string changes
  - new it and pt_BR translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.2-1
changelog:
  - fw_gui: fixed row activation for masquerading
  - fw_gui: fixed _setInterfaces to use internal functions to correctly set
    toggles
  - fw_gui: show info dialog if no config exists and firewall gets enabled: new
    function enableFirewall
  - fw_gui, fw_tui: disable firewall if no config exists
  - fw_gui, fw_tui: do not print traceback if NCDeviceList.getDeviceList raises
    and exception
  - forward masqueraded connections
  - gtk_cellrenderercheck: fixed size calculations
  - fw_sysconfig: set config.filename to None for merged configuration in
    read_sysconfig_config if no configuration exists
  - new translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1
changelog:
  - new fw_compat, used in config-convert and fw_sysconfig to automatically 
    convert old system-config-securitylevel configurations
  - new wizard look
  - fixed range check for user defined ports
  - some code cleanup
  - updated translations for fi, fr and ja


author: Thomas Woerner <twoerner@redhat.com> 1.2.0-1
changelog:
  - added port forwarding
  - using INPUT chain in table filter instead of RH-Firewall-1-INPUT
  - fixed masquerading
  - rewrite of firewall generation code
  - trusted hosts now also allowed for FORWARD
  - lots of bug fixes
  - gui enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.1-1
changelog:
  - fixed traceback for clean selinux configuration (rhbz#430963)
  - fixed icmp handling for ip6tables
  - updated translations: as, de, it, ja, pl, pt_BR, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.2-1
changelog:
  - fixed icmp handling for ip6tables in FORWARD chain
  - do state established, related test early in FORWARD chain
  - fixed typo in address for port-forwarding
  - added IPv4 only message to masquerading and port-forwarding for lokkit
  - updated translations: es, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.3-1
changelog:
  - fixed traceback for empty configuration use in life installer (rhbz#430963)
  - use config-util for userhelper configuration (rhbz#428392)
  - mark dirty after applying new default configuration
  - do not overwrite attributes filename and converted in config
  - use new shared ChooserButton
  - fixed forward dialog and labels to use current dialog width
  - use tempfile.mkdtemp for better security
  - updated translations: fi, fr, it, ja, nl, pt_BR, sr and sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.4-1
changelog:
  - fixed overwrite problem if IPTABLES_SAVE_ON_RESTART is set (rhbz#431961)
  - use SELECTION_NONE for trustedView


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-1
changelog:
  - new ICMP filter to block specified ICMP types
  - fixed minor problem in lokkit (initialize old_config)
  - set starting diretory for custom rules files to /etc/sysconfig
  - more build environment changes for git
  - use gtk.CellRendererToggle instead of own CellRendererCheck
  - several parser changes for transparent error handling and output
  - some minor enhancements
  - translation updates


author: Thomas Woerner <twoerner@redhat.com> 1.2.7-1
changelog:
  - fixed crash if encoding is not UTF-8 (rhbz#439902)
  - updated translations: bn_IN, cs, de, es, fi, fr, gu, hi, it, kn, ko, ml,
                          mr, pa, pl, pt_BR, ru, sr, sr@latin, ta, te, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-1
changelog:
  - new tui interface
  - new system-config-firewall-tui
  - new client services for ipp and samba
  - lokkit: fixed disabling of firewall in force mode (rhbz#443411)
  - disabled port forwarding for IPv6
  - some minor fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - fixed format string to silence inttool
  - new remider to check if the ip*tables services are enabled
  - use proper dialog functions in the tui
  - updated translations: cs, de, es, gu, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - lokkit: fixed path for system-config-firewall-tui (rhbz#454108)
  - updated translations for: it, fr, nl, ru, sr, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - use dialogs for parser errors in tui (rhbz#457485)
  - enable to add protocol specific (IPv4, IPv6) icmp types for ICMP filtering
  - updated translations for he, ja, ko and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - only provide lang files in tui sub-package (rhbz#465572)
  - updated translations for: as, bn_IN, ca, cs, es, fr, gu, it, ja, kn, mr, nl,
                              pa, or, pl, pt_BR, sk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - fixed two typos in fw_icmp (rhbz#467334)
  - added ability to sort custom rules files (rhbz#467696)
  - fixed modified test in sysctl writer: fixes rhbz#462325
    also removed quotes around values for new keys
  - some build fixes
  - updated translations for: as, de, fi, fr, he, hi, ko, hu, it, ja, ko, ml,
                              pl, pt_BR, ru, sk, sr, sr@latin, sv, ta, te, 
                              zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new build environment using configure, autofoo and intltool
  - fixed typo in router-solicitation description (rhbz#490979)
  - new themable application icon: preferences-system-firewall (rhbz#454402)
  - make backup copies before overwriting files (rhbz#437374)
  - updated translations:


