# changelog

author: Rafael Aquini <aquini@redhat.com> [2.6.32-551.el6]
changelog:
  - [net] netfilter: ipset: autoload set type modules safely (Jiri Pirko) [1208051]
  - [net] dynticks: avoid flow_cache_flush() interrupting every core (Marcelo Leitner) [1191559]
  - [x86] Mark Intel Broadwell-DE processor as supported (Steve Best) [1099685]
  - [x86] Mark Intel Skylake-S processor as supported (Steve Best) [1132156]
  - [x86] Mark Intel Skylake-Y processor as supported (Steve Best) [1194009]
  - [netdrv] mlx4_core: Fix error message deprecation for ConnectX-2 cards (Amir Vadai) [1157841]
  - [netdrv] mlx4_core: Deprecate error message at ConnectX-2 cards startup to debug (Amir Vadai) [1157841]
  - [netdrv] ixgbevf: Add code to check for Tx hang (John Greene) [1150344]
  - [netdrv] ixgbevf: Fix ordering of shutdown to correctly disable Rx and Tx (John Greene) [1150344]
  - [netdrv] ixgbevf: set vlan_features in a single write instead of several ORs (John Greene) [1150344]
  - [netdrv] ixgbevf: add RSS support for X550 (John Greene) [1150344]
  - [netdrv] ixgbevf: enable multiple queue support (John Greene) [1150344]
  - [netdrv] ixgbevf: Fix checksum error when using stacked vlan (John Greene) [1150344]
  - [netdrv] ixgbevf: fix possible crashes in probe and remove (John Greene) [1150344]
  - [netdrv] ixgbevf: add support for X550 VFs (John Greene) [1150344]
  - [netdrv] ixgbevf: compare total_rx_packets and budget in ixgbevf_clean_rx_irq (John Greene) [1150344]
  - [netdrv] ixgbevf: Update Rx next to clean in real time (John Greene) [1150344]
  - [netdrv] ixgbevf: reorder main loop in ixgbe_clean_rx_irq to allow for do/while/continue (John Greene) [1150344]
  - [netdrv] ixgbevf: Cleanup variable usage, improve stack performance (John Greene) [1150344]
  - [netdrv] ixgbevf: Combine the logic for post Rx processing into single function (John Greene) [1150344]
  - [netdrv] ixgbevf: Test Rx status bits directly out of the descriptor (John Greene) [1150344]
  - [netdrv] ixgbevf: Update ixgbevf_alloc_rx_buffers to handle clearing of status bits (John Greene) [1150344]
  - [netdrv] ixgbevf: remove useless bd_number from struct ixgbevf_adapter (John Greene) [1150344]
  - [netdrv] ixgbevf: Resolve missing-field-initializers warnings (John Greene) [1150344]
  - [netdrv] ixgbevf: introduce delay for checking VFLINKS on 82599 (John Greene) [1150344]
  - [netdrv] ixgbevf: Remove unused get_supported_physical_layer pointer (John Greene) [1150344]
  - [netdrv] ixgbevf: do vlan cleanup (John Greene) [1150344]
  - [netdrv] ibmveth: Add function to enable live MAC address changes (Gustavo Duarte) [1198748]
  - [netdrv] ibmveth: Add function to enable live MAC address changes (Gustavo Duarte) [1198748]
  - [tools] perf: Fix race in build_id_cache__add_s() (Milos Vyletel) [1204102]
  - [edac] sb_edac: Add support for Broadwell-DE processor (Seth Jennings) [1197939]
  - [edac] sb_edac: Fix typo computing number of banks (Seth Jennings) [1197939]
  - [acpi] memhotplug: add parameter to disable memory hotplug (Igor Mammedov) [1207249]
  - [acpi] processor: Convert apic_id to phys_id to make it arch agnostic (Prarit Bhargava) [1201164]
  - [acpi] processor: Make it possible to get local x2apic id via _MAT (Prarit Bhargava) [1201164]
  - [acpi] scan: bail out early if failed to parse APIC ID for CPU (Prarit Bhargava) [1201164]
  - [acpi] processor: use apic_id and remove duplicated _MAT evaluation (Prarit Bhargava) [1201164]
  - [acpi] processor: Introduce apic_id in struct processor to save parsed APIC id (Prarit Bhargava) [1201164]
  - [acpi] processor: export acpi_get_cpuid() (Prarit Bhargava) [1201164]
  - [acpi] video: Fix use_native_backlight selection logic (Benjamin Tissoires) [1205233]
  - [acpi] video: Change the default for video.use_native_backlight to 1 (Benjamin Tissoires) [1205233]
  - [acpi] video: Add systems that should favour native backlight interface (Benjamin Tissoires) [1205233]
  - [acpi] video: Do not register backlight if win8 and native interface exists (Benjamin Tissoires) [1205233]
  - [acpi] video: separate backlight control and event interface (Benjamin Tissoires) [1205233]
  - [acpi] video: correct acpi_video_bus_add error processing (Benjamin Tissoires) [1205233]
  - [acpi] video: use after input_unregister_device() (Benjamin Tissoires) [1205233]
  - [acpi] video: Don't start video device until its associated input device has been allocated (Benjamin Tissoires) [1205233]
  - [acpi] video: Harden video bus adding (Benjamin Tissoires) [1205233]
  - [acpi] video: fix unused but set variables in ACPI (Benjamin Tissoires) [1205233]
  - [acpi] video: use kasprintf (Benjamin Tissoires) [1205233]
  - [video] backlight: fix KABI breakage (Benjamin Tissoires) [1205233]
  - [video] backlight: introduce backlight_device_registered (Benjamin Tissoires) [1205233]
  - [video] backlight: add backlight type (Benjamin Tissoires) [1205233]
  - [acpi] preparation of backlight backports (Benjamin Tissoires) [1205233]
  - [acpi] acpica: expose OSI version (Benjamin Tissoires) [1205233]
  - [scsi] hpsa: dont meddle with hw which isn't ours (cciss) (Tomas Henzl) [1204886]
  - [scsi] be2iscsi: Bump driver version (Rob Evers) [1189845]
  - [scsi] be2iscsi: Fix kernel panic when device initialization fails (Rob Evers) [1189845]
  - [x86] tls: Interpret an all-zero struct user_desc as "no segment" (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Don't validate lm in set_thread_area() after all (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Disallow unusual TLS segments (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Validate TLS entries to protect espfix (Kurt Stutsman) [1172798] {CVE-2014-8133}


author: Rafael Aquini <aquini@redhat.com> [2.6.32-552.el6]
changelog:
  - [fs] cifs: Don't replace dentries for dfs mounts (Sachin Prabhu) [1204047]
  - [fs] nfsv4: Don't decode fs_locations if we didn't ask for them (Benjamin Coddington) [1206695]
  - [usb] storage: Use normalized sense when emulating autosense (Gopal Tiwari) [1202951]
  - [scsi] virtio-scsi: avoid cancelling uninitialized work items (Paolo Bonzini) [1066623]
  - [sound] alsa: hda_intel: apply the Seperate stream_tag for Sunrise Point (Adrian Huang) [1209541]
  - [netdrv] qlcnic: Update version to 5.3.62.1 (Chad Dupuis) [1196516]
  - [netdrv] qlcnic: Delete existing multicast MAC list before adding new (Chad Dupuis) [1196516]
  - [netdrv] bnx2x: Force fundamental reset for EEH recovery (Michal Schmidt) [1199576]
  - [drivers] core: fix possible missing of device probe (Michal Schmidt) [1149614]
  - [drivers] core: deferral race condition fix (Michal Schmidt) [1149614]
  - [drivers] core: Fix ordering between deferred_probe and exiting initcalls (Michal Schmidt) [1149614]
  - [drivers] core: Move deferred devices to the end of dpm_list before probing (Michal Schmidt) [1149614]
  - [drivers] core: fixup reversed deferred probe order (Michal Schmidt) [1149614]
  - [drivers] core: KABI fix, put deferred_probe in device_private under __GENKSYMS__ (Michal Schmidt) [1149614]
  - [drivers] core: move the deferred probe pointer into the private area (Michal Schmidt) [1149614]
  - [drivers] revert "core: fix addition of delayed probe infrastructure" (Michal Schmidt) [1149614]
  - [infiniband] qib: Fix potential NULL d_inode dereference (Doug Ledford) [1185095]
  - [infiniband] qib: Add support for the new QMH7360 card (Doug Ledford) [1185095]
  - [infiniband] qib: Do not write EEPROM (Doug Ledford) [1185095]
  - [infiniband] qib: remove pointless assignments (Doug Ledford) [1185095]
  - [infiniband] qib: Correct reference counting in debugfs qp_stats (Doug Ledford) [1185095]
  - [infiniband] qib: Change get_user_pages() usage to always NULL vmas (Doug Ledford) [1185095]
  - [infiniband] qib: Return error for unsupported QP creation flags (Doug Ledford) [1185095]
  - [infiniband] qib: Additional Intel branding changes (Doug Ledford) [1185095]
  - [infiniband] qib: Fix port in pkey change event (Doug Ledford) [1185095]
  - [infiniband] qib: Use pci_enable_msix_range() instead of pci_enable_msix() (Doug Ledford) [1185095]
  - [infiniband] ocrdma: Update sli data structure for endianness (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct value of max_fast_reg_page_list_len (Doug Ledford) [1149273]
  - [infiniband] ocrdma: report asic-id in query device (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Fix off by one in ocrdma_query_gid() (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Use unsigned for bit index (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Help gcc generate better code for ocrdma_srq_toggle_bit (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Update the ocrdma module version string (Doug Ledford) [1149273]
  - [infiniband] ocrdma: set vlan present bit for user AH (Doug Ledford) [1149273]
  - [infiniband] ocrdma: remove reference of ocrdma_dev out of ocrdma_qp structure (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Add support for interrupt moderation (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Honor return value of ocrdma_resolve_dmac (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Allow expansion of the SQ CQEs via buddy CQ expansion of the QP (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Discontinue support of RDMA-READ-WITH-INVALIDATE (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Host crash on destroying device resources (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Do proper cleanup even if FW is in error state (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct state in ibv_query_qp (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Debugfs enhancments for ocrdma driver (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct count of interrupt vectors while registering ocrdma device (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Move PD resource management to driver (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Increase the GID table size (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Add support for IB stack compliant stats in sysfs (Doug Ledford) [1149273]
  - [infiniband] core: Replace ib_umem's offset field with a full address (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Always resolve destination mac from GRH for UD QPs (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Fix ocrdma_query_qp() to report q_key value for UD QPs (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Save the bit environment, spare unncessary parenthesis (Doug Ledford) [1149273]
  - [infiniband] ocrdma: The kernel has a perfectly good BIT() macro - use it (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Don't memset() buffers we just allocated with kzalloc() (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Remove a unused-label warning (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Convert kernel VA to PA for mmap in user (Doug Ledford) [1149273]
  - [infiniband] ipoib: drop mcast_mutex usage (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: deserialize multicast joins (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: fix MCAST_FLAG_BUSY usage (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: No longer use flush as a parameter (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Use dedicated workqueues per interface (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Make the carrier_on_task race aware (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Consolidate rtnl_lock tasks in workqueue (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: change init sequence ordering (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: factor out ah flushing (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: validate struct ipoib_cb size (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Remove unnecessary test for NULL before debugfs_remove() (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Consolidate rtnl_lock tasks in workqueue" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Make the carrier_on_task race aware" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix MCAST_FLAG_BUSY usage" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix mcast_dev_flush/mcast_restart_task race" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: change init sequence ordering" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Use dedicated workqueues per interface" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Make ipoib_mcast_stop_thread flush the workqueue" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: No longer use flush as a parameter" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix IPOIB_MCAST_RUN flag usage" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Add a helper to restart the multicast task" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: make delayed tasks not hold up everything" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Handle -ENETRESET properly in our callback" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: don't restart our thread on ENETRESET" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: remove unneeded locks" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix race between mcast_dev_flush and mcast_join" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix ipoib_mcast_restart_task" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: flush the ipoib_workqueue on unregister" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: cleanup a couple debug messages" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: make sure we reap all our ah on shutdown" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: don't queue a work struct up twice" (Doug Ledford) [1141191 1145910]
  - [pci] msi: Fix pci_msix_vec_count() htmldocs failure (Doug Ledford) [1185095]
  - [pci] msi: Add pci_msix_vec_count() (Doug Ledford) [1185095]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-553.el6]
changelog:
  - [scsi] fnic: IOMMU Fault occurs when IO and abort IO is out of order (Chris Leech) [1024066]
  - [scsi] fnic Driver crashed with NULL pointer reference (Chris Leech) [1024066]
  - [scsi] fnic: For Standalone C series, "sending VLAN request" message (Chris Leech) [1024066]
  - [scsi] fnic: Improper resue of exchange Ids (Chris Leech) [1024066]
  - [scsi] fnic: Memcopy only mimumum of data or trace buffer (Chris Leech) [1024066]
  - [scsi] fnic: assign FIP_ALL_FCF_MACS to fcoe_all_fcfs (Chris Leech) [1024066]
  - [scsi] fnic: part of treewide: fix errors in printk (Chris Leech) [1024066]
  - [scsi] fnic: fnic Control Path Trace Utility (Chris Leech) [1024066]
  - [scsi] fnic: Failing to queue aborts due to Q full cause terminate (Chris Leech) [1024066]
  - [scsi] fnic: NoFIP solicitation frame in NONFIP mode and changed IO (Chris Leech) [1024066]
  - [scsi] remove unnecessary pci_set_drvdata() (Chris Leech) [1024066]
  - [scsi] scsi: Convert uses of compare_ether_addr to ether_addr_equal (Chris Leech) [1024066]
  - [scsi] fnic: Incremented driver version (Chris Leech) [1024066]
  - [scsi] fnic: Fnic Statistics Collection (Chris Leech) [1024066]
  - [scsi] fnic: host reset returns nonzero value(errno) on (Chris Leech) [1024066]
  - [scsi] fnic: fnic Driver Tuneables Exposed through CLI (Chris Leech) [1024066]
  - [scsi] fnic: Kernel panic while running sh/nosh with max lun (Chris Leech) [1024066]
  - [scsi] fnic: Hitting BUG_ON(io_req->abts_done) (Chris Leech) [1024066]
  - [scsi] fnic: Remove QUEUE_FULL handling code (Chris Leech) [1024066]
  - [scsi] fnic: On system with >1.1TB RAM, VIC fails multipath (Chris Leech) [1024066]
  - [scsi] fnic: FC stat param seconds_since_last_reset not (Chris Leech) [1024066]
  - [scsi] lseek(fd, n, SEEK_END) does *not* go to eof - n (Chris Leech) [1024066]
  - [netdrv] tun: Fix csum_start with VLAN acceleration (Jason Wang) [1036482]
  - [netdrv] tun: unbreak truncated packet signalling (Jason Wang) [1036482]
  - [netdrv] tuntap: hardware vlan tx support (Jason Wang) [1036482]
  - [vhost] vhost-net: fix handle_rx buffer size (Jason Wang) [1036482]
  - [netdrv] mlx4_en: Reduce memory consumption on kdump kernel (Amir Vadai) [1100303]
  - [netdrv] mlx4_core: Use low memory profile on kdump kernel (Amir Vadai) [1100303]
  - [netdrv] mlx4: Use is_kdump_kernel() to detect kdump kernel (Amir Vadai) [1100303]
  - [kernel] crash_dump: Make is_kdump_kernel() accessible from modules (Amir Vadai) [1100303]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-554.el6]
changelog:
  - [kabi] Adding symbol si_meminfo (Petr Oros) [1150668]
  - [kabi] Adding symbol pv_mmu_ops (Petr Oros) [1177818]
  - [kabi] Adding symbol mmput (Petr Oros) [1177818]
  - [kabi] Adding symbol get_task_mm (Petr Oros) [1177818]
  - [kabi] Adding symbol cpu_active_mask (Petr Oros) [1177818]
  - [kabi] Adding symbol __node_distance (Petr Oros) [1177818]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-555.el6]
changelog:
  - [crypto] testmgr: fix RNG return code enforcement (Herbert Xu) [1208804]
  - [netdrv] i40e: Fix RSS size at init since default num queue calculation has changed (Stefan Assmann) [1209444]
  - [netdrv] i40e: Move RSS table size for VSIs to the VSI struct (Stefan Assmann) [1209444]
  - [netdrv] i40e: Enable more than 64 qps for the Main VSI (Stefan Assmann) [1209444]
  - [netdrv] i40e: use netdev_rss_key_fill() helper (Stefan Assmann) [1209444]
  - [net] netfilter: xtables: make use of caller family rather than target family (Florian Westphal) [1210697]
  - [s390] dasd: fix panic in DASD driver during boot (Hendrik Brueckner) [1193535]
  - [md] dm-io: fix a race condition in the wake up code for sync_io (Mike Snitzer) [1205853]
  - [edac] sb_edac: fix corruption/crash on imbalanced Haswell home agents (Seth Jennings) [1210148]
  - [fs] proc: show all supplementary groups in /proc/pid/status (Jerome Marchand) [960050]
  - [kernel] futex: Take hugepages into account when generating futex_key (Jerome Marchand) [1193250]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-556.el6]
changelog:
  - [mm] readahead: get back a sensible upper limit (Rafael Aquini) [1187940]
  - [fs] quota: Properly invalidate caches even for filesystems with blocksize < pagesize (Lukas Czerner) [893926]
  - [fs] xfs: fix behaviour of XFS_IOC_FSSETXATTR on directories (Zorro Lang) [1200705]
  - [fs] xfs: allow logical-sector-sized DIO (Eric Sandeen) [1197195]
  - [fs] xfs: rename xfs_buftarg structure members (Eric Sandeen) [1197195]
  - [fs] xfs: clean up xfs_buftarg (Eric Sandeen) [1197195]
  - [fs] xfs: simplify xfs_setsize_buftarg callchain; remove unused arg (Eric Sandeen) [1197195]
  - [fs] fuse: avoid scheduling while atomic (Brian Foster) [1144128]
  - [fs] pipe: kill ->map() and ->unmap() (Brian Foster) [1144128]
  - [fs] fuse: use clear_highpage() and KM_USER0 instead of KM_USER1 (Brian Foster) [1144128]
  - [s390] af_iucv: fix AF_IUCV sendmsg() errno (Hendrik Brueckner) [1211173]
  - [s390] zcrypt: improve device probing for zcrypt adapter cards (Hendrik Brueckner) [1211174]
  - [cpufreq] fix null ptr dereference (Petr Oros) [1186720]
  - [powerpc] eeh: Remove reference to PCI device (Gustavo Duarte) [1189019]
  - [powerpc] pci: Override pcibios_release_device() (Gustavo Duarte) [1189019]
  - [powerpc] eeh: Export functions for hotplug (Gustavo Duarte) [1189019]
  - [pci] Add pcibios_release_device() (Gustavo Duarte) [1189019]
  - [netdrv] mlx4_en: do not ignore autoneg in mlx4_en_set_pauseparam (Amir Vadai) [1121491]
  - [netdrv] mlx4_core: Replace pr_warning with pr_warn (Amir Vadai) [1136753]
  - [netdrv] mlx4_core: Deprecate use_prio module parameter (Amir Vadai) [1136753]
  - [x86] intel_pstate: Add CPUID for BDW-H CPU (Steve Best) [1164883]
  - [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213330] {CVE-2015-3331}


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-557.el6]
changelog:
  - [firmware] cxgb4: update firmware to revision 1.13.32.0 for T4 and T5 (Jarod Wilson) [1189255]
  - [netdrv] cxgb4: Add warning msg when attaching to adapters which have FLASHes smaller than 2Mb (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Increase epd buff size for debug interface (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Configure 0B MRs to match HW implementation (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Fix locking issue in process_mpa_request (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Limit MRs to < 8GB for T4/T5 devices (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Wake up waiters after flushing the qp (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Handle NET_XMIT return codes (Sai Vemuri) [1211742]
  - [netdrv] libcxgbi: fix freeing skb prematurely (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: use set_wr_txq() to set tx queues (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: handle non-pdu-aligned rx data (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: additional types of negative advice (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4i: set the max. pdu length in firmware (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: fix credit check for tx_data_wr (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: fix tx immediate data credit check (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Don't block unload/cxgb4 unload when remote closes TCP connection (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Update FW version string to match FW binary version 1.12.25.0 (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add a check for flashing FW using ethtool (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fill in supported link mode for SFP modules (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix missing initialization of win0_lock (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: FL Starvation Threshold needs to be larger than the SGE's Egress Congestion Threshold (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: For T5 use Packing and Padding Boundaries for SGE DMA transfers (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Move fl_starv_thres into adapter->sge data structure (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Replace repetitive pci device ID's with right ones (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: send abort_rpl correctly (Sai Vemuri) [1211742]
  - [netdrv] libcxgbi: support ipv6 address host_param (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Fix -Wmaybe-uninitialized warning (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Fix -Wunused-function warning (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix build failure in cxgb4 when ipv6 is disabled/not in-built (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Remove duplicated CLIP handling code (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: avoid holding mutex in interrupt context (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Fix ntuple calculation for ipv6 and remove duplicate line (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Take IPv6 into account for best_mtu and set_emss (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Make c4iw_wr_log_size_order static (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix FW flash logic using ethtool (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Add 40G support for cxgb4vf driver (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Wait for device to get ready before reading any register (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Updated the LSO transfer length in CPL_TX_PKT_LSO for T5 (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: clean up a type issue (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: potential shift wrapping bug (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add support for adaptive rx (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Add Devicde ID for two more adapter (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Remove superfluous "idx" parameter of CH_DEVICE() macro (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Use BAR2 Going To Sleep (GTS) for T5 and later (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Don't allocate adapter structure for all PF's (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Add device ID for new adapter and remove for dbg adapter (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix t4_flash_erase_sectors() to throw an error when requested to erase sectors which aren't in the FLASH (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add support to S25FL032P flash (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Allow T4/T5 firmware sizes up to 1MB (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Issue mbox commands on correct mbox (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Avoid dumping Write-only registers in register dump (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Detect and display firmware reported errors (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix T5 adapter accessing T4 adapter registers (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fixed the code to use correct length for part number (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix for handling 1Gb/s SFP+ Transceiver Modules (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Free completed tx skbs promptly (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix race condition in cleanup (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Only call CQ completion handler if it is armed (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: Don't limit TPTE count to 32KB (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: advertise the correct device max attributes (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: Support query_qp() verb (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: log detailed warnings for negative advice (Sai Vemuri) [1211742]
  - [scsi] cxgb4i: Fix ipv6 build failure caught with randconfig (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: remove spurious use of rcu (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Guard ipv6 code with a config check (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Add ipv6 code to driver, call into libcxgbi ipv6 api (Sai Vemuri) [1145278]
  - [scsi] libcxgbi: Add ipv6 api to driver (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Use cxgb4_select_ntuple to correctly calculate ntuple fields (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: add support for T5 adapter (Sai Vemuri) [1145278]
  - [scsi] csgb4i: convert skb->transport_header into skb_transport_header(skb) (Sai Vemuri) [1145278]
  - [netdrv] cxgb4: Export symbols required by cxgb4i for ipv6 support and required defines (Sai Vemuri) [1145278]
  - [netdrv] cxfb4vf: Add config option to enable Chelsio cxgb4vf driver (Sai Vemuri) [1112417]
  - [netdrv] cxfb4vf: Call dev_kfree/consume_skb_any instead of <dev_>kfree_skb (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use pci_enable_msix_range() instead of pci_enable_msix() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Turn off SGE RX/TX Callback Timers and interrupts in PCI shutdown routine (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Adds device ID for few more Chelsio T4 Adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Check if rx checksum offload is enabled, while reading hardware calculated checksum (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Adds device Id for few more Chelsio adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove superfluous call to pci_disable_msix() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: make functions static and remove dead code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: added much cleaner implementation of is_t4() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: use DEFINE_PCI_DEVICE_TABLE (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Staticize local symbols (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add support for Chelsio T5 adapter (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add support for Chelsio's T480-CR and T440-LP-CR adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix VLAN extraction counter increment (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix extraction of cpl_rx_pkt from the response queue descriptor (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use netdev_<level> and pr_<level> (Sai Vemuri) [1112417 1145275]
  - [netdrv] cxgb4vf: remove __dev* attributes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do vlan cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb<3, 4>*: improve Kconfig dependencies (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use defined Mailbox Timeout (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Quiesce Virtual Interfaces on shutdown (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Behave properly when CONFIG_DEBUG_FS isn't defined (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Check driver parameters in the right place (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: recover from failure in cxgb4vf_open (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix mailbox data/control coherency domain race (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Ingress Queue Entry Size needs to be 64 bytes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix setting unicast/multicast addresses (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Advertise NETIF_F_TSO_ECN (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix up "Section Mismatch" compiler warning (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add ethtool statistics for GRO (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: minor comment/symbolic name cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add call to Firmware to reset VF State (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fail open if link_start() fails (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: flesh out PCI Device ID Table (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix some errors in Gather List to skb conversion (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix bug in Generic Receive Offload (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: don't implement trivial (and incorrect) ndo_select_queue() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove call to stop TX queues at load time (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: make single bit signed bitfields unsigned (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use netif_set_real_num_<rx, tx>_queues (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do not use PCI resources before pci_enable_device() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix bug where we were only allocating one queue in MSI mode (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix off-by-one error checking for the end of the mailbox delay array (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix SGE resource resource deallocation bug (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix TX Queue restart (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Implement "Unhandled Interrupts" statistic (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove obsolete DECLARE_PCI_UNMAP_ADDR usage (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use correct shift factor for extracting the SGE DMA Ingress Padding Boundary (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove obsolete comment about the lack of a TX Timer Callback (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Stitch new T4 PCI-E SR-IOV Virtual Function driver into the build (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add new Makefile for T4 PCI-E SR-IOV Virtual Function driver cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add main T4 PCI-E SR-IOV Virtual Function driver for cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add T4 Virtual Function Scatter-Gather Engine DMA code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add core T4 PCI-E SR-IOV Virtual Function hardware definitions and device communication code (Sai Vemuri) [1112417]
  - [infiniband] iw_cxgb4: fix for 64-bit integer division (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: only free allocated fls (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fixed incorrect check for memory operation in t4_memory_rw (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add the MC1 registers to read in the interrupt handler (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Update FW version string to match FW binary version (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix for SR-IOV VF initialization (Sai Vemuri) [1145275]
  - [netdrv] cxgb4i: Move stray CPL definitions to cxgb4 driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Move common defines to cxgb4 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: work request logging feature (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: display TPTE on errors (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: use firmware ord/ird resource limits (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Detect Ing. Padding Boundary at run-time (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Initialize the device status page (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Clean up connection on ARP error (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix skb_leak in reject_cr() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove unnecessary null test before debugfs_remove_recursive (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio T4 Adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Replaced the backdoor mechanism to access the HW memory with PCIe Window method (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use FW interface to get BAR0 value (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fixes cxgb4 probe failure in VM when PF is exposed through PCI Passthrough (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Not need to hold the adap_rcu_lock lock when read adap_rcu_list (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Change default Interrupt Holdoff Packet Count Threshold (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: don't truncate the recv window size (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Choose appropriate hw mtu index and ISS for iWARP connections (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Allocate and use IQs specifically for indirect interrupts (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: add missing padding at end of struct c4iw_alloc_ucontext_resp (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing padding at end of struct c4iw_create_cq_resp (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix vlan support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Check if rx checksum offload is enabled, while reading hardware calculated checksum (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Decode the firmware port and module type a bit more for ethtool (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Decode PCIe Gen3 link speed (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update Kconfig to include Chelsio T5 adapter (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Only allow kernel db ringing for T4 devs (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Force T5 connections to use TAHOE congestion control (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix endpoint mutex deadlocks (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: use the correct max size for firmware flash (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Save the correct mac addr for hw-loopback connections in the L2T (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix over-dereference when terminating (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use uninitialized_var() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing debug stats (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Initialize reserved fields in a FW work request (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use pr_warn_ratelimited (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Max fastreg depth depends on DSGL support (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: SQ flush fix (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: rmb() after reading valid gen bit (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Endpoint timeout fixes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use the BAR2/WC path for kernel QPs and T5 devices (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Disable DSGL use by default (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: rx_data() needs to hold the ep mutex (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Drop RX_DATA packets if the endpoint is gone (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Lock around accept/reject downcalls (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: set error code on kmalloc() failure (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio Adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove addressof casts to same type (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Call dev_kfree/consume_skb_any instead of <dev_>kfree_skb (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update snd_seq when sending MPA messages (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Connect_request_upcall fixes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Ignore read reponse type 1 CQEs (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix possible memory leak in RX_PKT processing (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't leak skb in c4iw_uld_rx_handler() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Save the correct map length for fast_reg_page_lists (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Default peer2peer mode to 1 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Mind the sq_sig_all/sq_sig_type QP attributes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix incorrect BUG_ON conditions (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always release neigh entry (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Allow loopback connections (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Cap CQ size at T4_MAX_IQ_SIZE (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix four byte info leak in c4iw_create_cq() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix underflows in c4iw_create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Doorbell Drop Avoidance Bug Fixes (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Treat CPL_ERR_KEEPALV_NEG_ADVICE as negative advice (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Calculate len properly for LSO path (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Updates for T5 SGE's Egress Congestion Threshold (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Rectify emitting messages about SGE Ingress DMA channels being potentially stuck (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add code to dump SGE registers when hitting idma hangs (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix some small bugs in t4_sge_init_soft() when our Page Size is 64KB (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: use remove handler as shutdown handler (Sai Vemuri) [1145275]
  - [netdrv] cgxb4: Stop using ethtool SPEED_* constants (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add more PCI device ids (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't assume LSO only uses SGL path in t4_eth_xmit() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove unused registers and add missing ones (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Query firmware for T5 ULPTX MEMWRITE DSGL capabilities (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: LE-Workaround is not atomic in firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Allow >10G ports to have multiple queues (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Print adapter VPD Part Number instead of Engineering Change field (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support to recognize 40G links (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use pci_enable_msix_range() instead of pci_enable_msix() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing neigh_release in LE-Workaround path (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix referencing freed adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't retrieve stats during recovery (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix gcc warning on 32-bit arch (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Avoid disabling PCI device for towice (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: silence shift wrapping static checker warning (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Changed FW check version to match FW binary version (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: allow large buffer size to have page size (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use cxgb4_select_ntuple to correctly calculate ntuple fields (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Server filters are supported only for IPv4 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Calculate the filter server TID properly (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: make functions static and remove dead code (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add API to correctly calculate tuple fields (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Account for stid entries properly in case of IPv6 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Assign filter server TIDs properly (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Include TCP as protocol when creating server filters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Reserve stid 0 for T4/T5 adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: calls skb_set_hash (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Make _c4iw_write_mem_dma() static (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix formatting of physical address (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add new scheme to update T4/T5 firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Much cleaner implementation of is_t4()/is_t5() (Sai Vemuri) [1145275]
  - [netdrv] cgxb4: remove duplicate include in cxgb4.h (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove workqueue when driver registration fails (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Issue RI.FINI before closing when entering TERM (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Advertise ~0ULL as max MR size (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always do GTS write if cidx_inc == CIDXINC_MASK (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Set arp error handler for PASS_ACCEPT_RPL messages (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix accounting for unsignaled SQ WRs to deal with wrap (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix QP flush logic (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use correct bit shift macros for vlan filter tuples (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Handle newer firmware changes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add support for active and passive open connection with IPv6 address (Sai Vemuri) [1145275]
  - [infiniband] cma: Add IPv6 support for iWARP (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add CLIP support to store compressed IPv6 address (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add routines to create and remove listening IPv6 servers (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix stack info leak in c4iw_create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Do not set net_device::dev_id to VI index (Sai Vemuri) [1145275]
  - [netdrv] cxgb3: Correct comparisons and calculations using skb->tail and skb-transport_header (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Force uninitialized state if FW_ON_ADAPTER is < FW_VERSION and we're the MASTER_PF (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: fix error recovery when t4_fw_hello returns a positive value (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix pci_device_id structure initialization with correct PF number (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix SQ allocation when on-chip SQ is disabled (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix error return code in create_qp() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix onchip queue support for T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Bump tcam_full stat and WR reply timeout (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Map pbl buffers for dma if using DSGL (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use DSGLs for fastreg and adapter memory writes for T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add module_params to enable DB FC & Coalescing on T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Turn off db coalescing when RDMA QPs are in use (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add Support for Chelsio T5 adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Disable SR-IOV support for PF4-7 for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Update driver version and description (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 PCI ids (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 debugfs support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Enable doorbell drop recovery only for T4 adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 write combining support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Dump T5 registers (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Initialize T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add macros, structures and inline functions for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add register definations for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Allow for backward compatibility with new VPD scheme (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix cast warning (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: "cookie" can stay in host endianness (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Address sparse warnings (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Insert hwtid in pass_accept_req instead in pass_establish (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't wakeup threads for MPAv2 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't reconnect on abort for mpa_rev 1 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix endpoint timeout race condition (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Only log rx_data warnings if cpl status is non-zero (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always log async errors (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Keep QP referenced until TID released (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Display streaming mode error only if detected in RTS (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Abort connections when moving to ERROR state (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Abort connections that receive unexpected streaming mode data (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix incorrect PFVF CMASK (Sai Vemuri) [1145275]
  - [netdrv] cxgb3/cxgb4: Use netdev_<level> and pr_<level> (Sai Vemuri) [1145275 1145278]
  - [infiniband] cxgb4: Fix bug for active and passive LE hash collision path (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix LE hash collision bug for passive open connection (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix LE hash collision bug for active open connection (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add LE hash collision bug fix path in LLD driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T4 filter support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove __dev* attributes (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Chelsio FCoE offload driver submission (common header updates) (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: use WARN (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix initialization of SGE_CONTROL register (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix unable to get UP event from the LLD (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't free chunk that we have failed to allocate (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove unnecessary #ifdef condition (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Address various sparse warnings (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: allocate enough data in t4_memory_rw() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix build error due to missing linux/vmalloc.h include (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Dynamically allocate memory in t4_memory_rw() and get_vpd_params() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix error handling in create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't attempt to upgrade T4 firmware when cxgb4 will end up as a slave (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Inform caller if driver didn't upgrade firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support for T4 hardwired driver configuration settings (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support for T4 configuration file (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Code cleanup to enable T4 Configuration File support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add functions to read memory via PCIE memory window (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix incorrect values for MEMWIN*_APERTURE and MEMWIN*_BASE (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Move dereference below NULL test (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove duplicate register definitions (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update RDMA/cxgb4 due to macro definition removal in cxgb4 driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: set maximal number of default RSS queues (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Include vmalloc.h for vmalloc and vfree (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use vmalloc() for debugfs QP dump (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add debugfs RDMA memory stats (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Convert import_ep() over to dst_neigh_lookup() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Debugfs dump_qp() updates (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use ULP_MODE_TCPDDP (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Turn on delayed ACK (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use netif_set_real_num_<rx, tx>_queues (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: set skb->rxhash (Sai Vemuri) [1145275]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-558.el6]
changelog:
  - [x86] mm: Linux stack ASLR implementation (Jacob Tanenbaum) [1195683] {CVE-2015-1593}
  - [scsi] megaraid_sas: do not process IOCTLs and SCSI commands during driver removal - a fix (Tomas Henzl) [1212364]
  - [fs] xfs: DIO write completion size updates race (Brian Foster) [1198440]
  - [x86] KVM: Fix lost interrupt on irr_pending race (Paolo Bonzini) [1213741]
  - [sound] ALSA: seq-oss: Initialize MIDI clients asynchronously (Jaroslav Kysela) [1212596]
  - [net] ipv6: Don't reduce hop limit for an interface (Denys Vlasenko) [1208493] {CVE-2015-2922}
  - [net] vlan: more careful checksum features handling (Vlad Yasevich) [1212384]
  - [kernel] tracing: Export tracing clock functions (Jerry Snitselaar) [1212502]
  - [input] wacom - use new input-mt routines (Aristeu Rozanski) [1111332 1111333]
  - [input] wacom: enable touch on Intuos 5 (Aristeu Rozanski) [1111332 1111333]
  - [netdrv] bnx2x: Fix kdump when iommu=on (Michal Schmidt) [1211695]
  - [netdrv] bnx2x: Fix busy_poll vs netpoll (Michal Schmidt) [1212365]
  - [netdrv] bnx2x: Fix statistics locking scheme (Michal Schmidt) [1211695]
  - [netdrv] bnx2x: Fix kdump on 4-port device (Michal Schmidt) [1211695]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-559.el6]
changelog:
  - [x86] perf: Add cpu_<prepare|starting|dying> for core_pmu (Jiri Olsa) [1188336]
  - [block] NVMe: Initialize device list head before starting (David Milburn) [1158606]
  - [block] NVMe: Fix potential corruption on sync commands (David Milburn) [1158606]
  - [block] NVMe: Fix potential corruption during shutdown (David Milburn) [1158606]
  - [block] NVMe: Asynchronous controller probe (David Milburn) [1158606]
  - [block] NVMe: Register management handle under nvme class (David Milburn) [1158606]
  - [block] NVMe: Update module version (David Milburn) [1158606]
  - [block] NVMe: Handling devices incapable of I/O (David Milburn) [1158606]
  - [x86] Mark Intel Broadwell-EP processor as supported (Steve Best) [1132146]
  - [fs] nfs: Don't attempt to decode missing directory entries (Benjamin Coddington) [1182830]
  - [acpi] Skip creation of /proc/acpi/power_resource/ entries for duplicate power resource names (Lenny Szubowicz) [1206643]
  - [powerpc] perf: Cap 64bit userspace backtraces to PERF_MAX_STACK_DEPTH (Steve Best) [1213966]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-560.el6]
changelog:
  - [powercap] RAPL: Add support for Intel Skylake processors (Steve Best) [1187314]
  - [powercap] rapl: add ID for Broadwell server (Steve Best) [1189925]
  - [s390] dasd: Fix unresumed device after suspend/resume having no paths (Hendrik Brueckner) [1213800]
  - [s390] dasd: fix inability to set a DASD device offline (Hendrik Brueckner) [1213799]
  - [s390] dasd: fix unresumed device after suspend/resume (Hendrik Brueckner) [1213801]
  - [netdrv] netvsc: don't flush peers notifying work during setting mtu (Jason Wang) [1203623]
  - [input] wacom: clear ABS_MISC on the touch device (Aristeu Rozanski) [1111332 1111333]
  - [x86] asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Mateusz Guzik) [1209233] {CVE-2015-2830}
  - [fs] gfs2: try harder to obtain journal lock during recovery (Abhijith Das) [1110846]
  - [thermal] intel_powerclamp: add id for broadwell server (Steve Best) [1189954]
  - [net] Fix checksum features handling in netif_skb_features() (Vlad Yasevich) [1220247]
  - [scsi] megaraid_sas : Modify return value of megasas_issue_blocked_cmd() and wait_and_poll() to consider command status returned by firmware (Tomas Henzl) [1219105]
  - [netdrv] Revert "netxen: remove init of dev->perm_addr in drivers" (Tony Camuso) [1213689]
  - [ppc] Build RPA PCI Hotplug driver as module instead of directly into the kernel (Gustavo Duarte) [1095456]
  - [drm] radeon: fix wait in radeon_mn_invalidate_range_start (Rob Clark) [1218794]
  - [drm] i915: Fix and clean BDW PCH identification (Rob Clark) [1218794]
  - [drm] i915/vlv: save/restore the power context base reg (Rob Clark) [1218794]
  - [drm] radeon: Do not directly dereference pointers to BIOS area. (Rob Clark) [1218794]
  - [kernel] makefile: update drm version (Rob Clark) [1218794]
  - [drm] i915/vlv: remove wait for previous GFX clk disable request (Rob Clark) [1218794]
  - [drm] radeon: add extra check in radeon_ttm_tt_unpin_userptr (Rob Clark) [1218794]
  - [drm] i915: Reject the colorkey ioctls for primary and cursor planes (Rob Clark) [1218794]
  - [drm] radeon/dpm: fix 120hz handling harder (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in cik_set_irq (Rob Clark) [1218794]
  - [drm] i915/vlv: remove wait for previous GFX clk disable request (Rob Clark) [1218794]
  - [drm] i915: Align initial plane backing objects correctly (Rob Clark) [1218794]
  - [drm] radeon: drop ttm two ended allocation (Rob Clark) [1218794]
  - [drm] edid: set ELD for firmware and debugfs override EDIDs (Rob Clark) [1218794]
  - [drm] radeon: drop setting UPLL to sleep mode (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in si_set_irq (Rob Clark) [1218794]
  - [drm] radeon: fix interlaced modes on DCE8 (Rob Clark) [1218794]
  - [drm] Fixup racy refcounting in plane_force_disable (Rob Clark) [1218794]
  - [drm] Don't assign fbs for universal cursor support to files (Rob Clark) [1218794]
  - [drm] radeon: fix wait to actually occur after the signaling callback (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in rs600_set_irq (Rob Clark) [1218794]
  - [drm] i915: Dell Chromebook 11 has PWM backlight (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in evergreen_set_irq (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in r600_set_irq (Rob Clark) [1218794]
  - [drm] i915: avoid processing spurious/shared interrupts in low-power states (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in r100_set_irq (Rob Clark) [1218794]
  - [drm] i915: Prevent use-after-free in invalidate_range_start callback (Rob Clark) [1218794]
  - [drm] i915: Check obj->vma_list under the struct_mutex (Rob Clark) [1218794]
  - [drm] radeon: fix DRM_IOCTL_RADEON_CS oops (Rob Clark) [1218794]
  - [drm] i915/bdw: PCI IDs ending in 0xb are ULT. (Rob Clark) [1218794]
  - [drm] i915: Correct the IOSF Dev_FN field for IOSF transfers (Rob Clark) [1218794]
  - [drm] radeon: fix 1 RB harvest config setup for TN/RL (Rob Clark) [1218794]
  - [drm] i915: Insert a command barrier on BLT/BSD cache flushes (Rob Clark) [1218794]
  - [drm] radeon: use drm_mode_vrefresh() rather than mode->vrefresh (Rob Clark) [1218794]
  - [drm] i915: Drop vblank wait from intel_dp_link_down (Rob Clark) [1218794]
  - [drm] radeon: enable native backlight control on old macs (Rob Clark) [1218794]
  - [drm] radeon: fix voltage setup on hawaii (Rob Clark) [1218794]
  - [drm] radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary (Rob Clark) [1218794]
  - [drm] radeon: workaround for CP HW bug on CIK (Rob Clark) [1218794]
  - [drm] radeon: only enable kv/kb dpm interrupts once v3 (Rob Clark) [1218794]
  - [drm] radeon: Don't try to enable write-combining without PAT (Rob Clark) [1218794]
  - [netdrv] i40e/i40evf: implement KR2 support (Stefan Assmann) [1214872]
  - [kernel] ethtool, net/mlx4_en: Add 100M, 20G, 56G speeds ethtool reporting support (Stefan Assmann) [1214872]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-561.el6]
changelog:
  - [net] Reinstate WIRELESS_EXT_SYSFS in net/wireless/Kconfig (John Linville) [1219434]
  - [netdrv] cxgb4: Firmware macro changes for fw verison 1.13.32.0 (Sai Vemuri) [1219233]
  - [netdrv] cxgb4: Move firmware version MACRO to t4fw_version.h (Sai Vemuri) [1219233]
  - [netdrv] be2net: fix SR-IOV resources optimization (Ivan Vecera) [1211535]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-563.el6]
changelog:
  - [net] tcp: relax tcp_paws_check() (Thadeu Lima de Souza Cascardo) [1209147]
  - [x86] Mark Intel Broadwell-H processor as supported (Steve Best) [1132147]
  - [x86] kernel: ignore NMI IOCK when in kdump kernel (Jerry Snitselaar) [1196263]
  - [kernel] virtio: don't expose u16 in userspace api (Michael S. Tsirkin) [1154634]
  - [x86] apic/uv: Update the UV APIC HUB check (George Beshers) [1219207]
  - [x86] apic/uv: Update the UV APIC driver check (George Beshers) [1219207]
  - [x86] apic/uv: Update the APIC UV OEM check (George Beshers) [1219207]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-564.el6]
changelog:
  - [tools] perf trace: Handle legacy syscalls tracepoints (Jiri Olsa) [1212402]
  - [scsi] qla2xxx: fix busy wait regression (Chad Dupuis) [1207270]
  - [fs] eCryptfs: Remove buggy and unnecessary write in file name decode routine (Mateusz Guzik) [1202156] {CVE-2014-9683}