author: Thomas Woerner <twoerner@redhat.com> 1.2.15-1
changelog:
  - fixed icon reference in desktop file (rhbz#493674)
  - fixed po/POTFILES.in
  - updated translations: as, bn_IN, el, fi, gu, hi, hu, it, kn, ko, mai, ml, mr, or, pa, pt, ru, sk, sv, ta, te, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.16-1
changelog:
  - fixed build system to update desktop file from desktop.in
    fixes icon reference in desktop file (rhbz#493674)
  - updated translations: fr


author: Thomas Woerner <twoerner@redhat.com> 1.2.17-1
changelog:
  - Added Red Hat Cluster Suite to trusted services (rhbz#493668)
  - Fixed wrong patch for system-config-firewall-tui (rhbz#461046)
  - Fixed sysctl parser to also support ';' for comments
  - Fixed port range check for service names containing '-'
  - New column in serviceView for conntrack helper, removed from tooltip
  - New column in icmpView for protocol types, removed from tooltip
  - Added TFTP and TFTP client support (rhbz#494417)
  - Fixed sensitiveness of OK button in portDialog if editing an Port
    (rhbz#500380)
  - Added missing tooltips for buttons in mainNotebook tabs. (rhbz#493872)
  - updated po files


author: Thomas Woerner <twoerner@redhat.com> 1.2.18-1
changelog:
  - added support for PolicyKit
  - removed unused inconsistent flag from CellRendererToggle in serviceView (rhbz#521144)
  - made "Port/Protocol" cell resizable in "Trusted Services"-view
  - fixed hidden one line label after resize caused by fix for bgo#315462
  - fixed startup busy loops if assistive technologies is enabled (rhbz#515048)
    by moving set_model after adding the columns to a TreeView
  - fixed tui to create valid empty self.config object (rhbz#518210)
  - failing to load the icon in fw_gui.setupScreen should not be fatal
    (rhbz#508186)
  - made description column in settings dialog resizable
  - removed rhpl usage (rhbz#508991)
  - fixed not reappearing TreeViewTooltips if mouse moved in the tooltip popup
  - hide TreeViewTooltips while scrolling
  - code cleanup
  - sort ports in fw_services by protocol, id
  - updated translations: as, bn_IN, ca, da, de, es, fi, fr, gu, hi, kn, hu, it, 
                          ja, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk, sr,
  			sr@latin, ta, te, uk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.19-1
changelog:
  - enhanced build environment to support usermode and policykit switches, new
    options for configure and spec file
  - make toplevel invisible to not show half initialized window while policykit
    dialog is shown
  - system-config-firewall.desktop.in moved to config subdir
  - disable dbus usage if gui is used as root (needed for policykit v0)
  - do not report dbus error if there is no firewall configuration (empty or
    missing /etc/sysconfig/system-config-firewall)
  - resize main window to comfortably fit in a 800x600 gnome desktop
  - moved all config files into config subdir: sysconfig, dekstop, pam and console
  - new infrastructure to enable policy translations
  - print exception if polkit authorization failes to console
  - show dbus error dialog if dbus conection can not be established
  - set title to APP_NAME for dialogs if there is no title
  - center dialogs on screen if there is no parent
  - make main app invisible at first to prevent to show an empty app while
    PolicyKit password dialog is visible
  - updated translations: as, bn_IN, ca, da, de, ca, cs, es, fi, fr, gu, hi, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk,
                          sr, sr@latin, sv, ta, te, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.21-1
changelog:
  - fixed Policykit v0 compatibility for Fedora version 10 and 11: python-slip
    for PolicyKit v0 does not provide dbus
  - updated translations: bn_IN, uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.22-1
changelog:
  - using NetworkManager DBUS interface to replace NCDeviceList from
    system-config-network
  - not opening orig port for local port forwarding, only new port is open
  - added isakmp support for IPsec (rhbz#504446)
  - added amanda client support (rhbz#541679)
  - fixed requirement for setenforce: libselinux-utils instead of libselinux
  - removed unused import socket
  - added download url to Source tag in spec file
  - fixed wrong license header in src/fw_tui.py (LGPL instead of GPL)
  - update cluster-suite service: disable rgmanager and cssd
  - removed separator at the end of the Options menu (rhbz#531635)
  - removed 2049/udp from NFS4 service (rhbz#532491)


author: Thomas Woerner <twoerner@redhat.com> 1.2.24-1
changelog:
  - DBUS-mechanism: report errors to syslog and print traceback (rhbz#563354)
  - fixed minor misspellings (rhbz#566468)
  - msgmerged po files
  - added missing default values for ip*tables-config content (rhbz#566869)
  - autofoo utils update
  - fixed max length of user defined interface name in interfaceDialog
  - added missing range check to port_entry_changed_cb
  - fixed sensitiveness of protocol label in portDialog
  - fixed misuse of MARK extension in nat table, now in mangle table
  - port forwarding dialog usability fixes (rhbz#507638)
  - use new fw_functions.checkInterface function in tui and gui
  - new function to check interface names in fw_functions
  - use new checkInterface function in parser for trust, masq and forward-port
  - add wlan standard device
  - fixed build (fw_nm.py not packaged)
  - updated translations: bn_IN, cs, da, de, el, en_GB, es, fi, fr, hu, is, it,
                          ja, nb, nl, or, pl, pt, pt_BR, ru, sr, sr@latin, sv,
                          te, uk


author: Thomas Woerner <twoerner@redhat.com> 1.2.25-1
changelog:
  - fixed lokkit: do not create or alter firewall in selinux only mode
    (rhbz#583986)
  - use new icons (rhbz#583715)
  - fixed treeviewtooltips to not show the tooltip if an overlapping window has
    the focus
  - updated translations: bn_IN, de, es, gu, it, kn, ml, mr, nl, or, pa, pl, pt,
                          pt_BR, ru, sk, sr, sr@latin, te


author: Thomas Woerner <twoerner@redhat.com> 1.2.26-1
changelog:
  - added libvirt services (rhbz#565625)
  - added Bakula service (rhbz#588377)
  - fixed DBUS mechanism to report complete syslog message (rhbz#604623)
  - fixed crash because of missing /etc/services file (rhbz#604726)
  - updated translations: ar, as, bn_IN, da, de, es, fi, fr, gu, he, hi, is, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, ru, ta, te, 
                          zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985, rhbz#719871)
  - stop D-BUS firewall mechanism on update


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-6
changelog:
  - Added missing dependency for newt-python (RHBZ#756048)
  - Latest translations from transifex (RHBZ#819809)
  - Allow user to select and add trust and masq interfaces (RHBZ#720831)
  - New D-Bus methods to read an write service settings, use in s-c-fw (RHBZ#711231)
  - Drop eth from std device names list (rhbz#682391)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7
changelog:
  - Fixed screen corruption introduced with (RHBZ#720831)
  - Replaced pickle by json introduced with (RHBZ#711231)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7.2
changelog:
  - moved fw_nm into the base sub package to fix a bug introduced with the
    RHBZ#720831 fix (RHBZ#1164223)


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20100115svn3945
changelog:
  - update to 1.0.90 snapshot
  - X.Org 1.7 support
  - accelerated Tight encoding on x86_64
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh516274.patch
    - tigervnc10-rh524340.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100115svn3945
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.7.20100115svn3945
changelog:
  - make libvnc.so module working again (r4005, r4024, r4025)
  - vncviewer could crash on slow links (r4003, r4004)


author: Adam Tkac <atkac redhat com> 1.0.90-0.8.20100115svn3945
changelog:
  - fix memory leak in Xvnc (#603731)
  - update URL about SSH tunneling in the sysconfig file (#601996)
  - add pam-devel to BuildRequires, X server needs it