  - [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218103] {CVE-2015-3636}
  - [s390] dasd: disable CUIR support for z/VM (Hendrik Brueckner) [1223721]
  - [ata] ahci: avoton port-disable reset-quirk (David Milburn) [1223187]
  - [inifinband] iw_cxgb4: don't call neigh_release (Sai Vemuri) [1215835]
  - [fs] sunrpc: Set alloc_slot for backchannel tcp ops (Sachin Prabhu) [1208339]
  - [fs] epoll: convert max_user_watches to long (George Beshers) [741705]
  - [firmware] cxgb4: add missing Makefile invocation for 1.13.32.0 images (Jarod Wilson) [1189255]
  - [fs] proc: make proc_fd_permission() thread-friendly (Carlos Maiolino) [1201593]
  - [acpi] scan: reduce log level of "ACPI: \_PR_.CPU4: failed to get CPU APIC ID" (Charles Rose) [1222466]
  - [netdrv] mlx5: wrong page mask if CONFIG_ARCH_DMA_ADDR_T_64BIT enabled for 32Bit architectures (Doug Ledford) [1141604]
  - [netdrv] vmxnet3: Receive vlan stripped frames in hwaccel path (Neil Horman) [1218404]
  - [fs] NFSv4.1: Deal effectively with interrupted RPC calls (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Try to deal with NFS4ERR_SEQ_MISORDERED (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Handle NFS4ERR_BADSLOT errors correctly (Steve Dickson) [1200956]
  - [kernel] cgroup: fix cgroup_rmdir vs close<eventfd> race (Johannes Weiner) [1167772]
  - [thermal] intel_powerclamp: add id for Avoton SoC (Steve Best) [1225544]
  - [kernel] tracing: Buffer the output of seq_file in case of filled buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Consolidate protection of reader access to the ring buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Fix ring_buffer_read_page reading out of page boundary (Jiri Olsa) [1123102]
  - [kernel] ring-buffer: Check for end of page in iterator (Jiri Olsa) [1123102]
  - [netdrv] be2net: use PCI MMIO read instead of config read for errors (Ivan Vecera) [1216088]
  - [thermal] powerclamp: add ids for future xeon cpus (Steve Best) [1183181]
  - [powercap] RAPL: add IDs for future Xeon CPUs (Steve Best) [1183177]
  - [net] flow_dissector: fail on evil iph->ihl (Jason Wang) [1179559]
  - [netdrv] hyperv: Add IPv6 into the hash computation for vRSS (Jason Wang) [1179559]
  - [netdrv] hyperv: Add handling of IP header with option field in netvsc_set_hash (Jason Wang) [1179559]
  - [net] bridge: check return value of ipv6_dev_get_saddr() (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Fix possibly wrong MLD queries' ethernet source address (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Use IPv6 link-local address for multicast listener queries (Thadeu Lima de Souza Cascardo) [765987]
  - [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1200541 1212801]
  - [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1200541 1212801]
  - [crypto] drbg - fix maximum value checks on 32 bit systems (Herbert Xu) [1219907]
  - [crypto] drbg - remove configuration of fixed values (Herbert Xu) [1219907]
  - [netdrv] iwlwifi: mvm: protect rate scaling against non-mvm IBSS stations (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: send AP probe as unicast again (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: count interfaces correctly for combination checks (Stanislaw Gruszka) [1206103]
  - [netdrv] wl18xx: show rx_frames_per_rates as an array as it really is (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: fix RX A-MPDU session reorder timer deletion (Stanislaw Gruszka) [1206103]
  - [netdrv] ath9k: fix tracking of enabled AP beacons (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: dvm: run INIT firmware again upon .start() (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: rs: fix BT Coex check to look at the correct ant (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: Fix ROC removal (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: BT Coex - fix a NULL pointer exception (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: fix max_ht_ampdu_exponent for older devices (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: drop unencrypted frames in mesh fwding (Stanislaw Gruszka) [1206103]
  - [netdrv] b43: fix support for 5 GHz only BCM43228 model (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: disable u-APSD queues by default (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: notify channel switch at the end of ieee80211_chswitch_post_beacon() (Stanislaw Gruszka) [1206103]
  - [netdrv] nl80211: ignore HT/VHT capabilities without QoS/WMM (Stanislaw Gruszka) [1206103]
  - [netdrv] ath5k: fix spontaneus AR5312 freezes (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: Send EAPOL frames at lowest rate (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: always use mac color zero (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: fix failure path when power_update fails in add_interface (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: validate tid and sta_id in ba_notif (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: pcie: disable the SCD_BASE_ADDR when we resume from WoWLAN (Stanislaw Gruszka) [1206103]
  - [x86] perf: Don't use -ENOSPC for out of PMU resources (Jiri Olsa) [1215827]
  - [x86] perf: Blacklist all MEM_*_RETIRED events for Ivy Bridge (Jiri Olsa) [1215827]
  - [x86] perf: Add Intel IvyBridge event scheduling constraints (Jiri Olsa) [1215827]
  - [firmware] iwlwifi: update -12.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]
  - [firmware] iwlwifi: update -10.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-565.el6]
changelog:
  - [x86] perf/intel: Add INST_RETIRED.ALL workarounds (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add Broadwell core support (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add new cache events table for Haswell (Jiri Olsa) [1189949]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-566.el6]
changelog:
  - [netdrv] iwlwifi: use custom workqueue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove not used *bt-coex* files (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: avoid use-after-free on iwl_mvm_d0i3_enable_tx() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean net-detect info if device was reset during suspend (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the UCODE_DOWN reference when resuming (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - duplicate the command if sent ASYNC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: force mac from otp in case nvm mac is reserved (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Free fw_status after use to avoid memory leak (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't disable the busmaster DMA clock for family 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 7000: modify the firmware name for 3165 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: forbid MIMO on devices that don't support it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: force quota update update after FW restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix typo in CONFIG option (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't power off the device between INIT and OPER firmwares (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prevent using unmapped memory in fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Avoid signal based decisions if ave beacon RSSI is 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix scan iteration complete notification handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't stop the FW monitor too early (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix Tx Power firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: capture connection loss as part of MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for time events (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: do string formatting in debug triggers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix spelling errors (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't return uninitialized value in get_survey() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused arguments (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix wrongfully flushing frames in the roc/off channel queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs entry with the number of net-detect scans (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor rs_update_rate_tbl (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: check the size of the trigger struct from the firmware file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon MLME failures (Stanislaw Gruszka) [1134606]
  - [net] mac80211: Fix mac80211.h docbook comments (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about deauth (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about association status (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about authentication status (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: convert rssi_callback() to event_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix comment indentation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Clean up UMAC scan UIDs in the reset and drv_stop flows (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 8000: change PNVM in case it doesn't match to the HW step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix debug print in the RSA ownership workaround (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to configure the timeout for the Tx queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: drop support for early versions of 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use debugfs_create_bool() for enable_scan_iteration_notif (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: initialize trans_pcie->ref_count on configure() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: inform mac80211 about umac scans that was aborted by restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove d0i3 ref correctly during AP start (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: Fix memory leak in iwl_req_fw_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove WARN_ON for invalid BA notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take IWL_MVM_REF_UCODE_DOWN before restarting hw (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't wait for firmware verification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 3165 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove time-event start/end failure warning (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add iccm data to 8000 b-step data dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add rx packet sequence number to dbg print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: properly flush the queues for buffering transport (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: assign new TLV bit for multi-source LAR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: continue (with error) CSA on GO time event failure (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: simplify iwl_mvm_get_wakeup_status() return (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't double unlock the mutex in __iwl_mvm_resume() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clarify time event end handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Always enable the smart FIFO (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: update copyright to include 2015 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add more new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - update the new API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix force NMI for 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: freeze the non-shared queues when a station goes to sleep (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: allow the op_mode to freeze the stuck queue timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: update Tx statistics when using fixed rate (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't init MCC during CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove warning on station exhaustion (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: trans: Take ownership on secure machine before FW load (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: improve ss_params debug print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't allow the FW to return invalid ch indices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reflect TDLS pm state in mvmvif->pm_enabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix identation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unneeded include iwl-fw-error-dump.h (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use correct NVM offset for LAR enable for new NVMs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix smatch warning: warn: inconsistent indenting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: include more registers in the prph dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: speed up the Tx DMA stop flow (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 B2/C steps (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: always update the quota after association (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - disable RRC by default (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_SF_NO_DUMMY_NOTIF (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_DISABLE_STA_TX (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: bump API to 13 for devices that use iwlmvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set LAR MCC on D3/D0 transitions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LAR updates from BIOS (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the MAC address from HW registers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow disabling LAR via module param (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support new PHY_SKU nvm section for family 8000 B0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: disable 11ac if 11n is disabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: iwlmvm: LAR: disable LAR support due to NVM vs TLV conflict (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: change last 5ghz channel to 165 & add support for 8000 family (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use IWL_DEFAULT_MAX_TX_POWER for max_eirp (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: init correct nvm channel list for 8000 devices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: LAR: Add chub mcc change notify command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't declare support for 5ghz if not supported (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: ignore IBSS flag as regulatory NO-IR indication (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider LAR support during NVM parse (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: create regdomain from mcc_update_cmd response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: init country code on init/recovery (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add MCC update FW API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disconnect if CSA time event fails scheduling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: drop VO packets when mac80211 tells us to (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix compilation with IWLWIFI_DEBUGFS not set (Stanislaw Gruszka) [1134606]
  - [netdrv] wireless: Use eth_<foo>_addr instead of memset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't override passive dwell in case of fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon low RSSI (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: restart firmware recording when no configuration is set (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon command response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon channel switch (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon missed beacons (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add the cause of the firmware dump in the dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add framework for triggers for fw dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use only 40 ms for fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to force the Rx chains from debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new TLV capability flag for BT PLCR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't iterate interfaces to disconnect in net-detect (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: new Alive / error table API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support beacon statistics for BSS client (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add nl80211 beacon-only statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't write to DBGC_OUT_CTRL when stopping the recording (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove deprecated scan API code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: deprecate -9.ucode for 3160 / 7260 / 7265 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support radio statistics as global survey (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add statistics API version 10 (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add scan time to survey data (Stanislaw Gruszka) [1134606]
  - [netdrv] cfg80211: remove "channel" from survey names (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: apply destination before releasing reset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused function in BT coex (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix BT coex shared antenna activity check (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: print single stream params via debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: avoid ss_force from being reset after tx idle (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: increase the number of PAPD channel groups to 9 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider TDLS queues as used during drain (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: disable MIMO for low latency P2P (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: adapt rate matching to new STBC/BFER (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disable beamformer unless FW supports it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't try to stop scans that are not running anymore (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: better match tx response rate to the LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call ieee80211_scan_completed() even if scan abort fails (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reduce quota threshold (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't send a command the firmware doesn't know (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix building channels in scan_config_cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Enable EBS also in single scan on umac interface (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix a few EBS error handling bugs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow to define the stuck queue timer per queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: enable watchdog on Tx queues for mvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore stale TDLS ch-switch responses (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: improve TDLS ch-sw state machine (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prepare the enablement of 31 TFD queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: enable forcing single stream Tx decision (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove space padding after sysassert description (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add beamformer support (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't dump useless data when a TFD queue hangs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't reprobe if we fail during reconfig and fw_restart is false (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: check IWL_UCODE_TLV_API_SCD_CFG in API and not in capa (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix rx chains configuration in phy ctxt cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: support secured boot flow for family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use a new API for enabling STBC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor ht/vht init (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: remove stats argument from functions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: really disable TDLS queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - set all the co-running values to 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Do not consider invalid HW queues in queue mask (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 C step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: init ref_lock (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: document switch case fall-through in iwl_mvm_send_sta_key (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: use STBC regardless of power save mode (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: mvm: drop non VO frames when flushing" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for new LTR command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - fine tune the MPLUT register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move U-APSD decision to authentication (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: move U-APSD enablement to vif flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore temperature updates in the RX statistics notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: cleanup unuseful and overflowing traces (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: generate statistics debugfs code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move statistics API to new header file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: sync statistics firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: correctly set the NMI register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add rxf and txf to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for dumping a secondary SRAM (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs file for misbehaving U-APSD AP (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: let the firmware configure the scheduler (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove unused TLV capability flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add print of he nvm version (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set max_out_time equal to frag_passive_dwell in fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: allow to disable MIMO for P2P only (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to collect debug data from non-sleepable context (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when stopping fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Add debugfs entry to enable scan offload notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new config and PCI IDs for 4165 series (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when collecting fw dbg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: repeat initial legacy rates in LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't indicate no BA if STA was in powersave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: organize and cleanup consts (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Alter passive scan fragmentation parameters in case of multi-MAC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call to pcie_apply_destination also on family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ask the fw to wakeup (from d0i3) on sysassert (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: tlv: add support for IWL_UCODE_TLV_SDIO_ADMA_ADDR TLV (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_sta_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_vif_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove useless extern definition of iwl4265_2ac_sdio_cfg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean refs before stop_device() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: main: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: tt: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support 2 different channels (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: wait for d0i3 exit on hw restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider d0i3_disable in iwl_mvm_is_d0i3_supported() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: support multiple d0i3 modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support IWL_D0I3_MODE_ON_SUSPEND d0i3 mode (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow both d0i3 and d3 wowlan configuration modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add basic reference accounting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: convert the SRAM dump to the generic memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: change SMEM dump to general purpose memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add smem content to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support additional nvm_file in family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix max rate allowed if no rate is allowed (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clear tt values when entering CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Set the HW step in the core dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow RSSI compensation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs to trigger fw debug logs collection (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: let the Manageability Engine know when we leave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LnP 1x1 antenna configuration (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: use correct fw file in 8000 b-step" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add fw runtime stack to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove MODULE_VERSION (Stanislaw Gruszka) [1134606]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-567.el6]
changelog:
  - [serial] add ability to set IRQ via module parameter (Prarit Bhargava) [1210848]
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1185166] {CVE-2015-1805}
  - [netdrv] macvlan: add VLAN filters to lowerdev (Ivan Vecera) [1213846]
  - [x86] Mark Intel Broadwell-DE processor as unsupported (Steve Best) [1226904]
  - [net] ipv6: reallocate addrconf router for ipv6 address when lo device up (Hannes Frederic Sowa) [1223610]
  - [mm] memory-failure: move refcount only in !MF_COUNT_INCREASED (Rafael Aquini) [1222832]
  - [mm] memory-failure: shift page lock from head page to tail page after thp split (Rafael Aquini) [1222832]
  - [mm] memory-failure: transfer page count from head page to tail page after split thp (Rafael Aquini) [1222832]
  - [scsi] lpfc: Correct loss of target discovery after cable swap (Rob Evers) [1226779]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-568.el6]
changelog:
  - [base] reduce boot delay on large memory systems (Seth Jennings) [1221389]
  - [md] dm: run queue on re-queue (Mike Snitzer) [1225158]
  - [fs] take i_mutex during prepare_binprm for set<u,g>id executables (Mateusz Guzik) [1216269] {CVE-2015-3339}
  - [netdrv] i40e: Make sure to be in VEB mode if SRIOV is enabled at probe (Stefan Assmann) [1206000]
  - [netdrv] i40e: start up in VEPA mode by default (Stefan Assmann) [1206000]
  - [netdrv] e1000e: Bump the version to 3.2.5 (John Greene) [1211531]
  - [netdrv] e1000e: fix unit hang during loopback test (John Greene) [1211531]
  - [netdrv] e1000e: fix systim issues (John Greene) [1211531]
  - [netdrv] e1000e: fix legacy interrupt handling in i219 (John Greene) [1211531]
  - [netdrv] e1000e: fix flush_desc_ring implementation (John Greene) [1211531]
  - [netdrv] e1000e: fix logical error in flush_desc_rings (John Greene) [1211531]
  - [netdrv] e1000e: remove call to do_div and sign mismatch warning (John Greene) [1211531]
  - [netdrv] e1000e: i219 execute unit hang fix on every reset or power state transition (John Greene) [1211531]
  - [netdrv] e1000e: i219 fix unit hang on reset and runtime D3 (John Greene) [1211531]
  - [netdrv] e1000e: fix call to do_div to use u64 arg (John Greene) [1211531]
  - [netdrv] e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size (John Greene) [1211531]
  - [netdrv] e1000e: Correctly include VLAN_HLEN when changing interface MTU (John Greene) [1211531]
  - [netdrv] e1000e: call netif_carrier_off early on down (John Greene) [1211531]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-569.el6]
changelog:
  - [gpu] drm/radeon: fix freeze for laptop with Turks/Thames GPU (Jerome Glisse) [1213297]
  - [md] dm: fix casting bug in dm_merge_bvec (Mike Snitzer) [1226453]
  - [fs] nfs: Send the size attribute on open(O_TRUNC) (Benjamin Coddington) [1208065]
  - [net] inet: fix processing of ICMP frag_needed messages (Sabrina Dubroca) [1210321]
  - [net] tcp: double default TSQ output bytes limit (Hannes Frederic Sowa) [1140590]
  - [hv] hv_balloon: correctly handle num_pages>INT_MAX case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: correctly handle val.freeram<num_pages case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: survive ballooning request with num_pages=0 (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: eliminate jumps in piecewiese linear floor function (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: do not online pages in offline blocks (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: don't lose memory when onlining order is not natural (Vitaly Kuznetsov) [1006234]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-570.el6]
changelog:
  - [block] fix ext_dev_lock lockdep report (Jeff Moyer) [1230927]
  - [md] Revert "md dm: run queue on re-queue" (Mike Snitzer) [1232007]
  - [firmware] another cxgb4 firmware load fixup (Sai Vemuri) [1189255]
  - [char] tty: Don't protect atomic operation with mutex (Aristeu Rozanski) [1184182]
  - [edac] i5100 add 6 ranks per channel (Aristeu Rozanski) [1171333]
  - [edac] i5100 clean controller to channel terms (Aristeu Rozanski) [1171333]
  - [crypto] rng - Remove krng (Herbert Xu) [1226418]
  - [crypto] drbg - Add stdrng alias and increase priority (Herbert Xu) [1226418]
  - [crypto] seqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] eseqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] chainiv - Move IV seeding into init function (Herbert Xu) [1226418]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-571.el6]
changelog:
  - [netdrv] bnx2x: Move statistics implementation into semaphores (Michal Schmidt) [1231348]
  - [scsi] storvsc: Set the SRB flags correctly when no data transfer is needed (Vitaly Kuznetsov) [1221404]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-573.el6]
changelog:
  - [security] selinux: don't waste ebitmap space when importing NetLabel categories (Paul Moore) [1130197]
  - [x86] Revert "Add driver auto probing for x86 features v4" (Prarit Bhargava) [1231280]
  - [net] bridge: netfilter: don't call iptables on vlan packets if sysctl is off (Florian Westphal) [1236551]
  - [net] ebtables: Allow filtering of hardware accelerated vlan frames (Florian Westphal) [1236551]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.2.1.el6]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
  - [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
  - [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
  - [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
  - [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
  - [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
  - [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.3.1.el6]
changelog:
  - [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
  - [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.4.1.el6]
changelog:
  - [firmware] add iwlwifi-8000C-13 ucode (Stanislaw Gruszka) [1242969 1134603]
  - [net] Always propagate flag changes to interfaces (Jarod Wilson) [1253734 1222823]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1253729 1238308]
  - [scsi] zfcp: Use correct length for FCP_RSP_INFO (Hendrik Brueckner) [1253728 1223105]
  - [tools] perf: avoid possible race condition in copyfile (Milos Vyletel) [1253733 1229673]
  - [tools] perf: Introduce copyfile_offset function (Milos Vyletel) [1253733 1229673]
  - [tools] perfs: Add rm_rf utility function (Milos Vyletel) [1253733 1229673]
  - [net] vlan: restore VLAN_GROUP_ARRAY_LEN definition (Michal Schmidt) [1246102 1242145]
  - [md] dm btree remove: fix bug in redistribute3 (Mike Snitzer) [1246105 1242023]
  - [netdrv] vmxnet3: prevent receive getting out of sequence on napi poll (Neil Horman) [1246092 1236564]
  - [kernel] sched, cgroup: replace signal_struct->group_rwsem with a global percpu_rwsem (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: add lockdep annotations (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: kill ->writer_mutex, add ->write_ctr (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: reimplement to not block the readers unnecessarily (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rwsem: use synchronize_sched_expedited (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use rcu_read_lock_sched (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use light/heavy barriers (Oleg Nesterov) [1246081 1198732]
  - [kernel] blockdev: turn a rw semaphore into a percpu rw semaphore (Oleg Nesterov) [1246081 1198732]
  - [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]
  - [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.7.1.el6]
changelog:
  - Revert: [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]
  - Revert: [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.8.1.el6]
changelog:
  - [netdrv] bonding: fix LACP PDU not sent on slave port sometimes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix incorrect lacp mux state when agg not active (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix bond_open don't always set slave active flag (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: update bond carrier state when min_links option changes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: change AD_LINK_SPEED_BITMASK to enum to suport more speed (Jarod Wilson) [1266366 1258446]
  - [virt] kvm: ioapic: conditionally delay irq delivery duringeoi broadcast (Fam Zheng) [1266369 1199155]
  - [kernel] ipc, sem: fix use after free on IPC_RMID after a task using same semaphore set exits (Herton R. Krzesinski) [1266373 1233300]
  - [fs] xfs: extent size hints can round up extents past MAXEXTLEN (Leonardo Menezes Vaz) [1266372 1211110]
  - [fs] Remove BUG_ON in nfs_clear_inode (Frank Sorenson) [1266364 1224343]
  - [net] use address assign type "SET" (Jarod Wilson) [1266374 1225359]
  - [net] ethtool: set addr_assign_type to NET_ADDR_SET when addr is passed on create (Jarod Wilson) [1266374 1225359]
  - [net] rtnl: use dev_set_mac_address() instead of plain ndo_ (Jarod Wilson) [1266374 1225359]
  - [net] ipv4: inet_fragmentation: compute work more accurate (Hannes Frederic Sowa) [1246088 1235465]
  - [netdrv] bna: fix interrupts storm caused by erroneous packets (Ivan Vecera) [1260535 1241287]
  - [edac] pci: avoid negative reference count of edac_class (Herton R. Krzesinski) [1255492 1227845]
  - [kernel] percpu_counter: batch size aware __percpu_counter_compare (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make percpu_counters_lock irq-safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix bad percpu counter state during suspend (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: unbreak __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make APIs irq safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: __this_cpu_write doesn't need to be protected by spinlock (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: enclose hotplug only variables in hotplug ifdef (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpucounter: Optimize __percpu_counter_add a bit through the use of this_cpu options (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: use this_cpu_ptr instead of per_cpu_ptr (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu: fix list_head init bug in __percpu_counter_init (Hannes Frederic Sowa) [1246088 1235465]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.9.1.el6]
changelog:
  - [mm] hugetlb: fix race in region tracking (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: improve, cleanup resv_map parameters (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: unify region structure handling (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: change variable name reservations to resv (Herton R. Krzesinski) [1274599 1260755]
  - [fs] dcache: Log ELOOP rather than creating a loop (Benjamin Coddington) [1272858 1254020]
  - [fs] dcache: Fix loop checks in d_materialise_unique (Benjamin Coddington) [1272858 1254020]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.10.1.el6]
changelog:
  - [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
  - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
  - [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
  - [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
  - [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.11.1.el6]
changelog:
  - [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.13.1.el6]
changelog:
  - [security] Don't leak a key reference if request_key tries to use a revoked keyring (David Howells) [1288095 1188442]
  - [fs] gfs2: Protect freeing directory hash table with i_lock spin_lock (Robert S Peterson) [1288093 1250663]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.14.1.el6]
changelog:
  - [scsi] bfa: Fix incorrect de-reference of pointer (Chad Dupuis) [1292370 1258533]
  - [netdrv] genetlink-compat: register multicast groups (Stanislaw Gruszka) [1291978 1259870]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.16.1.el6]
changelog:
  - [net] bonding: propagate LRO disable to slave devices (Jarod Wilson) [1287993 1259008]
  - [net] Move bonding headers under include/net (Jarod Wilson) [1287993 1259008]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.17.1.el6]
changelog:
  - [kernel] hrtimer: add force_hrtimer_reprogram kernel parameter (Prarit Bhargava) [1292082 1285142]
  - [mm] fix anon_vma->degree underflow in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] fix corner case in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] prevent endless growth of anon_vma hierarchy (Jerome Marchand) [1285693 1151823]
  - [mm] avoid anon_vma_chain allocation under anon_vma lock (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in unlink_anon_vmas() (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in anon_vma_clone() (Jerome Marchand) [1285693 1151823]
  - [scsi] only re-lock door after EH on devices that were reset (Ewan Milne) [1282464 995234]
  - [fs] fs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1282621 1241030]
  - [fs] revert 'vfs: Unhash and evict unused children dentries after rmdir' (Carlos Maiolino) [1282621 1241030]
  - [netdrv] macvtap: fix network header pointer for VLAN tagged pkts (Ivan Vecera) [1280206 1213846]
  - [net] Fix vlan_get_protocol for stacked vlan (Ivan Vecera) [1280206 1213846]
  - [scsi] ipr: Fix incorrect trace indexing (Gustavo Duarte) [1280211 1209543]
  - [scsi] ipr: Fix invalid array indexing for HRRQ (Gustavo Duarte) [1280211 1209543]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-573.18.1.el6]
changelog:
  - [netdrv] bonding: "primary_reselect" with "failure" is not working properly (Jarod Wilson) [1295924 1290672]
  - [net] netpoll: Close race condition between poll_one_napi and napi_disable (Neil Horman) [1295370 1252212]