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20110117svn4237
changelog:
  - rebase to r4237
  - patches merged
    - tigervnc11-noexecstack.patch
    - tigervnc11-r3963.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch
    - tigervnc11-r4003.patch
    - tigervnc11-r4004.patch
    - tigervnc11-r4005.patch
    - tigervnc11-r4024.patch
    - tigervnc11-r4025.patch
    - tigervnc11-rh603731.patch
    - tigervnc11-options.patch
  - build with TLS support


author: Adam Tkac <atkac redhat com> 1.0.90-0.12.20110117svn4237
changelog:
  - tigervnc-server now requires perl (#634161)
  - use locales specified in sysconfig/i18n (#632530)
  - read password file correctly when fread is interrupted (#645755)


author: Adam Tkac <atkac redhat com> 1.0.90-0.15.20110314svn4359
changelog:
  - flush internal Xvnc event queue early to avoid overflowing
  - improve compatibility with viewers with wrong VeNCrypt implementation
    (vinagre)
  - link libvnc.so with "-z now" to catch all undefined symbols
  - fix undefined symbol "getvnchomedir" in libvnc.so


author: Tim Waugh <twaugh@redhat.com> 1.1.0-9
changelog:
  - Init script fixes:
    - Attempt to start all configured servers (bug #562669, bug #768405).
    - Avoid problems when user's configured shell is not bash (bug #949522).
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #958988, bug #920373).
  - Avoid initializing the vnc extension twice (bug #1004093).
  - Use exceptions instead of asserts for ZRLE decoding boundary checks
    (bug #1078508).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-13
changelog:
  - Added versioned pixman and libX11 dependencies (bug #917717,
    bug #991285).
  - Link against system-wide libjpeg-turbo (bug #956779).
  - Describe -SecurityTypes option in man pages (bug #882952).
  - Fixed kbase URL in sysconfig file (bug #728981).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.1-1
changelog:
  - Bump version
  - Added comment in empty __init__.py files
  - Fixed BuildRoot tag to use latest recommendation of FPG
  - Lots of whitespace changes
  - Some minor README changes
  - Added a changelog rule in Makefile
  - Fixed rpmlint error messages
  - Add init() methods to each plugin
  - Call plugin init() methods during tuned's init()
  - Add support for command line parameters
        o -c conffile|--config==conffile to specify the location of the config file
        o -d to start tuned as a daemon (instead of as normal app)
  - Readded the debug output in case tuned isn't started as as daemon
  - Fixed initialization of max transfer values for net tuning plugin
  - Added complete cleanup code in case of tuned exiting and/or
    getting a SIGTERM to restore default values
  - Made the disk tuning pluging less nosy if started as non-daemon
  - Fixed missing self. in the tuned.py config handling
  - Added a manpage
  - Fixed summary
  - Added missing GPL notic to tuned.py
  - Added explanation for Source entry in specfile
  - Added a distarchive target for the Makefile for proper tagging in git
  - Added a explanation how to create the tarball via git in the specfile
  - Fixed the defattr() lines in the specfile to conform FRG


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.2-1
changelog:
  - Added config file option to enable/disable plugins
  - Switched from ConfigParser to RawConfigParser
  - Renamed doc/README.txt to doc/DESIGN.txt
  - Added tuned.conf man page
  - Updated tuned man page
  - Updated package descriptions (#487312)
  - Added documentation for utils scripts (#487312)


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.5-1
changelog:
  - Updated documentation, thanks to Marcela Maslanova!
  - Updated diskdevstat and netdevstat to have command line arguments
  - Added the possibility to output a histogram at the end of the
    run for detailed information about the collected data


author: Phil Knirsch <pknirsch@redhat.com> - 0.2.1-1
changelog:
  - Added first set of profiles
  - Added tuned-adm tool for profile switching
  - Fixed several issues with the tuned-adm tool


author: Phil Knirsch <pknirsch@redhat.com> 0.2.2-1
changelog:
  - Updates to the ktune scripts
  - Added support for start/stop of the ktune scripts and ktune initscript


author: Phil Knirsch <pknirsch@redhat.com> 0.2.5-1
changelog:
  - Moved from prerelease to normal
  - Added missing ethtool requires
  - Fixed 532209 - init priority wrong for ktune (Jan Vcelak)
  - Fixed 530457 - [abrt] crash detected in tuned-0.2.5-0.1.fc12 (Jan Vcelak)
  - Added detection of netcard supported speeds (Jan Vcelak)
  - Fix ktune.sh script for stopping in regard to ALPM and CDROM polling (Phil Knirsch)


author: Phil Knirsch <pknirsch@redhat.com> 0.2.6-1
changelog:
  - Included Jan Vcelak's patch for pyo and pyc files
  - Updated ktune.sh script for laptop-battery-powersave profile with latest
    ALPM mechanism
  - Fixed ktune.sh script for laptop-battery-powersave profile to stop printing
    errors when files in /sys are missing


author: Thomas Woerner <twoerner@redhat.com> 0.2.7-1
changelog:
  - Updated ktune to version 0.4-1
    - Supports start and stop options in profile scripts calls
    - Fixed CMDLINE_ELEVATOR test (rhbz#496940#c9)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.7-2
changelog:
  - Fixed 542305 - [abrt] crash detected in tuned-0.2.5-2.fc12
    Some ethernet cards are not supported by 'ethtool'.


author: Jan Vcelak <jvcelak@redhat.com> 0.2.8-2
changelog:
  - Included Thomas Woerner's patch checking user rights when executing
    ktune service commands.
  - Included Jan Vcelak's patch fixing logging module initialization.


author: Phil Knirsch <pknirsch@redhat.com> 0.2.11-1
changelog:
  - Added support for display of currently active profile
  - Fix missing help command
  - Large update to documentation and manpages
  - Updated several of the profiles
  - Updated ALPM powersave code in the various powersave profiles
  - Disabled USB autosuspend in laptop-battery-powersave for now


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-3
changelog:
  - Fixes #577971 - error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key (Thomas Woerner)
  - Fixes #588739 - tuned should not apply /etc/sysctl.ktune settings (Jan Vcelak)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-4
changelog:
  - Fixes #596817 - spindown-disk profile requires hciconfig
    problematic profile was completely removed


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-5
changelog:
  - Fixes #605217 - tuned-adm unsafe profiles loading
    tuned-adm tool updated to the newest upstream version


author: Jarod Wilson <jarod@redhat.com> 0.2.11-8
changelog:
  - Don't touch transparent hugepage or cpufreq settings if not supported (#621877)
  - Add new enterprise-storage profile based on throughput-performance:
    * Disables barriers for all non-root non-/boot file systems (#624736)
    * Increases the default readahead value from 128kb to 512kb (#624828)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-1
changelog:
  - reduced FSB support on Asus EEE netbooks with Intel Atom
  - consolidate ktune script functions in tuning profiles
  - disable tuned daemon on s390/s390x architectures
  - set readahead by multiplying previous setting
  - udev rules and script for CFQ and multipath devices scheduler tuning
  - fix hal-disable-polling if no CD drives present
  - added support for architecture-specific configuration files
  - special sysctl setting for s390x arch in 'throughtput-performance' profile
  - overall profiles update
  - 'tuned-adm active' shows status of tuned and ktune services as well
  - proper configuration files setup after fresh instalation
  - tuned-utils: added license text
  - bash completion support
  - tuned-adm: profile validity check
  - Fixed 577983 - AttributeError: Nettool instance has no attribute 'interface'


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-2
changelog:
  - add missing man pages (#625850)
  - update profiles description (#619812)
  - fix typos in laptop-battery-profile script
  - disable tuned powersaving in disk-spindown, *-performance and enterprise-storage


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in %{_docdir};
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006p-1
changelog:
  - Upstream 2006p
    - Official version of Western Australia DST trial changes
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Packaging
    - Adding BuildRequires: glibc-common >= 2.5.90-7 to build tzdata
      with extended 64-bit format necessary for dates beyond 2037