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: Neil Horman <nhorman@redhat.com> -2.0.0-56
changelog:
  - Added utsname support to makedumpfile for 2.6.32 (bz 556356)
  - Cleaned up some syntax in the changelog


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-78
changelog:
  - Forward patches from RHEL5, Resolves: bz 592312  600566
    600571  600572 600574 600575 600577 600578 600579 600581 600583
    600584  600585 600586 600588 600590 600591 600593 600594 600595
    600596 600597  600598 600599 600600 600601 600602 600604 600605
    600606 600607 600610 600611 600613 600896 602785  602905.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-86
changelog:
  - When there are double quotes in LABEL= in kdump.conf, findfs
    will not be able to find the correct label, we should allow
    quotes in LABEL= in kdump.conf because a label name may contain
    spaces. See comment #4 of bug 600611.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-87
changelog:
  - We don't need to escape '#' with "\#", otherwise '#' will be
    executed as a command before aliased. See comment #4 of bug 600896.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-92
changelog:
  - When there are multiple net dump targets, let the last one
    overwrite the previous ones, stop showing errors in this case.
    See comment #4 in bug 600607.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-95
changelog:
  - Move modules from /lib into /lib/modules/`uname -r`, and
    regenerate modules.dep for them. Resolves bug 602033.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-99
changelog:
  - Support btrfs, and move fs type check earlier so that
    mkdumprd will fail soon with unsupported fs type.
    Resolves bug 607515 and bug 607131.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-102
changelog:
  - If a symlink with the same name exists, remove it first before
    copying, so that extra_bins will be copied correctly.
    Resolves bug 611699.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-107
changelog:
  - Include the patch from Cai, adding missed options to --help
    of makedumpfile. Resolves bug 606704.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-197
changelog:
  - Add coordination between kdump and cluster fencing for long
    kernel panic dumps, resolve bug 585332. From Ryan O'Hara.


author: Dave Young <dyoung@redhat.com> - 2.0.0-227
changelog:
  - Fix the default dump failure option, resolve bug 729675.
  - Add default console font, resolve bug 784114.
  - Set pipefail at the beginning of init, resolve bug 771671.
  - Some bug fixes for raw dump, resolve bug 794981.


author: Dave Young <dyoung@redhat.com> - 2.0.0-229
changelog:
  - clarify "insufficient memory" in firstboot kdump module, resolve bug 799529 
  - mkdumprd: call add_rootfs early, resolve bug 799231
  - Do not depend on selinuxcoreutils, resolve bug 697657


author: Dave Young <dyoung@redhat.com> - 2.0.0-230
changelog:
  - Update firstboot threshold to 2G and roundup memsize value, resolve bug 802201
  - convert PREFIX to NETMASK for the second kernel, resolve bug 699318


author: Dave Young <dyoung@redhat.com> - 2.0.0-233
changelog:
  - Clarify the kdump.conf documentation, resolve bug 805793
  - uncomment the default core_collector and path, resolve bug 805793
  - fix module finding logic, resolve bug 794580


author: Dave Young <dyoung@redhat.com> - 2.0.0-236
changelog:
  - Warn when dumping to encrypted devices, resolve bug 743551
  - Correct the meaning of BOOTPROTO=none, resolve bug 805803


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Dave Young <dyoung@redhat.com> - 2.0.0-246
changelog:
  - Do not run default/final action if network interface fails to come up, resolve bug 822146
  - Move default action handling code in a separate function, resolve bug 822146
  - Append to /etc/iface_to_active file instead of overwriting, resolve bug 822146
  - Allow activation of more than one network interface in second kernel, resolve bug 822146
  - always find and install the fs module for local fs dump, resolve bug 842476
  - document the supported fs types, resolve bug 813354


author: Dave Young <dyoung@redhat.com> - 2.0.0-248
changelog:
  - Exclude microcode kernel module, resolve bug 788253
  - Exclude virtio_balloon kernel module, resolve bug 770000


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Baoquan He <bhe@redhat.com> - 2.0.0-259
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules
  - Add description about default action 'mount_root_run_init' and 'poweroff'
  - check_encrypted fix
  - add virtio disk identify logic
  - Add scsi_id disk identify logic
  - move scsi_id install to a function
  - move identify critical disk logic to a function


author: Baoquan He <bhe@redhat.com> - 2.0.0-260
changelog:
  - kexec-tools: powerpc: dt_reserve doesn't allocate enough memory for large properties
  - mkdumprd: check for empty dasd options
  - mkdumprd: Remove redundant code from handledm()


author: Baoquan He <bhe@redhat.com> - 2.0.0-261
changelog:
  - kexec: Respect memory limit while building crash memory ranges on ppc64, resolve bug 871522 
  - modprobe output awkscripts fix, resolve bug 876667 
  - kdump.init: exit and print error if kernel is old but using nr_cpus=1, resolve bug 844572
  - kdump.conf.5: the location of makedumpfile is said wrongly, resolve bug 847247
  - mkdumprd: remove redundant code of checkinging IS_UUID/IS_LABEL for lvm PV Name, resolve bug 879471
  - mkdumprd: handlelvordev cleanup, resolve bug 879471


author: Baoquan He <bhe@redhat.com> - 2.0.0-262
changelog:
  - kexec-tools: Allow kdump over a network work with an arbitrary bridge, bond or vlan name , resolve bug 959449
  - Add files related to fips support , resolve bug 909402
  - Change the old copy of symlink file , resolve bug 909402
  - kdump.conf: the location of makedumpfile is said wrongly , resolve bug 847247
  - Revert no-udev lvm.conf changes , resolve bug 888609


author: Baoquan He <bhe@redhat.com> - 2.0.0-263
changelog:
  - Add a help message into man page of makedumpfile for -b option, resolve bug 825476
  - makedumpfile: add a big patch to upgrade from v1.3.5 to v1.5.3, resolve bug 825476
  - add missing logs for makedumpfile patches, resolve bug 825476
  - RHEL6.4 PATCH Use conditional restart when adding or removing CPU/Memory, resolve bug 883543
  - mkdumprd: add tab key as delimiter of core_collector in kdump.conf, resolve bug 852373


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Baoquan He <bhe@redhat.com> - 2.0.0-274
changelog:
  - Add fence_kdump support for generic clusters, resolves bug 1083938
  - Add function setup_cluster_nodes_and_options, resolves bug 1083938
  - Add function get_pcs_cluster_nodes, resolves bug 1083938
  - Add function is_pcs_fence_kdump, resolves bug 1083938


author: Baoquan He <bhe@redhat.com> - 2.0.0-276
changelog:
  - kexec-tools: non-default routes are ignored by kdump, resolves bug 806992
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel, resolves bug 1061480
  - use -p option with fsck instead of -y, resolves bug 1055679
  - kdump doesn't work properly with nic that has "-" in it's name, resolves bug 874529
  - fix makedumpfile report and debug messages not shown, resolves bug 1016451


author: Baoquan He <bhe@redhat.com> - 2.0.0-277
changelog:
  - mkdumprd: add support for s390 DASD FBA type device, resolves bug 1022871
  - Check status of fsck before trying to mount a file system, resolves bug 1055672


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Michael A. Peters <mpeters@mac.com> - 2005-0.1
changelog:
  - Initial attempt at something that resembles packaging.
  -- Red Hat / Fedora specific patches from tetex not carried over yet
  -- probably some regression


author: Michael A. Peters <mpeters@mac.com> - 2005-0.2
changelog:
  - apply Fedora/Red Hat patches (except fot japanese)
  - port patches as needed
  -- Some of the scripts not patched have same tmpdir issue as the
  -- badscript patch fixes - so a second badscript patch IS still needed
  - build shared libkpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.2
changelog:
  - update to TeXLive 2007 final
  - remove texlive-errata dependencies
  - don't use dates in upstream tarball names
  - fix invalid freetype libraries location
  - disable broken parallel build
  - move filelists back to the spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.5
changelog:
  - separate kpathsea from texlive-fonts
  - update filelists
  - incorporate fixes from David Walluck (Mandriva, Debian, SuSE patches, etc.)
  - link against system freetype2/t1lib
  - remove kpathsea library building hacks
  - disable ttf2pk, don't link against type1
  - fix perl requires


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.9
changelog:
  - update internal xpdf to 3.02 from upstream to fix CVE-2007-3387
  - don't link statically with libstdc++
  - put xdvi.xaw3d to texlive-xdvi instead of main package


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.10
changelog:
  - update License tag to licenses used in TeXLive sources
  - remove ps2eps, it's a separate package
  - don't remove updmap.cfg in post phase
  - fix provides/obsoletes
  - tetex.cron -> texlive.cron
  - review fixes thanks to Patrice Dumas:
  - remove .gz from installing info in scriptlets
  - remove useless comments, lesstif/lesstif-devel requires
  - remove X-Red-Hat-Extra category from xdvi.desktop
  - update texlive-texdoc.patch
  - require xdg-utils, htmlview, don't require bison, flex, ed


author: MATSUURA Takanori <t.matsuu at gmail.com> - 2007-0.10.1
changelog:
  - add Japanese pTeX
  - Polish platex and pdfplatex are moved to platex-pl and
    pdfplatex respectively


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.11
changelog:
  - BR gawk, ghostscript
  - incorporate path fixes by Patrice Dumas
  - change in the kpathsea default paths
  - don't BR the *-texmf
  - ship kpathsea defaults as documentation
  - disable build of ps2eps at configuration time


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.12
changelog:
  - update description
  - BR ruby, don't obsolete tetex-tex4ht
  - remove license problematic/useless stuff, based on email from Karl Berry
  - move vfont.sample to doc
  - preserve timestamps
  - shuffle binaries between texlive and texlive-fonts, update scriptlets


author: Patrice Dumas <pertusus@free.fr>
changelog:
  - subpackage packages that have a distinct upstream
  - remove non free parts from the archive
  - install xdvi icon in hicolor directory


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.13
changelog:
  - update ls-Rs to deal with the japanese support
  - update ptex to 3.1.10 and mendex to 2.6e
  - fix install-info in scriptlets


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.15
changelog:
  - fix t1lib flaw CVE-2007-4033 (#352271)
  - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws (#345121)
  - xdvi won't segfault if DVI file contains character which
    is not present in font (#243630)
  - fix dvips -z buffer overflow with long href (#368591)
  - fix insecure usage of temporary file in dviljk (#368611, #368641)
  - link against poppler, not internal xpdf
  - include arabtex


author: Jindrich Novy <jnovy@redhat.com> - 2007-4
changelog:
  - update japanese, chinese, korean paths to fonts in vfontmap (#418081, #392221)
  - create customized cid-x.map for dvipdfmx (#418091)


author: Jindrich Novy <jnovy@redhat.com> - 2007-6
changelog:
  - unify texlive and texlive-fonts packages and obsolete
    texlive-fonts (related: #426388)
  - move subpackages versions to the top of spec file
  - changes from Patruce Dumas:
    * remove BuildRequires on texmf packages
    * don't create .fmt files during the build
    * ship the ptex.pool file


author: Jindrich Novy <jnovy@redhat.com> - 2007-9
changelog:
  - unify texlive and texlive-fonts filelists
  - package texdoc and texdoctk to a separate subpackage
    texlive-doc, because of the Perl-Tk dependencies and logic


author: Jindrich Novy <jnovy@redhat.com> - 2007-10
changelog:
  - don't build/package xdvik/pxdvik, it's now separated
  - fix texlive-doc requires, description
  - use virtual provides with parentheses to avoid clashes
    with real packages (#410401)


author: Jindrich Novy <jnovy@redhat.com> - 2007-11
changelog:
  - temporary fix to pdflatex to not to warn verbosely because of
    ambiguous entries in pdflatex.map (#425804)
  - update post scriptlets, spec cleanup


author: Jindrich Novy <jnovy@redhat.com> - 2007-12
changelog:
  - remove all references to teTeX from the packaged man pages
    and update links to point correctly to upstream mailing
    list and web page
  - drop xpdf patch, we link against poppler now


author: Jindrich Novy <jnovy@redhat.com> - 2007-13
changelog:
  - don't copy original pdftex map files but regenerate them
    with the correct updmap.cfg file updated in texlive-texmf
    (Related: #425804)
  - install mendex via libtool (#428507)


author: Jindrich Novy <jnovy@redhat.com> - 2007-15
changelog:
  - dependency pruning: (#428489, #429753)
    - package XeTeX separately
    - move ghostscript utilities (a2ping, e2pall, epstopdf, gsftopk,
      pdfcrop, ps4pdf, thumbpdf) and metafont with X support
      to texlive-utils subpackage
    - move allcm, allec, allneeded to texlive-dvips
    - package xdvipdfmx in dvipdfmx subpackage
    - only texlive-doc now requires xdg-utils


author: Jindrich Novy <jnovy@redhat.com> - 2007-16
changelog:
  - package Japanese separately -> texlive-japanese
  - add missing BR: texlive-texmf-fonts (#430338)
  - temporarily disable BR: texlive in kpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-18
changelog:
  - package ConTeXt separately to get rid of the ruby dependency
  - fix summary for texlive-japanese
  - remove man pages with no corresponding binaries


author: Jindrich Novy <jnovy@redhat.com> - 2007-20
changelog:
  - move mktexpk to texlive-utils (#435176)
  - rename texlive-japanese to texlive-east-asian
  - move ghostscript Requires to dvipdfmx
  - remove trailing spaces from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-23
changelog:
  - move MetaPost back to the main package from texlive-context
  - don't package dvipdfmx, it is now packaged separately (#433225)


author: Jindrich Novy <jnovy@redhat.com> - 2007-24
changelog:
  - put back dvipdfmx requires for xelatex (#433225)
  - don't compile unpackaged stuff
  - enable parallel build


author: Jindrich Novy <jnovy@redhat.com> - 2007-25
changelog:
  - fix fmtutil to not to hang in infinite loop, thanks to
    Stepan Kasal (#437008)
  - fix search paths in texmf.cnf, thanks to Patrice Dumas (#436949)


author: Jindrich Novy <jnovy@redhat.com> - 2007-27
changelog:
  - remove dvipdfmx completely, also for F8 (related #437448)
  - kpathsea requires texlive again (#437458)


author: Jindrich Novy <jnovy@redhat.com> - 2007-29
changelog:
  - run restorecon on /var/lib/texmf to avoid access denials
    if SELinux is in enforcing mode (#443286, #442161)


author: Jindrich Novy <jnovy@redhat.com> - 2007-30
changelog:
  - fix SELinux contexts everywhere possible, don't allow restorecon
    to fail (#444922)
  - add missing post/postun scriptlets for subpackages


author: Jindrich Novy <jnovy@redhat.com> - 2007-31
changelog:
  - don't build/package dvipdfm, it's now packaged separately (#445983),
    thanks to Jonathan Underwood
  - remove F8 related chunks from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-32
changelog:
  - texlive-xetex now provides tex(xetex) (#451774)
  - attempt to fix lacheck segfault (#451513)
  - avoid multiple ownership of texconfig stuff (#442135)


author: Jindrich Novy <jnovy@redhat.com> - 2007-35
changelog:
  - texlive-context requires texlive-texmf-context (#455163)
  - fix lacheck to not to segfault (#451513)
  - rediff some patchesto be applicable with zero fuzz


author: Jindrich Novy <jnovy@redhat.com> - 2007-41
changelog:
  - texlive-east-asian now requires texlive-texmf-east-asian (#487258)
  - do not attempt to remove old fonts via cron in /var/lib/texmf,
    fonts are stored in ~/.texlive2007/texmf-var per-user
    (#477833, #463975, #453468)
  - use correct paths in brp-* post install scriptlets (#468179)
  - fix build with gcc4.4


author: Jindrich Novy <jnovy@redhat.com> 2007-45
changelog:
  - make kpathsea not dependent on texlive
  - fix lacheck again (#451513)
  - fix dvips configuration (#467542)
  - update kpathsea description and summary (#519257)
  - use upstream patch to fix pool overflow CVE-2009-1284 (#492136)
  - don't complain if the pdvipsk hunks touching config.ps don't apply


author: Jindrich Novy <jnovy@redhat.com> 2007-48
changelog:
  - add missing defattr to filelists
  - do not own /var/lib/texmf/web2c/, it is owned by texlive-texmf
  - use official tarball for dvipsk-jpatch


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773184)


author: Than Ngo <than@redhat.com> - 2007-58
changelog:
  - Resolves: bz#699575, running latex when the .aux file is non-writable can erase the input .tex file


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> 20081104-1
changelog:
  - update to 2008-11-04
  - ast-ksh-locales are not useable remove them
  - /usr/bin/ksh symlink was removed


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.5-5
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-1.2
changelog:
  - Access oVirt API through /ovirt-engine/api rather than /api, this fixes
    foreign menu when accessing a VM from .vv files
    Resolves: rhbz#1297810


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
    e.g. /dev/cdrom -> hdd /dev/cdrom-hdc -> hdc /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 104-2
changelog:
  - moved uinput to input subdirectory (rhbz#213854)
  - added USB floppy symlinks (rhbz#185171)
  - fixed ZIP drive handling (rhbz#223016)
  - Resolves: rhbz#213854,rhbz#185171,rhbz#223016


author: Harald Hoyer <harald@redhat.com> - 106-1
changelog:
  - version 106
  - specfile cleanup
  - removed pilot rule
  - removed dasd_id and dasd_id rule
  - provide static versions in a subpackage


author: Harald Hoyer <harald@redhat.com> - 106-3
changelog:
  - modprobe only on modalias (bug #238140)
  - make startup messages visible again
  - speedup boot process by not executing pam_console_apply while booting
  - Resolves: rhbz#238140


author: Harald Hoyer <harald@redhat.com> - 113-7
changelog:
  - major rule cleanup
  - removed persistent rules from 50 and included upstream rules
  - removed skip_wait from modprobe


author: Harald Hoyer <harald@redhat.com> - 114-1
changelog:
  - version 114
  - big rule unification and cleanup
  - added persistent names for network and cdrom devices over reboot


author: Harald Hoyer <harald@redhat.com> - 113-10
changelog:
  - do not run vol_id on non-partition block devices (bug #251401)
  - read all multiline pnp modaliases again


author: Harald Hoyer <harald@redhat.com> - 114-4
changelog:
  - added patch to prevent persistent net rules for virtual network interfaces,
    like vmware and vlans


author: Harald Hoyer <harald@redhat.com> - 115-2
changelog:
  - some upstream fixes from git
  - last_rule for loop rules (speedup for live-cds/qemu with 128 loop devices)


author: Harald Hoyer <harald@redhat.com> - 115-3
changelog:
  - some upstream fixes from git
  - removed last_rule for loop rules
  - added "udevinfo udevtrace" kernel command line options for better debugging


author: Harald Hoyer <harald@redhat.com> 115-5.20071012git
changelog:
  - added upstream patch for rhbz#328691
  - moved floppy module loading to pnp-alias in /etc/modprobe.d/floppy-pnp


author: Harald Hoyer <harald@redhat.com> 116-3
changelog:
  - fixed preun chkconfig
  - added /sbin path to chkconfig in post section 
  - patch: do not generate net rules for type > 256
  - fixes glitches appearing in bz#323991


author: Harald Hoyer <harald@redhat.com> 118-4
changelog:
  - made symlinks relative (rhbz#432878)
  - removed the backgrounding of node creation (rhbz#381461)
  - do not change sg group ownership to disk for scanners (rhbz#432602)
  - attempt to fix selinux symlink bug (rhbz#345071)
  - fixed URL
  - made rpmlint mostly happy
  - disabled static version (no static selinux lib)


author: Harald Hoyer <harald@redhat.com> 118-6
changelog:
  - moved all generated files to /var/lib/udev 
    (also 70-persistent-cd.rules 70-persistent-net.rules)
  - added a caching mechanism for MAKEDEV (saves some seconds on startup)
  - added trigger for selinux-policy and MAKEDEV to remove the udev cache files


author: Harald Hoyer <harald@redhat.com> 118-7
changelog:
  - files from /var/lib/udev/rules.d are copied to /dev/.udev/rules.d 
    at startup and back at shutdown
  - persistent cd and net rules generate the files in 
    /dev/.udev/rules.d now
  - added post section to symlink 70-persistent-cd.rules 70-persistent-net.rules
    from /etc/udev/rules.d to /dev/.udev/rules.d


author: Harald Hoyer <harald@redhat.com> 118-8
changelog:
  - added /etc/sysconfig/udev to configure some speedups
  - added "udevnopersist" as a kernel command line, to disable
    persistent storage symlink generation


author: Harald Hoyer <harald@redhat.com> 118-9
changelog:
  - added more support for the "modprobedebug" kernel command 
    line option, to debug hanging kernel modules


author: Harald Hoyer <harald@redhat.com> 120-2
changelog:
  - removed warning about deprecated /lib/udev/devices (rhbz#440961)
  - replaced /usr/bin/find with shell find function (rhbz#440961)


author: Harald Hoyer <harald@redhat.com> 120-3
changelog:
  - fixed pre/preun scriptlets (bug #441941)
  - removed fedora specific patch for selinux symlink handling


author: Harald Hoyer <harald@redhat.com> 120-4.20080421git
changelog:
  - added patches from git:
  - persistent device naming: also read unpartitioned media
  - scsi_id: initialize serial strings
  - logging: add trailing newline to all strings
  - path_id: remove subsystem whitelist
  - allow setting of MODE="0000"
  - selinux: more context settings
  - rules_generator: net rules - always add KERNEL== match to generated rules
  - cdrom_id: replace with version which also exports media properties
  - vol_id: add --offset option
  - udevinfo: do not replace chars when printing ATTR== matches
  - Resolves: rhbz#440568


author: Harald Hoyer <harald@redhat.com> 126-1
changelog:
  - version 126
  - fixed udevadm syntax in start_udev (credits B.J.W. Polman)
  - removed some manually created devices from makedev (bug #457125)


author: Harald Hoyer <harald@redhat.com> 135-2
changelog:
  - changed udevsettle -> udevadm settle
  - added doc to libudev-devel
  - added more attr and defattr
  - various rpmlint fixes


author: Harald Hoyer <harald@redhat.com> 136-1
changelog:
  - test for restorecon in start_udev before it is used (bug #480608)
  - added groups video audio cdrom tape dialout in post
    (might be moved to MAKEDEV)
  - version 136


author: Harald Hoyer <harald@redhat.com> 139-3
changelog:
  - renamed modprobe /etc/modprobe.d/floppy-pnp to
    /etc/modprobe.d/floppy-pnp.conf (bug #492732 #488768)
  - Resolves: rhbz#492732


author: Harald Hoyer <harald@redhat.com> 142-4
changelog:
  - git fix: udevadm: settle - fix timeout
  - git fix: OWNER/GROUP: fix if logic
  - git fix: rule-generator: cd - skip by-path links if we create by-id links
  - git fix: fix possible endless loop for GOTO to non-existent LABEL
  - git fix: cdrom_id: suppress ID_CDROM_MEDIA_STATE=blank for plain non-writable 
  		CDROM media


author: Harald Hoyer <harald@redhat.com> 143-2
changelog:
  - add acpi floppy modalias
  - add retrigger of failed events in udev-post.init
  - killall pids of udev in %pre


author: Harald Hoyer <harald@redhat.com> 145-1
changelog:
  - version 145
  - add "udevlog" kernel command line option to redirect the
    output of udevd to /dev/.udev/udev.log


author: Harald Hoyer <harald@redhat.com> 145-2
changelog:
  - fix file permissions
  - remove rpath
  - chkconfig --add for udev-post
  - fix summaries
  - add "Required-Stop" to udev-post


author: Harald Hoyer <harald@redhat.com> 147-1
changelog:
  - version 147
  - Fix upgrade from Fedora 11 with bluez installed (#533925)
  - obsolete DeviceKit and DeviceKit-devel (#532961)
  - fixed udev-post exit codes (#523976)
  - own directory /lib/udev/keymaps (#521801)
  - no more floppy modaliases (#514329)
  - added one more modems to modem-modeswitch.rules (#515349)
  - add NEWS file to the doc section
  - automatically turn on hotplugged CPUs (rhbz#523127)
  - recognize a devtmpfs on /dev (bug #528488)


author: Harald Hoyer <harald@redhat.com> 147-2.2
changelog:
  - only require s390utils-base, rather than s390utils (#553156)
  - removed non-working softlinks (partly fixes also #528883)
  - Resolves: rhbz#553156


author: Harald Hoyer <harald@redhat.com> 147-2.4
changelog:
  - add symlink rule for virtio ports (rhbz#559180)
  - fixed initscript
  - create /dev/net/tun with 0666 in start_udev
  - Export ID_WWN_VENDOR_EXTENSION and ID_WWN_WITH_EXTENSION
  - Related: rhbz#543948 rhbz#515413
  - Resolves: rhbz#559180


author: Harald Hoyer <harald@redhat.com> 147-2.7
changelog:
  - fixed udev-post initscript retriggering (rhbz#566568)
  - attempt to fix network interface renaming (rhbz#565724)
  - Resolves: rhbz#565724, rhbz#566568


author: Harald Hoyer <harald@redhat.com> 147-2.9
changelog:
  - rename non-handled network interfaces, so that the handled
    can be renamed to their destination name (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.10
changelog:
  - add one more letter to renamed interfaces to avoid name 
    clashing (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.11
changelog:
  - add SCSI SAS handling to path_id (rhbz#537185)
  - fixed handling of boxes with lots of disks and huge
    volume groups (rhbz#570016)
  - fixed virtio-ports rule (rhbz#569699)
  - Resolves: rhbz#537185, rhbz#569699, rhbz#570016


author: Harald Hoyer <harald@redhat.com> 147-2.12
changelog:
  - fixed virtio-ports rule patch (rhbz#569699)
  - removed IFINDEX from renamed interfaces (rhbz#572681)
  - do not reset selinux labels (rhbz#575128)
  - Resolves: rhbz#572681, rhbz#569699, rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.13
changelog:
  - supress error message in pre/post while killing old udevd
    (rhbz#576819)
  - fixed a lot of cdrom related problems (rhbz#582557, rhbz#582559)
  - Resolves: rhbz#576819, rhbz#582557, rhbz#582559


author: Harald Hoyer <harald@redhat.com> 147-2.14
changelog:
  - do not mark xvd* devices as cdrom by default (rhbz#584163)
  - Do not rename network interfaces.
    This causes more problems, than solving the original one.
    (rhbz#565724)
  - Resolves: rhbz#584163, rhbz#572681


author: Harald Hoyer <harald@redhat.com> 147-2.15
changelog:
  - fix "do not mark xvd* devices as cdrom by default (rhbz#584163)"
    included patch but did not apply
  - Resolves: rhbz#584163


author: Harald Hoyer <harald@redhat.com> 147-2.18
changelog:
  - removed obsolete arguments to configure
  Resolves: rhbz#601882
  - add IMPORT{db} IMPORT{cmdline} and set rd_NO_MDIMSM for noiswmd kernel cmdline option
  Resolves: rhbz#589775
  - add port for sas in path_id 
  Resolves: rhbz#537185
  - add modprobe hack to serialize modprobes
  Resolves: rhbz#515413
  - revert path check from 147-2.16
  Resolves: rhbz#591970


author: Harald Hoyer <harald@redhat.com> 147-2.19
changelog:
  - do not blkid blank or audio CDROMs 
  Resolves: rhbz#606293
  - fixed scsi changer symlink
  Resolves: rhbz#603051
  - suppress warnings from usb_id
  Resolves: rhbz#585648
  - add path_id for virtio-blk devices
  Resolves: rhbz#601248
  - fixed reference leak in path_id sas patch
  Resolves: rhbz#537185


author: Harald Hoyer <harald@redhat.com> 147-2.22
changelog:
  - fixed random MAC address handling 
  - honor ifcfg HWADDR settings for 70-persistent-net.rules
  Resolves: rhbz#596464


author: Harald Hoyer <harald@redhat.com> 147-2.26
changelog:
  - more quirk for virtual machines, which do not report correct
    CDROM information
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.27
changelog:
  - added ID_SERIAL_RAW to scsi_id export output, which is not
    whitespace stripped
  Resolves: rhbz#612173


author: Harald Hoyer <harald@redhat.com> 147-2.28
changelog:
  - quirk for cisco virtual cdrom was not complete, reports
    blank media, rhbz#628962
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.29
changelog:
  - set the selinux context for "add" events, regression
    the fix for rhbz#575128 caused a lot of selinux errors like
    rhbz#603729
  Resolves: rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.30
changelog:
  - fixed udevadm segfault, if log is set to debug
  Resolves: rhbz#657360
  - fixed keyboard handling for extra keys, especially volume
    control
  Resolves: rhbz#617572
  - quote output of 'udevadm info --query=shenv' or
                    'udevadm info --query=shproperty'
  Resolves: rhbz#644330


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: Michal Sekletar <msekleta@redhat.com> - 147-2.63.1
changelog:
  - also limit the additional modprobe locked workers (#1281469)
  - 80-drivers.rules: only make an exception for ipmi for modprobe with DRIVER set (#1281467)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
changelog:
  - Resolves: rhbz#645449 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Related: rhbz#644072 - Rebase SSSD to 1.5
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  - Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Related:  rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - Also add the updated ding-libs to the BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-4
changelog:
  - Resolves: rhbz#674172 - Group members are not sanitized in nested group
  - processing
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
changelog:
  - Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named
  -                         "default"
  - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate
  -                         password
  - Resolves: rhbz#674141 - Traceback call messages displayed while
  -                         "sss_obfuscate" command is executed as a non-root
  -                         user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
changelog:
  - Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login
  - Resolves: rhbz#675284 - "no matching rule" message logged on all successful
  -                         requests
  - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for
  -                         authentication


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678410 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#678593 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678777 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#677318 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups
  - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Related: rhbz#680440 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683431 - sssd consumes 100% CPU
  - Related: rhbz#680440  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Resolves: rhbz#683860 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#689886 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690131 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the
  -                         gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#699530 - Users with a local group as their primary GID are
  -                         denied access by the simple access provider
  - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a
  -                         member of any group
  - Resolves: rhbz#703624 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-36
changelog:
  - Resolves: rhbz#698723 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Resolves: rhbz#707513 - Unable to authenticate users when username
  -                         contains "\0"


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man
  -                         page


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#709342 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are
  -                         being logged multiple times when the provider comes
  -                         back online
  - Resolves: rhbz#707997 - The IPA provider does not work with IPv6
  - Resolves: rhbz#677327 - [RFE] Support overriding attribute value
  - Resolves: rhbz#692090 - SSSD is not populating nested groups in
  -                         Active Directory


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-41
changelog:
  - Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#713438 - sssd shuts down if inotify crashes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-42
changelog:
  - Resolves: rhbz#711416 - During the change password operation the ccache is
  -                         not replaced by a new one if the old one isn't
  -                         active anymore
  - Resolves: rhbz#715609 - Certificate validation fails with message
  -                         "Connection error: TLS: hostname does not match CN
  -                         in peer certificate"
  - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Honor TTL values when resolving hostnames


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-53
changelog:
  - Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host
                            groups
  - Resolves: rhbz#740501 - SSSD not functional after "self" reboot
  - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be
                            case-insensitive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-55
changelog:
  - Resolves: rhbz#738621 - Lookup fails for non-primary usernames with
                            multi-valued uid
  - Resolves: rhbz#738629 - Group lookups doesn't return it's member for
                            sometime when the member has multi-valued uid
  - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber
                            to integer
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-56
changelog:
  - Resolves: rhbz#742278 - Rework the example config
  - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was
                            initialized
  - Resolves: rhbz#742526 - SSSD's man pages are missing information
  - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-67
changelog:
  - Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758157 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-2.beta2
changelog:
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3
  - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
                            a dependancy
  - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers
  - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and
                            netgroup search base correctly
  - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb
                            AS requests
  - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision
  - Resolves: rhbz#785904 - [RFE] SSSD should have --version option
  - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider
  - Resolves: rhbz#785898 - Enable midway cache refresh by default
  - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for
                            a non-existing netgroup
  - Resolves: rhbz#785884 - Honour TTL when resolving host names
  - Resolves: rhbz#785883 - check DNS records before updates
  - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead
                            of guessing
  - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line
  - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config
                            file too much
  - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server
                            has been reinitialized
  - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc
  - Resolves: rhbz#773660 - Kerberos errors should go to syslog
  - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native
                            IPA netgroups code
  - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF
                            source host group in an hbacrule
  - Resolves: rhbz#771702 - sssd_pam crashes during change password operation
                            against a IPA server
  - Resolves: rhbz#771361 - case_sensitive function not working as intended for
                            ldap
  - Resolves: rhbz#768935 - Crash when applying settings
  - Resolves: rhbz#766941 - The full dyndns update message should be logged into
                            debug logs
  - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory
                            value
  - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab
                            principal name
  - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files
  - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug
                            levels on the fly
  - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional
  - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal
                            netgroup representation
  - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option
  - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control
  - Resolves: rhbz#753876 - [RFE] Add support for the services map
  - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after
                            group name change in MSAD
  - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle
                            for some (configurable) time
  - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD
  - Related:  rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#742052 - id -G group resolution takes extremely long
  - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange
  - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases
  - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or
                            insensitive
  - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users
  - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control
                            disabled for openldap
  - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login
  - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 during auth when password for the user is
                            not set


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-3.beta2
changelog:
  - Handle filtering python Provides in a safer way
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD
  - Resolves: rhbz#788979 - sssd crashes during initgroups against a user
                            belonging to nested rfc2307bis group


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-5
changelog:
  - Resolves: rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#785871 - wrong build dependency on nscd
  - Resolves: rhbz#785873 - IPA host search base cannot be set
  - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group
                            lookups
  - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more
                            sparingly
  - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64
  - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user
                            entries
  - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or
                            memberNisNetgroup entries are deleted from a
                            netgroup
  - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load
  - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is
                            logged at each login
  - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-7
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Use a patch and install the script to python_sitelib
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-8
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Fix typo in the patch
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-9
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Remove old copy from the spec file
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-10
changelog:
  - Fix explicit requires to use openldap instead of openldap-libs
  - Related:  rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-11
changelog:
  - Do not auto-upgrade debug levels
  - Tool still available for manual use
  - Reverts:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#798881 - Install-time warnings
  - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also
                            the dns_discovery_domain
  - Resolves: rhbz#798655 - Password logins failing due to a process with high
                            UID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-12
changelog:
  - Resolves: rhbz#801407 - sssd_nss gets hung processing identical search
                            requests
  - Resolves: rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies
  - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials
  - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to
                            true
  - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work
  - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false
  - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam
                            can use
  - Resolves: rhbz#799971 - sssd_be crashes on shutdown
  - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested
                            group structure
  - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy
                            provider configured
  - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd
                            is configured as proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-15
changelog:
  - Update translations
  - Resolves: rhbz#802372 - Pick up latest translation files for SSSD
  - Resolves: rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Related:  rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-17
changelog:
  - Related:  rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica
                            using IP address
  - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with
                            case_sensitive=false
  - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set
  - Resolves: rhbz#805034 - accessing an undefined variable might cause crash
  - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-18
changelog:
  - Resolves: rhbz#804057 - Initial service lookups having name with uppercase
                            alphabets doesn't work
  - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names
                            doesn't work when case_sensitive=false
  - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple
                            realms in a single keytab
  - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false
  - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name
                            resolution times out
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-20
changelog:
  - Related: rhbz#805452  - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-21
changelog:
  - Resolves: rhbz#808458 - Authconfig crashes when sets krb realm
  - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is
                            running
  - Resolves: rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-22
changelog:
  - Fix typo in patch for SSH umask
  - Related:  rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-33
changelog:
  - Resolves: rhbz#840089 - Update the shadowLastChange attribute
                            with days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-1.rc1
changelog:
  - Rebase to 1.9.0 RC1
  - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4
  - Bump the selinux-policy version number to pull in required fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2
changelog:
  - Fix the "ca" translation of the sssd-simple manual page
  - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5
changelog:
  - Do not send SIGKILL to service right after sending SIGTERM
  - Resolves: #771975
  - Fix the initial sudo smart refresh
  - Resolves: #869013
  - Implement password authentication for users from trusted domains
  - Resolves: #869071
  - LDAP child crashed with a wrong keytab
  - Resolves: #869150
  - The sssd_nss process grows the memory consumption over time
  - Resolves: #869443


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-6
changelog:
  - Resolves: rhbz#871576 - sssd does not resolve group names from AD
  - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file
                            in the pam responder
  - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider
                            directive


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-7
changelog:
  - Resolves: rhbz#873032 - Move sss_cache to the main subpackage
  - Resolves: rhbz#829740 - Init script reports complete before sssd is actually
                            working
  - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in
                            ldap_uri
  - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly
  - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                            if the sssd is not running
  - Resolves: rhbz#872110 - User appears twice on looking up a nested group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-9
changelog:
  - Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an
                            option for the [sssd] section


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-10
changelog:
  - Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type
  - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                           if the sssd is not running


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-12
changelog:
  - Resolves: rhbz#870278 -  ipa client setup should configure host properly
                             in a trust is in place


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-16
changelog:
  - Resolves: rhbz#875738 - offline authentication failure always returns
                            System Error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-19
changelog:
  - Resolves: rhbz#877130 - LDAP provider fails to save empty groups
  - Related: rhbz#869466 - check the return value of waitpid()


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-20
changelog:
  - Resolves: rhbz#877126 - subdomains code does not save the proper
                            user/group name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-21
changelog:
  - Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire
                            ldap connections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-22
changelog:
  - Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart
                            after sbus failure


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-25
changelog:
  - Resolves: rhbz#878262 - ipa password auth failing for user principal
                            name when shorter than IPA Realm name
  - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately
                            from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-26
changelog:
  - Resolves: rhbz#874673 - user id lookup fails using proxy provider
  - Fix a possibly uninitialized variable in the LDAP provider
  - Related: rhbz#877130


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-27
changelog:
  - Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken
                            configurations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-28
changelog:
  - Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code
                            skips a built-in group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-31
changelog:
  - Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an
                            empty hostent during the DNS update
  - Do not version libsss_sudo, it's not supposed to be linked against, but
    dlopened (Related: rhbz#761573)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-32
changelog:
  - Resolves: rhbz#875677 - password expiry warning message doesn't appear
                            during auth
  - Fix potential NULL dereference when skipping built-in AD groups
    (Related: rhbz#874616)
  - Add missing parameter to DEBUG message (Related: rhbz#829742)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-34
changelog:
  - Resolves: rhbz#877974 - updating top-level group does not reflect ghost
                            members correctly
  - Resolves: rhbz#880159 - delete operation is not implemented for ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-35
changelog:
  - Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup
                            midpoint refresh to be always set to 10 seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-36
changelog:
  - Resolves: rhbz#883336 - sssd crashes during start if id_provider is
                            not mentioned


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-37
changelog:
  - Resolves: rhbz#884480 - user is not removed from group membership during
                            initgroups
  - Fix incorrect synchronization in mmap cache (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-38
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider
  - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client
    libraries (Related: #870060)
  - Move sss_ssh_knownhosts documentation to the correct section
    (Related: #870060)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-39
changelog:
  - Resolves: rhbz#882221 - Offline sudo denies access with expired
                            entry_cache_timeout
  - Fix several bugs found by Coverity and clang:
  - Check the return value of diff_gid_lists (Related: #869071)
  - Move misplaced sysdb assignment (Related: #827606)
  - Remove dead assignment (Related: #827606)
  - Fix copy-n-paste error in the memberof plugin (Related: #877974)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-40
changelog:
  - Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work
  - Fix the error handler in sss_mc_create_file (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-42
changelog:
  - Resolves: rhbz#885105 - sudo denies access with disabled
                            ldap_sudo_use_host_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-43
changelog:
  - Resolves: rhbz#880176 - memberUid required for primary groups to match
                            sudo rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-44
changelog:
  - Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory
                            cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-45
changelog:
  - Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd
                            failed. Timer expired


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-46
changelog:
  - Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same
                            hostname


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-47
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-48
changelog:
  - Resolves: rhbz#880956 - Primary server status is not always reset after
                            failover to backup server happened
  - Silence a compilation warning in the memberof plugin (Related: rhbz#877974)
  - Do not steal resolv result on error (Related: rhbz#882076)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-49
changelog:
  - Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule
                            another first full refresh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-50
changelog:
  - Resolves: rhbz#870045 - always reread the master map from LDAP
  - Resolves: rhbz#876531 - sss_cache does not work for automount maps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-52
changelog:
  - Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11
  - Include more debugging during the sysdb upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-53
changelog:
  - Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the
                            enumeration is taking too long


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-54
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed database
                            update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-57
changelog:
  - Resolves: rhbz#886091 - Disallow root SSH public key authentication
  - Add default section to switch statement (Related: rhbz#884666)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-58
changelog:
  - Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable
                            tickets from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-62
changelog:
  - Resolves: rhbz#886848 - user id lookup fails for case sensitive users
                            using proxy provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-64
changelog:
  - Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition
                            with OpenLDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-66
changelog:
  - Resolves: rhbz#874579 - sssd caching not working as expected for selinux
                            usermap contexts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-67
changelog:
  - Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD
                            Users for commands like id and getent