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007e-1
changelog:
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Fix licensing tag.
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, New South Wales and Lord Howe
      Island are changing their DST rules effective next year
    - Sync several Antarctic station's rules with the New Zealand
    - leapseconds contain changes from the most recent IERS bulletin


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1


author: Petr Machata <pmachata@redhat.com> - 2007i-1
changelog:
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00


author: Petr Machata <pmachata@redhat.com> - 2008b-1
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information


author: Petr Machata <pmachata@redhat.com> - 2008c-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Fix a typo in Java subpackage name


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Changes for Mauritius (extends DST to years to come)
    - Palestine changes clocks for the duration of Ramadan
    - Argentina will start DST on Sunday October 19, 2008
    - Brazil will start DST on 2008-10-19
  - Drop Pakistan and Morocco patches


author: Petr Machata <pmachata@redhat.com> - 2008h-1
changelog:
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue


author: Petr Machata <pmachata@redhat.com> - 2008i-1
changelog:
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).


author: Petr Machata <pmachata@redhat.com> - 2009a-1
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute


author: Petr Machata <pmachata@redhat.com> - 2009d-1
changelog:
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15


author: Petr Machata <pmachata@redhat.com> - 2009e-1
changelog:
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Egypt ends DST on 2009-09-24


author: Petr Machata <pmachata@redhat.com> - 2009f-1
changelog:
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Drop Pakistan patch


author: Petr Machata <pmachata@redhat.com> - 2009h-2
changelog:
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch


author: Petr Machata <pmachata@redhat.com> - 2009k-1
changelog:
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file


author: Petr Machata <pmachata@redhat.com> - 2009m-1
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch


author: Petr Machata <pmachata@redhat.com> - 2009m-2
changelog:
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1 (tzdata-2009m-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2009o-1
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)


author: Petr Machata <pmachata@redhat.com> - 2010h-1
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Dropped tzdata-2009o-argentinas.patch
  - Resolves: #568668 (DST time change in Paraguay [Asuncion])


author: Petr Machata <pmachata@redhat.com> - 2010i-1
changelog:
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan
  - Resolves: #585134 (Morocco starts DST on May 2, 2010)


author: Andreas Schwab <schwab@redhat.com> - 2010k-1
changelog:
  - Upadate to 2010k (#618600)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Petr Machata <pmachata@redhat.com> - 2010l-1
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628645


author: Petr Machata <pmachata@redhat.com> - 2010o-1
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00
  - Upstream 2010o:
    - Fiji will end DST on March 6, 2011, not March 27, 2011
  - Resolves: #662781


author: Petr Machata <pmachata@redhat.com> - 2011b-1
changelog:
  - Upstream 2011a:
    - Updates of historical stamps for Hawaii
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone
  - Kemerovo oblast should use OMST/OMSST abbreviation (tzdata-2011b-kemerovo.patch)
  - Resolves: #596800
  - tzdata-2011b-c.patch
    - Update of historical stamps for Juneau, Sitka, and histcurrent
      stamps for Metlakatla.  Sitka and Metlakatla are new zones.
    - Delay end of DST in Chile in 2011 until first Sunday in April.
  - Resolves: #681907


author: Petr Machata <pmachata@redhat.com> - 2011d-1
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch
  - Resolves: #684213


author: Petr Machata <pmachata@redhat.com> - 2011d-3
changelog:
  - Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
  - Resolves: #692031


author: Petr Machata <pmachata@redhat.com> - 2011g-1
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Resolves: #694521
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Resolves: #698613
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011h-2
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
  - Resolves: #716936


author: Petr Machata <pmachata@redhat.com> - 2011h-3
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.
  - Resolves: #729693


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-3
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011n-1
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #773755


author: Petr Machata <pmachata@redhat.com> - 2011n-2
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796569


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2014j-1
changelog:
  - Rebase to 2014j
    - Turks & Caicos' switch from US eastern time to UTC-4 year-round
      did not occur on 2014-11-02 at 02:00.  It's currently scheduled
      for 2015-11-01 at 02:00.