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-68
changelog:
  - Resolves: rhbz#887961 - AD provider: getgrgid removes nested group
                            memberships


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-71
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-72
changelog:
  - Resolves: rhbz#894997 - sssd_be crashes looking up members with groups
                            outside the nesting limit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-84
changelog:
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-85
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-86
changelog:
  - Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended
                            ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-88
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-90
changelog:
  - Resolves: #953165 - Enabling enumeration causes sssd_be process to
                        utilize 100% of the CPU


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-91
changelog:
  - Resolves: #967636 - SSSD frequently fails to return automount maps
                        from LDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-93
changelog:
  - Resolves: #987479 - libsss_sudo should depend on sudo package with
                        sssd support


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-94
changelog:
  - Call restorecon on memcache files to force the right context on upgrades
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-95
changelog:
  - Mention that enumeration should be discouraged
  - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-96
changelog:
  - Resolves: #988525 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-97
changelog:
  - Resolves: #986379 - sss_cache -N/-n should invalidate the hash table
                        in sssd_nss


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-98
changelog:
  - Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login
                        delays when client is under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-99
changelog:
  - Clarify the min_id/max_id limits further
  - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-101
changelog:
  - Resolves: #976273 - [RFE] Add a new override_homedir expansion for the
                        "original value"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-104
changelog:
  - Resolves: #971435 - Enhance sssd init script so that it would source
                        a configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-106
changelog:
  - Format patch to configure sysv script differently
  - RHEL-6 patch(1) apparently doesn't like the output of git format-patch
   -M -C and doesn't properly copy files on renames
  - Resolves: #971435 - Enhance sssd init script so that it would source a
    configuration.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-108
changelog:
  - Set correct state of SRV servers on resolving error
  - Resolves: #954275 - sssd fails connect to IPA server during boot when
                        spanning tree is enabled in network router.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-109
changelog:
  - Use permissive control when adding ghost users
  - Resolves: #928797 - cyclic group memberships may not work depending on
                        order of operations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-112
changelog:
  - Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors
                        when clearing cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-113
changelog:
  - Resolves: #916997 - getgrnam / getgrgid for large user groups
                        is too slow due to range retrieval functionality


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-114
changelog:
  - Resolves: #914433 - sssd pam write_selinux_login_file creating the temp
                        file for SELinux data failed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-115
changelog:
  - Apply a forgotten dependency for patch #254
  - Related: #916997 - getgrnam / getgrgid for large user groups
                       is too slow due to range retrieval functionality
  - Add two fixes for better handling of faulty SRV processing
  - Related: #954275 - sssd fails connect to IPA server during boot when
                       spanning tree is enabled in network router.
  - Remove enumerate=true from example in man page
  - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-117
changelog:
  - Resolves: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-119
changelog:
  - Resolves: #948830 - sssd do too many disk writes causing delay in
                        "getent netgroup allmachines-netgroup" nested netgroups.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-130
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1020905 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-131
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1025813 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-132
changelog:
  - Resolves: #1038098 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-134
changelog:
  Resolves: #1036168 - sssd can't retrieve auto.master when using the
                       "default_domain_suffix"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5.1-3
changelog:
  - Backport the InfoPipe patches needed for Sat6 integration
  - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-2
changelog:
  - Resolves: rhbz#1104145 - public key validator is too strict and does not
                             allow newlines anywhere in the public key string,
                             not even at the end


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-3
changelog:
  - Resolves: rhbz#1110369 - sssd is started before messagebus, making
                             sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-5
changelog:
  - Fix potential NULL dereference in IFP code
  - Related: rhbz#1110369 - sssd is started before messagebus, making
                            sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-7
changelog:
  - Resolves: rhbz#1042922 - [RFE] Add fallback to sudoRunAs when sudoRunAsUser
                             is not defined and no ldap_sudorule_runasuser mapping
                             has been defined in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-9
changelog:
  - Resolves: rhbz#1122158 - ad: group membership is empty when id mapping
                             is off and tokengroups are enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-11
changelog:
  - Resolves: rhbz#1109188 - dereferencing control failure against openldap
                             server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-12
changelog:
  - Resolves: rhbz#1111317 - [RFE] Add option for sssd to replace space with
                             specified character in LDAP group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-13
changelog:
  - Resolves: rhbz#1122873 -  Failover does not always happen from SRV
                              to hostname resolution(via /etc/hosts)
  - Remove spurious systemctl call on %postun


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-14
changelog:
  - Resolves: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-19
changelog:
  - Resolves: rhbz#1127757 - sssd can't retrieve sudo rules when using the
                             "default_domain_suffix" option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-20
changelog:
  - Resolves: rhbz#1127278 -  Auth fails when space in username is
                              replaced with character set by
                              override_default_whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-31
changelog:
  - Resolves: rhbz#1141814 - Password expiration policies are not being
                             enforced by SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-32
changelog:
  - Resolves: rhbz#1160713 - TokenGroups for LDAP provider breaks in corner
                             cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-33
changelog:
  - Resolves: rhbz#1154042 - RHEL6.6 sssd (1.11) doesn't return all group
                             memberships against an IPA server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-1
changelog:
  - Resolves: rhbz#1168347 - Rebase sssd to 1.12.x
  - The rebase resolves the following RHEL bugzillas
  - Resolves: rhbz#1172865 - sssd.conf(5) man page gives bad advice about
                             domains parameter
  - Resolves: rhbz#1172494 - PAC: krb5_pac_verify failures should not
                             be fatal (backport fix from upstream)
  - Resolves: rhbz#1171782 - [RFE]: SSSD should preserve case for user
                             uid field
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used
  - Resolves: rhbz#1168377 - [RFE] User's home directories and shells are
                             not taken from AD when there is an IPA trust with AD
  - Resolves: rhbz#1168363 - [RFE] Add domains= option to pam_sss
  - Resolves: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                             solution to the trust solution
  - Resolves: rhbz#1161564 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1148582 - inconsistent group information when multiple
                             ad domain sections are configured in sssd
  - Resolves: rhbz#1140909 - sssd.conf man page missing subdomains_provider
                             ad support
  - Resolves: rhbz#1139878 - SSSD connection terminated after failing
                             anonymous bind to IBM Tivoli Directory Server
  - Resolves: rhbz#1135838 - Man sssd-ldap shows parameter
                             ldap_purge_cache_timeout with "Default: 10800
                             (12 hours)"
  - Resolves: rhbz#1135432 - Dereference code errors out when dereferencing
                             entries protected by ACIs
  - Resolves: rhbz#1134942 - sssd does not recognize Windows server 2012
                             R2's LDAP as AD
  - Resolves: rhbz#1123291 - automount segfaults in sss_nss_check_header
  - Resolves: rhbz#1088402 - [RFE] Allow login through SSSD using multiple
                             attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-2
changelog:
  - Do not mark the selinux_child helper as setuid, we don't support rootless
    SSSD in 6.7
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-3
changelog:
  -  Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                             warning even if alternate authentication method
                             is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-4
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query
  - Rebuild against latest krb5, add a versioned BuildRequires
  - Resolves: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-5
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-7
changelog:
  - Resolves: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-9
changelog:
  - Initialize a pointer in ldap_child to NULL
  - Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-10
changelog:
  - Resolves: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-11
changelog:
  - Resolves: rhbz#1098147 - [RFE] Implement background refresh for users,
                             groups or other cache objects


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-12
changelog:
  - Fix Coverity warning in ldap_child
  - Add better debugging
  - Related: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-13
changelog:
  - Resolves: rhbz#1200093 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-14
changelog:
  - Fix internal error codes broken when fixing rhbz#1036745
  - Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                            warning even if alternate authentication method
                            is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-15
changelog:
  - Fix PAM responder initgroups cache for subdomain users
  - Log extop failures better
  - Related: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                            solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-16
changelog:
  - Fix warning in SELinux code
  - Handle setups with empty default and no SELinux maps
  - Related: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                            context on client is staff_u
  - Resolves: rhbz#1202305 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605
  - Resolves: rhbz#1201847 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-18
changelog:
  - Resolves: rhbz#1202728 - sssd-ad requires samba3, but ipa-server-trust-ad
                             requires samba4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-20
changelog:
  - Cherry-pick unit test changes from upstream to allow cherry-picking
    sssd-1-12 patches
  - Remove unused LDAP provider code to avoid static analyser warnings
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-21
changelog:
  - Handle TTL=0 in SRV queries correctly
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-22
changelog:
  - Fix a typo in DEBUG message
  - Related: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                            account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-23
changelog:
  - Resolves: rhbz#1205716 - Installing sssd-common-1.12.4-18.el6 might
                             install with wrong user account (root)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-25
changelog:
  - Resolves: rhbz#1206121 - ldap_access_order=ppolicy: Explicitly mention in
                             manpage that unsupported time specification will
                             lead to sssd denying access


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-27
changelog:
  - BuildRequire the proper libkrb5 version for correct localauth plugin build
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-28
changelog:
  - Resolves: rhbz#1207720 - id lookup resolves "Domain Local" group and
                             errors appear in domain log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-29
changelog:
  - Package the localauth plugin
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-30
changelog:
  - Related: rhbz#1211728 - Only set the selinux context if the context
                            differs from the local one


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-31
changelog:
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-32
changelog:
  - Resolves: rhbz#1212017 - Sudo responder does not respect filter_users
                             and filter_groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-33
changelog:
  - Resolves: rhbz#1213716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-34
changelog:
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-35
changelog:
  - Resolves: rhbz#1213940 - Overridde with --login fails trusted adusers
                             group membership resolution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-36
changelog:
  - Resolves: rhbz#1212387 - sssd_be segfault id_provider = ad
                             src/providers/ad/ad_gpo.c:843


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-37
changelog:
  - Resolves: rhbz#1217328 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-38
changelog:
  - Include several upstream fixes related to ID views
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1213947 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-39
changelog:
  - Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and
                             gets avc denial when ssh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-40
changelog:
  - Resolves: rhbz#1219844 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-41
changelog:
  - Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled
                             subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-42
changelog:
  - Resolves: rhbz#1215765 - sssd nss responder gets wrong number of
                             secondary groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-45
changelog:
  - Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't
                             return all groups on first attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Tom Lane <tgl@redhat.com> 2:1.2.16-1
changelog:
  - Update to libpng 1.2.16
  Resolves: #211705, #216706, #227334
  - Separate libpng.a into a -static subpackage
  - Other minor packaging fixes per Fedora merge review
  Resolves: #226038


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Roland Dreier <rdreier@cisco.com> - 1.0.6-2
changelog:
  - Spec file cleanups from Fedora review: add BuildRequires for
    libibverbs, and move the static library to -static.


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable
  - Related: #697494


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - removed mailx from possible reporter list (still enabled as post-create event)
  - added python bindings to libreport client lib
  - honor reporters minimal rating
  - fixed (null) in bz summary
  - Related: #714045


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - improved compatibility with bugzilla
  - enabled bugzilla for libreport reports (analyzer=libreport)
  - Resolves: #725857


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-4
changelog:
  - further improvement in Anaconda compatibility rhbz#727243
  - warn silently when keyring is not available rhbz#725858
  - Resolves: #727243 #725858


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-5
changelog:
  - added the report cmdline tool rhbz#725660
  - fixed man pages version rhbz#728190
  - fixed text wrapping rhbz#728132
  - improved dump_dir detection rhbz#728166
  - fixed reporting from Anaconda newt ui rhbz#729566
  - added defualt config file for rhtsupport rhbz#729566
  - make reporters use default conf when -c is not used rhbz#729986
  - Resolves: #725660 #728190 #728132 #728166 #729566 #729986


author: Karel Klíč <kklic@redhat.com> - 2.0.5-6
changelog:
  - Added two patches (libreport-code-was-moved-to-abrt.git,
    libreport-fix-d-delete-option) from upstream making report-cli
    -d/--delete to remove DUMP_DIR after reporting. First patch also
    removes --list and --info and --full options, which were already
    moved to abrt-cli.
    Resolves: #726097
  - Added fallback text editor for editing multiline fields in Anaconda
    Resolves: #728479


author: Denys Vlasenko <dvlasenk@redhat.com> - 2.0.5-7
changelog:
  - Fix report-cli crash if config files are missing.
    Resolves: #730942
  - Pull in libreport-plugin-reportuploader on update
    (fixes a problem with "yum update" on RHEL system with old report package.
    Resolves: #732683


author: Nikola Pajkovsky <npajkovs@redhat.com> - 2.0.5-8
changelog:
  - Missing man pages of report and report.conf
    Resolves: #729957
  - Update translations
    Resolves: #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.5-9
changelog:
  - fixed make check rhbz#729686
  - fixed attaching anaconda-tb* rhbz#731389
  - Resolves: #729686 #731389


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.5-11
changelog:
  - disabled bugzilla rhbz#739936
  - own /etc/libreport/plugins/ rhbz#744782
  - removed unused patches to make rpmdiff happy
  - updated translation
  - Resolves: #739936 #744782


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-12
changelog:
  - updated translation rhbz#731037
  - search kbase before creating the ticket rhbz#743198
  - Resolves: #731037 #743198


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-15
changelog:
  - fix the kbase searching rhbz#743198
  - updated translation Related: #731037
  - Resolves: #743198 #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-1
changelog:
  - new upstream release
  - fixed typos in man
  - fixed handling of anaconda-tb file
  - generate valid xml file
  - Resolves: #759377, #758366, #746727


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-6
changelog:
  - opt kernel out of showing smolt information in abrt bug reports. rhbz#795548
  - ABRT mailx plugin on by default causes crashes being always labelled as reported rhbz#803618
  - pkg-config --cflags libreport includs -fPIC rhbz#803736
  - Coverity revealed memory leaks and possibly other issues rhbz#809416
  - GLib warnings by report-gtk when crash dir does not exist rhbz#813283
  - `report' tool requires current working directory to be a crash dir rhbz#817051
  - Searching for duplicate anaconda bugs while reporting exception against partner-bugzilla during install fails rhbz#820985
  - Undefined non-weak symbols rhbz#826745
  - ABRT has wrong URL in dialog
  Resolves: #809416,#813283,#817051,#826745,#820985,#795548,#803618,#803736


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-7
changelog:
  - don't warn about daemon connection when deleting a problem rhbz#799909
  - ignore non problem dirs when cleaning old problems rhbz#847291
  - Resolves: #799909, #847291


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.2-49
changelog:
  - Add missing defattrs in specfile
  - Fix upstream tarball url in specfile
  - Cleanup unapplied patch
  - related: #543948


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.1-56
changelog:
  - Update to 3.5.1
  - Security update that resolves CVE-2010-0728
  - Remove cifs.upcall and mount.cifs entirely
  - related: #556558


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-89
changelog:
  - Fix printcap handling and cups spooler interaction
  - resolves: #709070
  - Fix spoolss form index mixup (wrong papersize)
  - resolves: #703393


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-91
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #709641


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-131
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845760
  - Fix printing regression with builtin forms.
  - resolves: #860967


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-136
changelog:
  - Fix loading the imap hash module.
  - resolves: #864045
  - Fix raw printing support.
  - related: #857942


author: - Alexander Bokovoy <abokovoy@redhat.com> - 3.6.8-137
changelog:
  - Use alternatives to configure winbind_krb5_locator.so.
  - Move wbinfo and ntlm_auth to the correct package so samba4 can
    correctly handle conflicts.
  - resolves: #864950


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-152
changelog:
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #961932
  - Fix the username map optimization.
  - resolves: #952268
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955683
  - Fix write operations as guest with security = share
  - resolves: #953025
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949613
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948623
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #927383


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-153
changelog:
  - Fix overwrite of errno in check_parent_exists().
  - resolves: #966489
  - Fix dir code using dirfd() without vectoring trough VFS calls.
  - resolves: #971283


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-1
changelog:
  - resolves: #1003921 - Rebase Samba to 3.6.22.
  - resolves: #1035332 - Fix force user with 'security = user'.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-1
changelog:
  - resolves: #1073356 - Fix CVE-2013-4496, CVE-2012-6150 and CVE-2013-6442.
  - resolves: #1018038 - Fix CVE-2013-4408.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-2
changelog:
  - resolves: #1022534 - Do not build Samba with fam support.
  - resolves: #1059301 - Fix nbt query with many components.
  - resolves: #1057332 - Fix force user with guest account.
  - resolves: #1021706 - Fix %G substitution in 'template homedir'.
  - resolves: #1040472 - Fix group expansion in service path.
  - resolves: #1069570 - Fix memory leak reading printer list.
  - resolves: #1067607 - Fix wbinfo -i with one-way trusts.
  - resolves: #1050887 - Fix 100% CPU utilization in winbindd when trying to
                         free memory in winbindd_reinit_after_fork.
  - resolves: #1029000 - Fix 'force user' with 'security = ads'.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-15
changelog:
  - resolves: #1165750 - Fix guid retrieval for published printers.
  - resolves: #1163383 - Fix 'net ads join -k' with existing keytab entries.
  - resolves: #1195456 - Fix starting daemons on read only filesystems.
  - resolves: #1138552 - Fix CPU utilization when re-reading the printcap info.
  - resolves: #1144916 - Fix smbclient NTLMv2 authentication.
  - resolves: #1164336 - Document 'sharesec' command for
                         'access based share enum' option.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1290706 - CVE-2015-5299
  - related: #1290706 - CVE-2015-5296
  - related: #1290706 - CVE-2015-5252
  - related: #1290706 - CVE-2015-5330


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-0.pre20100121
changelog:
  - Push a prerelease version of 0.7.6 for testing in Beta1
  - Allow specifying -cpu model/flags for qemu
  - Resolves: rhbz#515213
  - Add async qemu machine protocol to libvirt based on JSON QEmu API
  - Resolves: rhbz#518701
  - Allow for static PCI address assignment to all devices
  - Resolves: rhbz#481924
  - expose qemu's -fda fat:floppy feature (525074)
  - configuration of virtual CPU topology (sockets, threads, cores) (538015)
  - rewrite file chown'ing code to use security driver framework (547545 )
  - cannot create a headless KVM virtual machine (548127)
  - Improve virsh schedular parameters documentation (548485)
  - Fail to delete a inactive pool using command "virsh pool-delete" (530985)
  - virsh man page updation for using container (lxc:///) (528709)
  - Command 'virsh vcpuinfo' returns libvirt error in RHEL6 with KVM (522829)
  - Expose information about host CPU flags in capabilities (518062)


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements
  - Resolves: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-2
changelog:
  - enable JSON interface, desactivated by default in 0.7.6
  - Resolves: rhbz#563189
  - make sure cgroups are installed and that cgconfig service is on
  - Resolves: rhbz#531263


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.6-3
changelog:
  - Fix balloon units handling in JSON mode (rhbz #566261)
  - Invoke qmp_capabilities at monitor startup (rhbz #563189)


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support (rhbz#553348)
  - async job handling (rhbz #515278)
  - virtio channel (rhbz#515281)
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - Improve libvirt error reporting for failed migrations (rhbz#528793)
  - qemu driver support CPU hotplug (rhbz#533138)
  - wrong (octal) device number for attaching USB devices (rhbz#549840)
  - cannot save domain into root_squashing nfs export (rhbz#558763)
  - assorted bug fixes and lots of cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100312
changelog:
  - preview for 0.7.8 rebase
  - Extra non upstream basic patch for spice and XQL
  - Resolves: rhbz#515264
  - Resolves: rhbz#515265
  - connected virsh dies with a SIGPIPE after libvirtd restart
  - Resolves: rhbz#526656
  - error when running logrotate on s/390x arch
  - Resolves: rhbz#547514


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100322
changelog:
  - preview #2 for 0.7.8 rebase
  - migration max downtime API
  - Resolves: rhbz#561935
  - allow suspend during migration
  - Resolves: rhbz#561934
  - support vhost net mode at qemu startup for net devices
  - Resolves: rhbz#540391
  - read-only device access support for qemu
  - Resolves: rhbz#556769
  - LSB compliance of libvirtd init script
  - Resolves: rhbz#538701
  - No domain vcpu information output when using JSON monitor
  - Resolves: rhbz#572051
  - "qemudDomainSetMaxMemory" does not work and should be removed
  - Resolves: rhbz#572146
  - after setvcpus, any virsh command will be hung
  - Resolves: rhbz#572193
  - virsh interactive terminal crash or hung
  - Resolves: rhbz#572376
  - virsh hangs after core dump
  - Resolves: rhbz#572544
  - Fix very slow file allocation on ext3


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100330
changelog:
  - preview #3 for 0.7.8 rebase
  - kvm hpet support
  - Resolves: rhbz#576973
  - hook scripts support
  - Resolves: rhbz#569965
  - Need to add time keeping abstraction
  - Resolves: rhbz#557285
  - notification of guest reboot
  - Resolves: rhbz#527572
  - Ability to preserve RTC clock adjustments across guest reboots
  - Resolves: rhbz#515273
  - Notifications of guest stopping due to disk I/O errors
  - Resolves: rhbz#515270
  - VNC ticketing support (524623) spice still needed
  - VNC client disconnect/connect events (515268) spice still needed


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-0.pre20100407
changelog:
  - preview #4 for 0.8.0 rebase
  - snapshot API
  - domain with disk on root-squashing nfs and security driver mismatch
  - Resolves: rhbz#578630
  - Fail to read xml when restore domain
  - Resolves: rhbz#577719
  - loop "virsh cd" in virsh interactive terminal generate unknown error
  - Resolves: rhbz#572380
  - support setting qemu's -drive werror=stop/enospc with configuration
  - Resolves: rhbz#526231


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - official 0.8.0 upstream release
  - Resolves: rhbz#558761
  - new patch set of patches for RHEL-6 SPICE and addons
  - Enable QMP/ JSON mode in the QEMU monitor
  - Resolves: rhbz#563189
  - Support configuration of SPICE as a graphics protocol
  - Resolves: rhbz#515265
  - vnc (and spice) ticketing
  - Resolves: rhbz#524623
  - enable spice tls encryption in domainXML, and which channels are encrypted
  - Resolves: rhbz#573382
  - notification of VNC/SPICE client disconnect/connect events
  - Resolves: rhbz#515268


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.0-2
changelog:
  - Refresh SPICE patches to fix test failures
  - Related: rhbz#515265, rhbz#524623, rhbz#573382
  - Enable test suite during build, disabling tests that don't work in mock
  - Related: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-3
changelog:
  - Build ESX support in
  - Resolves: rhbz#581966
  - a batch of network filter fixes, IBM request and upstream fixes
  - Resolves: rhbz#579993
  - couple of patchs to fix device handling with QMP
  - Related: rhbz#563189
  - fix python binding for snapshotting
  - spec file fixes for nwfiler build and RHEL-5 virt-v2v specific rebuild


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-4
changelog:
  - Fix libvirtd startup when avahi failed to look up local host name
  - CPU selection fixes
  - Resolves: rhbz#581627
  - fix migration poll value
  - Resolves: rhbz#584928
  - crash dump job caused libvirt hang
  - Resolves: rhbz#580853
  - Fix initial VCPU pinning in qemu driver
  - Resolves: rhbz#578434
  - fix cpu hotplug command names


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-2
changelog:
  - Don't wipe generated iface target in active domains (588046)
  - Fix LXC domain lookup and error handling (586361)
  - Fix a protocol breakage introduced in libvirt-0.8.0
  - Add support for nic hotplug in QEMU/KVM (589978)
  - Seemless migration of spice graphics clients (589989)
  - fix build with ESX support
  - Resolves: rhbz#581966
  - fix multilib problem (587231)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-3
changelog:
  - missing python bindings due to older XML api
  - Resolves: rhbz#589453
  - Fix two possible crashes in JSON event dispatch
  - Resolves: rhbz#586353
  - Fix handling of disk backing stores with cgroups
  - Resolves: rhbz#581476
  - virsh schedinfo --set error handling on unknow parameters
  - Resolves: rhbz#586632
  - Apply extra patches for nwfilter
  - Resolves: rhbz#588554
  - Fix hang during concurrent guest migrations
  - Resolves: rhbz#582278


author: Dave Allan <dallan@redhat.com> - 0.8.1-5
changelog:
  - Don't reset user/group/security label for any files on shared filesystems
  - Resolves: rhbz#578889
  - Make saved state labelling ignore the dynamic_ownership parameter
  - Resolves: rhbz#588562
  - Fix & protect against NULL pointer dereference in monitor code
  - Resolves: rhbz#591076
  - Fix virFileResolveLink return value
  - Resolves: rhbz#591363
  - Add support for SSE4.1 and SSE4.2 CPU features
  - Resolves: rhbz#592977


author: Dave Allan <dallan@redhat.com> - 0.8.1-6
changelog:
  - Support seamless migration of SPICE graphics clients (refresh)
  - Resolves: rhbz#591551
  - Fix swapping of PCI vendor & product names in udev backend
  - Resolves: rhbz#578419
  - Fix cgroup setup code to cope with root squashing NFS
  - Resolves: rhbz#593193
  - Fix startup error reporting race
  - Resolves: rhbz#591272


author: Dave Allan <dallan@redhat.com> - 0.8.1-7
changelog:
  - Fix sign extension error in libvirt's parsing of qemu options
  - Resolves: rhbz#592070
  - Graceful shutdown/suspend of libvirt guests on host shutdown
  - Resolves: rhbz#566647
  - Fix pci device hotplug
  - Resolves: rhbz#572867
  - Support 802.1Qbg and bh
  - Resolves: rhbz#532760, rhbz#570949, rhbz#590110, rhbz#570923


author: Dave Allan <dallan@redhat.com> - 0.8.1-8
changelog:
  - Ensure virtio serial has stable addressing
  - Resolves: rhbz#586665
  - SELinux socket labelling on QEMU monitor socket for MLS
  - Resolves: rhbz#593739
  - Fix enumeration of partitions in disks with a trailing digit in path
  - Resolves: rhbz#593785
  - Enable probing of VPC disk format type
  - Resolves: rhbz#597981
  - Delete UNIX domain sockets upon daemon shutdown
  - Resolves: rhbz#598163
  - Fix Migration failure 'canonical hostname pointed to localhost'
  - Resolves: rhbz#589864
  - Fix up the python bindings for snapshotting
  - Resolves: rhbz#591839
  - Sanitize pool target paths
  - Resolves: rhbz#593565
  - Prevent host network conflicts
  - Resolves: rhbz#594494
  - Support 802.1Qbg and bh (vnlink/VEPA) (refresh)
  - Resolves: rhbz#590110


author: Dave Allan <dallan@redhat.com> - 0.8.1-9
changelog:
  - Touch libvirt-guests lockfile
  - Resolves: rhbz#566647
  - Add qemu.conf option for clearing capabilities
  - Resolves: rhbz#593903
  - Add support for launching guest in paused state
  - Resolves: rhbz#589465
  - Add virsh vol-pool command
  - Resolves: rhbz#602217
  - Add vol commands to virsh man page
  - Resolves: rhbz#600640
  - Remove bogus migrate error messages
  - Resolves: rhbz#601575


author: Dave Allan <dallan@redhat.com> - 0.8.1-10
changelog:
  - Add multiIQN XML output
  - Resolves: rhbz#587700
  - Fix udev node device parent-child device relationships
  - Resolves: rhbz#593995
  - Fix leaks in udev device add/remove
  - Resolves: rhbz#595490
  - Fix device destroy return value
  - Resolves: rhbz#597998
  - Update nodedev scsi_host data before use
  - Resolves: rhbz#600048
  - Display wireless devices in nodedev list
  - Resolves: rhbz#604811
  - Show pool and domain persistence
  - Resolves: rhbz#603696
  - Fix cleanup after failing to hotplug a PCI device
  - Resolves: rhbz#605168
  - Add '-nodefconfig' command line arg to QEMU
  - Resolves: rhbz#602778
  - Switch to private redhat namespace for QMP I/O error reason
  - Resolves: rhbz#586353
  - Improve error messages for missing drivers & unsupported functions
  - Resolves: rhbz#595609
  - macvtap: get interface index if not provided
  - Resolves: rhbz#605187
  - Fix leaks in remote code
  - Resolves: rhbz#603442
  - Add an optional switch --uuid to the virsh vol-pool command
  - Resolves: rhbz#604929
  - Change per-connection hashes to be indexed by UUIDs
  - Resolves: rhbz#603494
  - Run virsh from libvirt-guests script with /dev/null on stdin
  - Resolves: rhbz#606314
  - Increase dd block size to speed up domain save
  - Resolves: rhbz#601775
  - Fix reference counting bugs on qemu monitor
  - Resolves: rhbz#602660
  - Add missing action parameter in IO error callback
  - Resolves: rhbz#607157


author: Dave Allan <dallan@redhat.com> - 0.8.1-11
changelog:
  - Do not block during incoming migration
  - Resolves: rhbz#579440
  - Label serial devices
  - Resolves: rhbz#585249
  - parthelper: fix compilation without optimization
  - Related: rhbz#593785
  - Fix name/UUID uniqueness checking in storage/network
  - Resolves: rhbz#593951
  - Don't squash file permissions when migration fails
  - Resolves: rhbz#607922
  - Properly handle 'usbX' sysfs files
  - Resolves: rhbz#603867
  - add pool support to vol-key command & improve vol commands help
  - Resolves: rhbz#598365
  - document attach-disk better
  - Resolves: rhbz#601143
  - Config iptables to allow tftp port if network <tftp> element exists
  - Resolves: rhbz#607294
  - Fix failure to generate python bindings when libvirt.h.in is updated
  - Related: rhbz#589465
  - Allow all interface names
  - Resolves: rhbz#593907
  - Fix nodedevice refcounting
  - Resolves: rhbz#608753
  - Move nwfilter functions inside extern C and fix a locking bug
  - Resolves: rhbz#597391
  - Fix failure to restore qemu domains with selinux enforcing
  - Resolves: rhbz#590975
  - Check for presence of qemu -nodefconfig option before using it
  - Resolves: rhbz#608859


author: Dave Allan <dallan@redhat.com> - 0.8.1-12
changelog:
  - Don't invoke destroy callback from qemuMonitorOpen() failure paths
  - Resolves: rhbz#609060
  - virFileResolveLink: guarantee an absolute path
  - Resolves: rhbz#608092
  - SPICE patches have translatable strings without format args
  - Resolves: rhbz#608917
  - No way to pass disk format type to pool-define-as nor pool-create-as
  - Resolves: rhbz#597790
  - Fix enforcement of direction of traffic for rules describing incoming traffic
  - Resolves: rhbz#606889
  - Clarify virsh help pool-create-as text
  - Resolves: rhbz#609044


author: Dave Allan <dallan@redhat.com> - 0.8.1-14
changelog:
  - Support virtio disk hotplug in JSON mode
  - Resolves: rhbz#573946
  - Fix QEMU monitor JSON crash
  - Resolves: rhbz#604585
  - CVE-2010-2237 CVE-2010-2238 CVE-2010-2239
  - Resolves: rhbz#607817
  - CVE-2010-2242 Apply a source port mapping to virtual network masquerading
  - Resolves: rhbz#608049
  - Fix hang if QEMU exits (almost) immediately
  - Resolves: rhbz#610056
  - Support new CPU models provided by qemu-kvm
  - Resolves: rhbz#605830
  - Fix comparison of two host CPUs
  - Resolves: rhbz#611401
  - Don't mess with the CPU returned by arch driver
  - Resolves: rhbz#613014
  - Fail when CPU type cannot be detected from XML
  - Resolves: rhbz#613760
  - Use -nodefconfig when probing for CPU models
  - Resolves: rhbz#613764
  - cpuCompare: Fix crash on unexpected CPU XML
  - Resolves: rhbz#613765
  - Properly report failure to create raw storage volume files
  - Related: rhbz#547543
  - Fix IOErrorReasonCallback python bindings
  - Related: rhbz#586353
  - Parthelper: canonicalize block device paths
  - Related: rhbz#593785


author: Dave Allan <dallan@redhat.com> - 0.8.1-16
changelog:
  - Make PCI device ordering consistent with older releases
  - Resolves: rhbz#592026
  - Fix libvirtd hang during concurrent bi-directional migration
  - Resolves: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-17
changelog:
  - Set a stable & high MAC addr for guest TAP devices
  - Resolves: rhbz#616517
  - Fix bogus commit of -16 patches
  - Related: rhbz#592026
  - Related: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j2
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-28.el6
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#561935)
  - Make SASL work over UNIX domain sockets (rhbz#641687)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#643407)
  - Fix save/restore on root_squashed NFS (rhbz#643884)
  - Fix race on multiple migration (rhbz#638285)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Support forcing a CDROM eject (rhbz#626305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-29.el6
changelog:
  - spec file cleanups (rhbz#649523)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#659310)
  - Fix funny error in clock-variable (rhbz#660194)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Ensure device is deleted from guest after unplug (rhbz#644015)
  - Distinguish between QEMU domain shutdown and crash (rhbz#656845)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-1.el6
changelog:
  - Rebased to upstream 0.8.7 (rhbz#653985)
  - The following bugs got fixed by the rebase:
      rhbz#586124, rhbz#595350, rhbz#611793, rhbz#611822, rhbz#617439,
      rhbz#620363, rhbz#626873, rhbz#627143, rhbz#628772, rhbz#639595,
      rhbz#639603, rhbz#656795, rhbz#658657, rhbz#659855, rhbz#660706,
      rhbz#664406, rhbz#665446


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-2.el6
changelog:
  - Fix spec file which was not fully rebased to 0.8.7 (rhbz#653985, rhbz#660706)
  - Skip IB700 watchdog device when assigning PCI slots (rhbz#667091)
  - Improve error reporting when parsing dhcp info (rhbz#653300)
  - Don't chown saved image back to root if dynamic_ownership=0 (rhbz#661720)
  - Fix core dumps if unix_sock_group is set (rhbz#623166)
  - Add support for Westmere CPU model (rhbz#656248)
  - Add XML config switch to enable/disable vhost-net support (rhbz#643050)
  - Enable tuning of qemu network tap device "sndbuf" size (rhbz#665293)
  - Support for explicit boot device ordering (rhbz#646895)
  - Avoid qemu holding migration fd indefinitely (rhbz#620363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-3.el6
changelog:
  - Report error if invalid type specified for character device (rhbz#638968)
  - Improve log for domain related APIs (rhbz#640202)
  - Reject SDL graphic if it's not supported by qemu (rhbz#633326)
  - Don't lose track of events when callbacks are slow (rhbz#624252)
  - Fail if per-device boot is used but deviceboot is not supported (rhbz#670399)
  - Avoid sending STOPPED event twice (rhbz#666158)
  - Fix issues introduced by dependency patches for rhbz#646895


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-4.el6
changelog:
  - Fix event-handling data race (rhbz#671567)
  - Add support for VNC over a unix domain socket (rhbz#651415)
  - Support intel 'ich6' model (rhbz#648486)
  - Do not use virtio-serial port 0 for generic ports (rhbz#670394)
  - Set SELinux context label of pipes used for qemu migration (rhbz#667756)
  - Support customizable x509 certificate paths for client (rhbz#629510)
  - Round up capacity for LVM volume creation (rhbz#670529)
  - Show error prompt when trying to managed save a shutoff domain (rhbz#672449)
  - Report more proper error for unsupported graphics (rhbz#671319)
  - Expand the man page text for virsh setmaxmem (rhbz#622534)
  - Fix event-handling allocation crash (rhbz#671564)
  - Require --mac to avoid detach-interface ambiguity (rhbz#671050)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-5.el6
changelog:
  - Docs for customizable x509 certificate paths for client (rhbz#629510)
  - Fix tests for VNC over a unix domain socket (rhbz#651415)
  - Fix problems with peer-to-peer migration (rhbz#673434)
  - Fix tunneled migration broken since 0.8.7-2 (rhbz#672199)
  - Update docs for cpu_shares setting (rhbz#641187)
  - Fix possible hang if SASL is used (rhbz#672226)
  - Cancel migration in progress when virsh gets Ctrl-C (rhbz#635353)
  - Enhance virsh migrate command (rhbz#619039)
  - Support for specifying AIO mode for qemu disks (rhbz#591703)
  - Don't leave domain paused after restore (rhbz#670278)
  - Fix possible deadlock/crash in qemu driver (rhbz#673588)
  - Add shortcut for qemu HMP pass through (rhbz#628940)
  - Fix error message when attach device fails (rhbz#675030)
  - Support for booting from assigned PCI devices (rhbz#646895)
  - Improve handling of unlimited value for memory tunables (rhbz#669069)
  - Add smartcard support (rhbz#641834)
  - Remove some RHEL-specific patches which are no longer required (rhbz#653985)
  - Support for disabling/enabling KSM per domain (rhbz#635419)
  - Add --all flag to virsh freecell command (rhbz#653530)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-6.el6
changelog:
  - Fix typo in parsing of spice 'auth' data (rhbz#676374)
  - Fix attach-interface regression (rhbz#676686)
  - Block I/O tunables via blkio cgroups controller (rhbz#632492)
  - Support SCSI RAID type & lower log level for unknown types (rhbz#675771)
  - Only initialize/cleanup libpciaccess once (rhbz#675698)
  - Imprint all logs with version + package build information (rhbz#673226)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-7.el6
changelog:
  - Properly escape special characters in domain names (rhbz#676908)
  - Fix enum type declaration (rhbz#628940)
  - Fix cleanup on VM state after failed QEMU startup (rhbz#673588)
  - Fix XML generation for smartcards (rhbz#677308)
  - Ignore failure of "qemu -M ?" on older qemu (rhbz#676563)
  - Fix typo in setting up SPICE passwords (rhbz#677709)
  - Avoid NULL dereference in virDomainMemoryStats (rhbz#677484)
  - Avoid NULL dereference on error in qemu driver (rhbz#677493)
  - Fix error message when saving a shutoff domain (rhbz#677547)
  - Create enough volumes for mpath pool (rhbz#677231)
  - Allow to delete device mapper disk partition (rhbz#611443)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-8.el6
changelog:
  - Fix --all flag of virsh freecell to really show all cells (rhbz#653530)
  - Add txmode attribute to interface XML for virtio backend (rhbz#629662)
  - Give each virtual network bridge its own fixed MAC address (rhbz#609463)
  - Fix virsh snapshot-list with --quiet option (rhbz#678833)
  - Delay IFF_UP'ing 802.1Qbh interface until migration final stage (rhbz#678826)
  - Fix several memory bugs (rhbz#679164)
  - Fix virt-pki-validate when CERTTOOL is missing (rhbz#679153)
  - Fix memory corruption in virFileAbsPath (rhbz#680281)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.1-1.el6
changelog:
  - Rebased to upstream 0.9.1 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#587276, rhbz#591058, rhbz#592170, rhbz#598792, rhbz#673814,
      rhbz#677228, rhbz#681458, rhbz#682237, rhbz#692745, rhbz#693932,
      rhbz#694382, rhbz#695653, rhbz#698071, rhbz#698197, rhbz#698208,
      rhbz#698490, rhbz#701305


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.2-1.el6
changelog:
  - Rebased to upstream 0.9.2 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#569567, rhbz#691830, rhbz#607526, rhbz#609650, rhbz#632495,
      rhbz#640603, rhbz#658713, rhbz#669549, rhbz#677229, rhbz#678548,
      rhbz#640603, rhbz#682237, rhbz#683005, rhbz#684848, rhbz#688859,
      rhbz#690695, rhbz#692355, rhbz#693203, rhbz#694516, rhbz#697650,
      rhbz#698133, rhbz#702044, rhbz#704124, rhbz#704144, rhbz#705405,
      rhbz#706869, rhbz#706883, rhbz#706966, rhbz#707173, rhbz#707257,
      rhbz#707298, rhbz#709576, rhbz#709776, rhbz#710150, rhbz#711151


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-1.el6
changelog:
  - Rebased to upstream 0.9.3 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#591974, rhbz#632499, rhbz#641087, rhbz#664629, rhbz#679668,
      rhbz#682121, rhbz#693648, rhbz#693650, rhbz#693661, rhbz#698340,
      rhbz#698825, rhbz#698861, rhbz#701394, rhbz#707439, rhbz#707530,
      rhbz#715355, rhbz#716826, rhbz#717203, rhbz#718143, rhbz#712050,
      rhbz#715184


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-2.el6
changelog:
  - Fix mistaken order of server cert/key parameters in constructor (rhbz#719838)
  - qemu: Don't chown files on NFS share if dynamic_ownership is off (rhbz#716478)
  - util: Don't try to fchown files opened as non-root (rhbz#707257)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-4.el6
changelog:
  - storage: Avoid memory leak on metadata fetching (rhbz#707155)
  - graphics: Add support for action_if_connected in qemu (rhbz#707212)
  - qemu: Save domain status ASAP after creating qemu process (rhbz#707894)
  - bios: Add support for SGA (rhbz#711598)
  - pci: Initialize state values on reattach (rhbz#713697)
  - Keep consistence between code and doc on log level and usage (rhbz#716888)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-8.el6
changelog:
  - libvirt crash when running domains and vdsm is restarted (rhbz#723811)
  - connect to hypervisor with unconfigured tls/tcp connection pbm (rhbz#723442)
  - virsh list produced segmentation fault when libvirtd is not up (rhbz#723843)
  - clientcert.pem validation failure cause libvirtd crash (rhbz#723881)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc1.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 1 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#603039, rhbz#632499, rhbz#632760, rhbz#643947, rhbz#678027,
      rhbz#697742, rhbz#697841, rhbz#704836, rhbz#707530, rhbz#720350,
      rhbz#720889, rhbz#721335, rhbz#722862


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc2.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 2 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#667624, rhbz#669586, rhbz#682084, rhbz#707155, rhbz#707212,
      rhbz#725322, rhbz#725935, rhbz#725950


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-1.el6
changelog:
  - Rebased to upstream 0.9.4 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#634653, rhbz#707212, rhbz#722806, rhbz#723862, rhbz#726304,
      rhbz#726398, rhbz#727047, rhbz#727094