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-14
changelog:
  - remove file upload permission problem 
  - change name of patch vsfptd-2.0.3-user_config
  - Resolves #190193


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-16
changelog:
  - Merge review: - fix using %{_var}, %{_sbindir} and 
                    %{_sysconfigdir} macros for files and install
                  - fix BuildRoot
                  - dropped usermod, openssl & pam requirement


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-21
changelog:
  - Remove uniq_rename patch.
  - Correct create/lock race condition, original patch by <mpoole@redhat.com>
    (#240550).
  - Fix bad handling of unique files (#392231).
  - Added userlist_log option.
  - Allow usernames to begin with underscore or dot (#339911).
  - Removed user_config patch.
  - Fix nonrootconf patch (#400921).
  - Increase maximum length of allowed username (#236326).
  - Fix file listing issue with wildcard (#392181).
  - Removed use_localtime patch (#243087).


author: Martin Nagy <mnagy@redhat.com> - 2.0.6-1
changelog:
  - rebase for new upstream version
  - remove patches that were fixed in upstream: kickline, confspell, anon_umask


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3
changelog:
  - update to latest upstream release
  - cleanup the spec file
  - drop patches fixed upstream:
      vsftpd-1.0.1-missingok.patch
      vsftpd-1.2.1-nonrootconf.patch
      vsftpd-2.0.1-tcp_wrappers.patch
      vsftpd-2.0.2-signal.patch
      vsftpd-2.0.3-daemonize_fds.patch
      vsftpd-2.0.5-correct_comments.patch
      vsftpd-2.0.5-pasv_dot.patch
      vsftpd-2.0.5-write_race.patch
      vsftpd-2.0.5-fix_unique.patch
      vsftpd-2.0.5-uname_size.patch
      vsftpd-2.0.5-bind_denied.patch
      vsftpd-2.0.5-pam_end.patch
      vsftpd-2.0.5-underscore_uname.patch
      vsftpd-2.0.6-listen.patch
  - join all configuration patches into one:
      vsftpd-1.1.3-rh.patch
      vsftpd-1.2.1-conffile.patch
      vsftpd-2.0.1-dir.patch
      vsftpd-2.0.1-server_args.patch
      vsftpd-2.0.3-background.patch
      vsftpd-2.0.5-default_ipv6.patch
      vsftpd-2.0.5-add_ipv6_option.patch
      vsftpd-2.0.5-man.patch


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4
changelog:
  - update to latest upstream release
  - enable ptrace sandbox again
  - don't mark vsftpd_conf_migrate.sh as a config file


author: Jiri Skala <jskala@redhat.com> - 2.1.0-3
changelog:
  - updated to latest upstream version
  - improved daemonizing - init script gets correct return code if binding fails
  - trim white spaces from option values
  - fixed #483604 - vsftpd not honouring delay_failed_login when userlist active


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Lon Hohberger <lhh@redhat.com> - 5.5-8
changelog:
  - Add watchdog.d handling
    (bz657750-1-add-watchdog-d.patch)
    This makes the scripts in /etc/watchdog.d behave slightly differently
    (bz657750-2-script-handling.patch)
    Add test-directory to configuration file
    (bz657750-3-add_test_directory_to_configuration_file.patch)
    Log which binaries fail
    (bz657750-4-Log-binary-names.patch)
    Resolves: rhbz#657750


author: Lon Hohberger <lhh@redhat.com> - 5.5-9
changelog:
  - Add man page information on test-directory
    (bz657750-5-man_page_information_for_test_directory.patch)
    Resolves: rhbz#657750


author: Richard W.M. Jones <rjones@redhat.com> - 5.5-10
changelog:
  - Import watchdog initscript from Rawhide, includes some LSB-compliance
    fixes.
    Resolves: rhbz#584701


author: Ales Ledvinka <aledvink@redhat.com> - 5.6-4
changelog:
  - With no value provided for watchdog-timeout do not attempt
    to set it. Avoid conflict with custom module parameter.
  - Resolves: rhbz#1099604


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.2.svn28482
changelog:
  - Package renamed from WebKitGtk.
  - Update to SVN 28482.
  - Build both the GTK and Qt ports, putting each into their own respective
    subpackages.
  - Invoke qmake-qt4 and make directly (with SMP build flags) instead of using
    the build-webkit script from upstream.
  - Add various AUTHORS, README, and LICENSE files (via the doc subpackage).


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.3.svn28482
changelog:
  - Add proper %defattr line to qt, qt-devel, and doc subpackages.
  - Add patch to forcibly build the TCSpinLock code using the pthread
    implementation:
    + TCSpinLock-use-pthread-stubs.patch


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.4.svn29336
changelog:
  - Update to new upstream snapshot (SVN 29336).
  - Drop TCSpinLock pthread workaround (fixed upstream):
    - TCSpinLock-use-pthread-stubs.patch


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.6.svn30667
changelog:
  - Fix include directory naming. Resolves: bug 435561 (Header file <> header
    file location mismatch)
  - Remove qt4-devel runtime dependency and .prl file from WebKit-gtk-devel.
    Resolves: bug 433138 (WebKit-gtk-devel has a requirement on qt4-devel)


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.7.svn30667
changelog:
  - Fix the WebKitGtk pkgconfig data (should depend on gtk+-2.0). Resolves
    bug 436073 (Requires: gtk+-2.0 missing from WebKitGtk.pc).
  - Thanks to Mamoru Tasaka for helping find and squash these many bugs.


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.8.svn31787
changelog:
  - Update to new upstream snapshot (SVN 31787).
  - Resolves: CVE-2008-1010 (bug 438532: Arbitrary code execution) and
    CVE-2008-1011 (bug 438531: Cross-Site Scripting).
  - Switch to using autotools for building the GTK+ port.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.0.0-0.9.svn32531
changelog:
  - Update to new upstream snapshot (SVN 32531).
  - Fix bug 443048 and hopefully fix bug 444445
  - Modify the process of building GTK+ port a bit
  - on qt port WebKit/qt/Plugins is not built for qt >= 4.4.0


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.10.svn32531
changelog:
  - Remove the -Qt subpackage stuff. QtWebKit is now included in Qt proper, as
    of qt-4.4.0-0.6.rc1. (We no longer need separate build-qt and build-gtk
    subdirectories either.)
  - Reference: bug 442200 (RFE: WebKit Migration)
  - Add libjpeg dependency (was previously pulled in by the qt4-devel dependency
    tree).


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.13.svn34655
changelog:
  - Update to new upstream snapshot (SVN 34655)
  - Add some build-time conditionals for non-default features: debug, 
    html5video, libsoup, pango, svg.


author: Peter Gordon <peter@thecodergeek.com>
changelog:
  - Remove outdated and unnecessary GCC 4.3 patch:
    - gcc43.patch
  - Fix the curl-devel BuildRequire conditional. (It is only needed when building
    against curl instead of libsoup.)


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.15.svn37790
changelog:
  - Update to new upstream snapshot (SVN 37790).
  - Default to freetype font backend for improved CJK/Unicode support. (#448693)
  - Add some notes to the build options comments block.
  - Add a build-time conditional for jit


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.16.svn39370
changelog:
  - Update to new upstream snapshot (SVN 39370)
  - Fix ownership of %_docdir in the doc subpackage. 
  - Resolves: bug 473619 (WebKit : Unowned directories).
  - Adds webinspector data to the gtk-devel subpackage.
  - Add patch from upstream bug 22205 to fix compilation errors with Bison 2.4:
    + bison24.patch
  - Add build-time conditional for WML support.


author: Peter Gordon <peter@thecodergeek.com> 1.0.0-0.17.svn40351
changelog:
  - Update to new upstream snapshot (SVN 40351): adds the WebPolicyDelegate
    implementaton and related API (#482739).
  - Drop Bison 2.4 patch (fixed upstream):
    - bison24.patch
  - Fixes CVE-2008-6059: Sensitive information disclosure from cookies via
    XMLHttpRequest calls (#484197).


author: Peter Gordon <peter@thecodergeek.com> 1.1.0-0.18.svn40351
changelog:
  - Fix ownership of doc directory...this time without the oops (#473619).
  - Bump package version number to match that used in the configure/build
    scripts. (Thanks to Martin Sourada for the bug report via email.)