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-2.el6
changelog:
  - daemon: Unlink unix socket paths on shutdown (rhbz#725702)
  - rpc:Fix sasl session relocking intead of unlocking it (rhbz#729198)
  - network: Eliminate lag in updating dnsmasq hosts files (rhbz#727982)
  - Don't mount /dev for application containers (rhbz#728835)
  - support connected parameter in set_password (rhbz#707212)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-3.el6
changelog:
  - Fix large files support (rhbz#728992)
  - qemu: Avoid overwriting errors from virGetHostname (rhbz#729567)
  - qemu: Fix -chardev udp if parameters are omitted (rhbz#689761)
  - managedsave: Prohibit use on transient domains (rhbz#729714)
  - nwfilter: Tolerate disappearing interfaces while instantiating filter (rhbz#729945)
  - docs: Describe new virtual switch configuration in network XML docs (rhbz#643947)
  - storage: Directory shouldn't be listed as type 'file' (rhbz#727088)
  - virsh: Add dir type for listing volumes with vol-list (rhbz#727088)
  - qemu: Avoid crash on process attach (rhbz#730615)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-4.el6
changelog:
  - Bugfix: Check stdoutWatch before removing the handler. (rhbz#730600)
  - daemon: Fix regression of libvirtd reloading support (rhbz#730428)
  - libvirtd.init.in: Stop/restart() - wrong return value in case of failure (rhbz#730510)
  - Add API for duplicating a socket/client file descriptor (rhbz#720269)
  - Add backlog parameter to virNetSocketListen (rhbz#720269)
  - Support changing UNIX socket owner in virNetSocketNewListenUNIX (rhbz#720269)
  - qemu: Refactor do{Tunnel, Native}Migrate functions (rhbz#720269)
  - qemu: Use virNetSocket for tunneled migration (rhbz#720269)
  - qemu: Use fd: protocol for migration (rhbz#720269)
  - qemu: Support event_idx parameter for virtio disk and net devices (rhbz#725448)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-5.el6
changelog:
  - patch problem for seamless SPICE migration (rhbz#730753)
  - macvtap: Fix getPhysfn to get the PF of a direct attach network interface (rhbz#732082)
  - SSL spice session can't be kept during migration (rhbz#729874)
  - Storage driver should flush host cache after cloning volumes (rhbz#689416)
  - Documentation for CFS bandwidth limiting cgroup (rhbz#692769)
  - libvirt error message should show the uri content but not (null) (rhbz#730244)
  - libvirtd.conf error causes libvirtd to exit silently (rhbz#728654)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-6.el6
changelog:
  - daemon: Move TLS initialization to virInitialize (rhbz#732893)
  - Fix command test wrt gnutls initialize & fix debugging (rhbz#732893)
  - qemu: Init reattaching related members pciDevice before reattach (rhbz#728203)
  - qemu: error if qemu monitor command not found for BlockJob (rhbz#727502)
  - virsh: error if specified bandwidth is invalid for blockjob (rhbz#727502)
  - util: Only fchown newly created files in virFileOpenAs (rhbz#534010)
  - screenshot: Implement multiple screen support (rhbz#710489)
  - security: Rename SetSocketLabel APIs to SetDaemonSocketLabel (rhbz#731243)
  - security: Introduce SetSocketLabel (rhbz#731243)
  - qemu: Correctly label migration TCP socket (rhbz#731243)
  - snapshot: Don't leak resources on qemu snapshot failure (rhbz#733499)
  - Fix memory leak while scanning snapshots (rhbz#674537)
  - qemu: Minor formatting cleanup (rhbz#674537)
  - Swap virDomain and virDomainSnapshot declaration (rhbz#674537)
  - snapshot: Only pass snapshot to qemu command line when reverting (rhbz#674537)
  - snapshot: Track current snapshot across restarts (rhbz#674537)
  - send-key: Fix scan keycode map (rhbz#733597)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-7.el6
changelog:
  - qemu: Properly label outgoing pipe for tunneled migration (rhbz#733998)
  - snapshot: Forbid snapshot on autodestroy domain (rhbz#733806)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-8.el6
changelog:
  - qemu: Fix a regression of domain save (rhbz#735011)
  - virsh: Improve send-key documentation (rhbz#699847)
  - start: Allow discarding managed save (rhbz#730750)
  - virsh: Support 'virsh start --force-boot' on older servers (rhbz#730750)
  - maint: Fix comment typos (rhbz#730750)
  - qemu: Refactor file opening (rhbz#730750)
  - qemu: Detect incomplete save files (rhbz#730750)
  - virsh: Avoid memory leak on cmdVolCreateAs (rhbz#735008)
  - snapshot: Fix corner case on OOM during creation (rhbz#674537)
  - Ensure stream is aborted when exiting console (rhbz#731673)
  - following for (rhbz#731583, rhbz#731579, rhbz#731584, rhbz#731673):
  - Ensure client streams are closed when marking a client for close
  - Fix race condition in abort of stream
  - Tweak debugging message in RPC client code
  - Don't attempt to read from a stream if it is closed
  - Ensure async packets never get marked for sync replies
  - Ignore unused streams in virStreamAbort
  - rpc: Don't close connection if program is unknown
  - rpc: Fix a typo in debugging log in virNetServerProgramSendStreamData
  - stream: Remove redundant reference to client while sending stream data
  - Fix memory leak dispatching domain events
  - Avoid use-after-free on streams, due to message callbacks
  - Fix tracking of RPC messages wrt streams
  - Fix parted sector size assumption (rhbz#735441)
  - Fix incorrect path length check in sanlock lockspace setup (rhbz#735443)
  - Fix sanlock socket security labelling (rhbz#735442)
  - Remove bogus virSecurityManagerSetProcessFDLabel method (rhbz#735442)
  - security: Fix build (rhbz#735442)
  - Fix keymap used to talk with QEMU (rhbz#632499)
  - virsh: Fix snapshot-create-as to handle arbitrary names (rhbz#735495)
  - virsh: Add virsh snapshot-current --name (rhbz#735495)
  - virsh: Add snapshot-parent (rhbz#735495)
  - virsh: Don't reject undefine on active domain (rhbz#735495)
  - virsh: Fix logic bug (rhbz#735495)
  - virsh: Fix dead store (rhbz#735495)
  - virsh: Tweak misleading wording (rhbz#735495)
  - virsh: Concatenate qemu-monitor-command arguments (rhbz#735495)
  - maint: Treat more libxml2 functions as free-like (rhbz#735495)
  - xml: Add another convenience function (rhbz#735495)
  - maint: Simplify lots of libxml2 clients (rhbz#735495)
  - virsh: Add list --managed-save (rhbz#735495)
  - virsh: Prefer unsigned flags (rhbz#735495)
  - snapshot: Add snapshot-list --parent to virsh (rhbz#735495)
  - qemu: Allow to undefine a running domain (rhbz#735498)
  - test: Allow to undefine a running domain (rhbz#735498)
  - build: Fix typo in recent test patch (rhbz#735498)
  - test: Rewrite test to match change in behavior (rhbz#735498)
  - virsh: Properly interleave shared stdout and stderr (rhbz#735498)
  - snapshot: Better events when starting paused (rhbz#733762)
  - snapshot: Fine-tune ability to start paused (rhbz#733762)
  - snapshot: Expose --running and --paused in virsh (rhbz#733762)
  - snapshot: Fine-tune qemu saved images starting paused (rhbz#733762)
  - snapshot: Improve reverting to qemu paused snapshots (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Speed up snapshot location (rhbz#733529)
  - snapshot: Avoid crash when deleting qemu snapshots (rhbz#733529)
  - snapshot: Track current domain across deletion of children (rhbz#733529)
  - snapshot: Simplify acting on just children (rhbz#733529)
  - snapshot: Allow deletion of just snapshot metadata (rhbz#735457)
  - snapshot: Let qemu discard only snapshot metadata (rhbz#735457)
  - snapshot: Identify which snapshots have metadata (rhbz#735457)
  - snapshot: Reflect new dumpxml and list options in virsh (rhbz#735457)
  - snapshot: Identify qemu snapshot roots (rhbz#735457)
  - snapshot: Allow recreation of metadata (rhbz#735457)
  - snapshot: Refactor virsh snapshot creation (rhbz#735457)
  - snapshot: Improve virsh snapshot-create, add snapshot-edit (rhbz#735457)
  - snapshot: Add qemu snapshot creation without metadata (rhbz#735457)
  - snapshot: Add qemu snapshot redefine support (rhbz#735457)
  - vbox, xenapi: Add virDomainUndefineFlags (rhbz#735457)
  - snapshot: Prevent stranding snapshot data on domain destruction (rhbz#735457)
  - snapshot: Teach virsh about new undefine flags (rhbz#735457)
  - snapshot: Refactor some qemu code (rhbz#735457)
  - snapshot: Cache qemu-img location (rhbz#735457)
  - snapshot: Support new undefine flags in qemu (rhbz#735457)
  - snapshot: Prevent migration from stranding snapshot data (rhbz#735457)
  - snapshot: Refactor domain xml output (rhbz#735553)
  - snapshot: Allow full domain xml in snapshot (rhbz#735553)
  - snapshot: Correctly escape generated xml (rhbz#735553)
  - snapshot: Update rng to support full domain in xml (rhbz#735553)
  - snapshot: Store qemu domain details in xml (rhbz#735553)
  - schedinfo: Update man page about virsh schedinfo command (unknown)
  - snapshot: Additions to domain xml for disks (rhbz#638510)
  - snapshot: Reject transient disks where code is not ready (rhbz#638510)
  - snapshot: Introduce new deletion flag (rhbz#638510)
  - snapshot: Expose new delete flag in virsh (rhbz#638510)
  - snapshot: Allow halting after snapshot (rhbz#638510)
  - snapshot: Expose halt-after-creation in virsh (rhbz#638510)
  - snapshot: Support extra state in snapshots (unknown)
  - snapshot: Add <disks> to snapshot xml (rhbz#638510)
  - snapshot: Also support disks by path (rhbz#638510)
  - snapshot: Add virsh domblklist command (rhbz#638510)
  - snapshot: Add flag for requesting disk snapshot (rhbz#638510)
  - snapshot: Wire up disk-only flag to snapshot-create (rhbz#638510)
  - snapshot: Reject unimplemented disk snapshot features (rhbz#638510)
  - snapshot: Make it possible to audit external snapshot (rhbz#638510)
  - snapshot: Wire up new qemu monitor command (rhbz#638510)
  - snapshot: Wire up live qemu disk snapshots (rhbz#638510)
  - snapshot: Use SELinux and lock manager with external snapshots (rhbz#638510)
  - daemon: Create priority workers pool (rhbz#692663)
  - qemu: Introduce job queue size limit (rhbz#692663)
  - qemu: Deal with stucked qemu on daemon startup (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-10.el6
changelog:
  - virterror: Fix error message for VIR_ERR_INVALID_ARG (rhbz#689388)
  - remote: Refuse connecting to remote socket (rhbz#689388)
  - Threadpool: Initialize new dynamic workers (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-11.el6
changelog:
  - blockinfo: Fix qemu regression in handling disk name (rhbz#736603)
  - doc: Fix incorrect option in send-key (rhbz#736297)
  - virsh: Fix typo in opts_send_key (rhbz#736297)
  - rpc: Avoid memory leak on virNetTLSContextValidCertificate (rhbz#735650)
  - tests: Avoid memory leak on testTLSSessionInit (rhbz#735650)
  - qemu: Fix seamless SPICE migration with older qemu (rhbz#730753)
  - snapshot: Fix regression with system checkpoints (rhbz#736682)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-12.el6
changelog:
  - selinux: Detect virt_use_nfs boolean set (rhbz#589922)
  - virnetsocket: Pass KRB5CCNAME env variable (rhbz#737176)
  - snapshot: Fix double free of qemuImgBinary (rhbz#737010)
  - qemu_api: Modify apibuild.py to generate docs for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile for subdir docs (rhbz#736040)
  - qemu_api: Add comments for API virDomainQemuMonitorCommand (rhbz#736040)
  - qemu_api: Add override XML and C files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Py binding generator to generate files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile to generate libvirtmod_qemu lib (rhbz#736040)
  - qemu_api: Update libvirt spec file (rhbz#736040)
  - Remove two references to files not generated (rhbz#736040)
  - qemu_api: Doc improvements (rhbz#736040)
  - python: Fix libvirt.py generation to include virterror info (rhbz#736040)
  - snapshot: New APIs for inspecting snapshot object (rhbz#735457)
  - snapshot: Use new API for less work (rhbz#735457)
  - snapshot: ABI stability must include memory sizing (rhbz#735553)
  - spec: Require augeas for sanlock (rhbz#738314)
  - sanlock: Add missing test command in virt-sanlock-cleanup.in (rhbz#738534)
  - snapshot: Tweak snapshot-create-as diskspec docs (rhbz#738411)
  - qemu: Hold conn open for all threads started by qemuProcessReconnectAll (rhbz#738778)
  - rpc: Convert unknown procedures to VIR_ERR_NO_SUPPORT (rhbz#738439)
  - Prevent crash from dlclose() of libvirt.so (rhbz#739167)
  - doc: Add statment about permissions needed to do a core dump (rhbz#738146)
  - snapshot: Affect persistent xml after disk snapshot (rhbz#738676)
  - snapshot: Allow disk snapshots of qcow2 disks (rhbz#738676)
  - qemu: Prevent disk corruption on domain shutdown (rhbz#734773)
  - qemu: Introduce shutdown reason for paused state (rhbz#734773)
  - qemu: Fix shutoff reason when domain crashes (rhbz#739641)
  - qemu: Properly detect crash of a rebooted domain (rhbz#739641)
  - qemu: Avoid memory leak (rhbz#739704)
  - remote: Avoid memory leak (rhbz#739704)
  - util: Avoid memory leak (rhbz#739704)
  - Fix memory leak parsing 'relabel' attribute in domain security XML (rhbz#739704)
  - Don't leak memory if a cgroup is mounted multiple times (rhbz#739704)
  - network: Eliminate potential memory leak on parse failure (rhbz#739704)
  - virsh: doc: Fix supported driver types for attach-disk command (rhbz#738970)
  - Do not log invalid operations in libvirtd logs (rhbz#590807)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-13.el6
changelog:
  - Fix crash on events due to allocation errors (rhbz#737881)
  - remote: Fix crash on OOM (rhbz#737881)
  - Fix persistent migration config save (rhbz#738148)
  - qemu: Transfer inactive XML among cookie (rhbz#738148)
  - storage: Ensure the device path exists before refreshing disk pool (rhbz#611442)
  - Store max migration bandwidth in qemuDomainObjPrivate struct (rhbz#740099)
  - Save migration speed in qemuDomainMigrateSetMaxSpeed (rhbz#740099)
  - Set qemu migration speed unlimited when migrating to file (rhbz#740099)
  - Use max bandwidth from qemuDomainObjPrivate struct when migrating (rhbz#740099)
  - build: Silence warning on 32-bit build (rhbz#740099)
  - conf: Assign newDef of active domain as persistent conf if it is NULL (rhbz#728428)
  - qemu: Avoid dereferencing a NULL pointer (rhbz#739704)
  - sanlock: Fix memory leak (rhbz#739704)
  - virsh: Fix regression in argv parsing (rhbz#740168)
  - snapshot: Fix logic bug in qemu undefine (rhbz#735457)
  - snapshot: Prepare to remove transient snapshot metadata (rhbz#735457)
  - snapshot: Remove snapshot metadata on transient exit (rhbz#735457)
  - snapshot: Also delete empty directory (rhbz#735457)
  - virsh: Do not ignore the specified flags for cmdSaveImageDefine (rhbz#740508)
  - selinux: Correctly report warning if virt_use_nfs not set (rhbz#589922)
  - qemu: Properly hot-unplug drives (rhbz#696596)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-14.el6
changelog:
  - Fix synchronous reading of stream data (rhbz#741337)
  - qemu: Add ability to set PCI device "rombar" on or off (rhbz#738095)
  - virsh: Better document --copy-storage migrate options (rhbz#677220)
  - virsh: Enhance documentation of commands starting jobs (rhbz#705237)
  - qemu: Always remove domain object if MigratePrepare fails (rhbz#741251)
  - security: Properly chown/label bidirectional and unidirectional fifos (rhbz#740478)
  - qemu: Check domain status details when reconnecting monitor (rhbz#617890)
  - qemu: Finish domain shutdown on reconnect (rhbz#617890)
  - qemu: Avoid loop of fake reboots (rhbz#617890)
  - qemu: Preserve fakeReboot flag in domain status (rhbz#617890)
  - snapshot: Fix man page typos (rhbz#740686)
  - docs: Document virsh nodedev-* commands (rhbz#740686)
  - docs: Document node device XML (rhbz#740686)
  - qemu: Add return value check (rhbz#739704)
  - qemu: Check for ejected media during startup and migration (rhbz#725673)
  - virsh: Update man page for cpu_shares parameter (rhbz#639591)
  - virsh: Describe attach-interface parameter target (rhbz#698899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-20.el6
changelog:
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747516)
  - storage: Plug iscsi memory leak (rhbz#747516)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-1.el6
changelog:
  - Rebase to upstream 0.9.10 (rhbz#752433)
  - Add support for sVirt in the LXC driver
  - block rebase: add new API virDomainBlockRebase
  - API: Add api to set and get domain metadata
  - virDomainGetDiskErrors public API
  - conf: add rawio attribute to disk element of domain XML
  - Add new public API virDomainGetCPUStats()
  - Introduce virDomainPMSuspendForDuration API
  - resize: add virStorageVolResize() API
  - Add a virt-host-validate command to sanity check HV config
  - Add new virDomainShutdownFlags API
  - QEMU guest agent support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-2.el6
changelog:
  - qemu: Set capabilities based on supported monitor commands (rhbz#766958)
  - qemu: Implement DomainPMSuspendForDuration (rhbz#766958)
  - snapshot: Fix snapshot deletion use-after-free (rhbz#790744)
  - storage: Allow runtime detection of scrub (rhbz#725013)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#783968)
  - qemu: Prevent crash of libvirtd without guest agent (rhbz#790745)
  - python: Expose virDomain{G,S}etInterfaceParameters APIs in python binding (rhbz#770971)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-3.el6
changelog:
  - storage: Allow runtime detection of scrub missing build dep (rhbz#725013)
  - daemon: Plug memory leak (rhbz#795978)
  - daemon: Fix logic bug with virAsprintf (rhbz#795978)
  - util: Fix virFileAccessibleAs return path from parent (rhbz#795093)
  - Add support for unsafe migration (rhbz#751631)
  - virsh: Add --unsafe option to migrate command (rhbz#751631)
  - Introduce virStorageFileIsClusterFS (rhbz#751631)
  - qemu: Forbid migration with cache != none (rhbz#751631)
  - qemu: Nicer error message on failed graceful destroy (rhbz#795656)
  - Error out when using SPICE TLS with spice_tls=0 (rhbz#790436)
  - Revert "spec: Mark directories in /var/run as ghosts" (rhbz#788985)
  - Fixed URI parsing (rhbz#785164)
  - virsh: Fix informational message in iface-bridge command (rhbz#797066)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-4.el6
changelog:
  - Improve error reporting when virsh console is run without a TTY (rhbz#729940)
  - pidfile: Make checking binary path in virPidFileRead optional (rhbz#729940)
  - Add flags for virDomainOpenConsole (rhbz#729940)
  - virsh: Add support for VIR_DOMAIN_CONSOLE_* flags (rhbz#729940)
  - fdstream: Emit stream abort callback even if poll() doesnt. (rhbz#729940)
  - fdstream: Add internal callback on stream close (rhbz#729940)
  - util: Add helpers for safe domain console operations (rhbz#729940)
  - qemu: Add ability to abort existing console while creating new one (rhbz#729940)
  - Fixed service handling in specfile (rhbz#786770)
  - qemu: Don't emit tls-port spice option if port is -1 (rhbz#798220)
  - docs: Comments wiping supported algorithms (rhbz#725013)
  - libvirt-guests: Add documentation and clean up to use virsh's improved list (rhbz#693758)
  - libvirt-guests: Don't try to do a managed-save of transient guests (rhbz#693758)
  - virsh: Enhance list command to ease creation of shell scripts (rhbz#693758)
  - libvirt-guests: Check if URI is reachable before launching commands (rhbz#720691)
  - hooks: Add support for capturing hook output (rhbz#795127)
  - qemu: Add pre-migration hook (rhbz#795127)
  - Support for cpu64-rhel* qemu cpu models (rhbz#768450)
  - util: Add netlink event handling to virnetlink.c (rhbz#693842)
  - Add de-association handling to macvlan code (rhbz#693842)
  - qemu: Add ibmvscsi controller model (rhbz#782034)
  - qemu: Add virtio-scsi controller model (rhbz#782034)
  - conf: Add helper function to look up disk controller model (rhbz#782034)
  - conf: Introduce new attribute for device address format (rhbz#782034)
  - qemu: New cap flag to indicate if channel is supported by scsi-disk (rhbz#782034)
  - qemu: Build command line for the new address format (rhbz#782034)
  - tests: Add tests for virtio-scsi and ibmvscsi controllers (rhbz#782034)
  - virsh: Two new helper functions for disk device changes (rhbz#713932)
  - virsh: Use vshFindDisk and vshPrepareDiskXML in cmdDetachDisk (rhbz#713932)
  - virsh: New command cmdChangeMedia (rhbz#713932)
  - qemu: Require json for block jobs (rhbz#799055)
  - qemu: Pass block pull backing file to monitor (rhbz#799055)
  - virsh: Expose partial pull (rhbz#799055)
  - libvirt-guests: Add parallel startup and shutdown of guests (rhbz#625362)
  - qemu: Shared or readonly disks are always safe wrt migration (rhbz#751631)
  - util: Eliminate crash in virNetDevMacVLanCreateWithVPortProfile (rhbz#693842)
  - rpc: Fix client crash on connection close (rhbz#800185)
  - conf: Add missing device types to virDomainDevice(Type|Def) (rhbz#691539)
  - conf: Relocate virDomainDeviceDef and virDomainHostdevDef (rhbz#691539)
  - conf: Reorder static functions in domain_conf.c (rhbz#691539)
  - qemu: Rename virDomainDeviceInfoPtr variables to avoid confusion (rhbz#691539)
  - conf: Add device pointer to args of virDomainDeviceInfoIterate callback (rhbz#691539)
  - conf: Make hostdev info a separate object (rhbz#691539)
  - conf: HostdevDef parse/format helper functions (rhbz#691539)
  - conf: Give each hostdevdef a parent pointer (rhbz#691539)
  - conf: Put subsys part of virDomainHostdevDef into its own struct (rhbz#691539)
  - conf: Hostdev utility functions (rhbz#691539)
  - qemu: Re-order functions in qemu_hotplug.c (rhbz#691539)
  - qemu: Refactor hotplug detach of hostdevs (rhbz#691539)
  - conf: Parse/format type='hostdev' network interfaces (rhbz#691539)
  - qemu: Support type='hostdev' network devices at domain start (rhbz#691539)
  - conf: Change virDomainNetRemove from static to global (rhbz#691539)
  - qemu: Use virDomainNetRemove instead of inline code (rhbz#691539)
  - qemu: Support type=hostdev network device live hotplug attach/detach (rhbz#691539)
  - util: Two new pci util functions (rhbz#691539)
  - util: Support functions for mac/portprofile associations on hostdev (rhbz#691539)
  - util: Changes to support portprofiles for hostdevs (rhbz#691539)
  - qemu: Install port profile and mac address on netdev hostdevs (rhbz#691539)
  - Fix build after commit e3ba4025 (rhbz#693842)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-5.el6
changelog:
  - Avoid global variable shadowed (rhbz#737726)
  - Add nodeGetCPUmap() for getting available CPU IDs in a cpumap. (rhbz#737726)
  - Qemu driver for virDomainGetCPUstats using cpuacct cgroup. (rhbz#737726)
  - Cpu-stats command shows cpu statistics information of a domain. (rhbz#737726)
  - Ensure max_id is initialized in linuxParseCPUmap() (rhbz#737726)
  - rpc: Allow truncated return for virDomainGetCPUStats (rhbz#737726)
  - qemu: Don't parse device twice in attach/detach (rhbz#770031)
  - sanlock: Fix condition left crippled while debugging (rhbz#785736)
  - sanlock: Use STREQ_NULLABLE instead of STREQ on strings that may be null (rhbz#785736)
  - qemu: Fix startupPolicy for snapshot-revert (rhbz#798938)
  - util: Don't overflow on errno in virFileAccessibleAs (rhbz#798938)
  - blockResize: Add flag for bytes (rhbz#796526)
  - docs: Use correct terminology for 1024 bytes (rhbz#796526)
  - api: Add overflow error (rhbz#796526)
  - util: New function for scaling numbers (rhbz#796526)
  - xml: Share 'unit' in RNG (rhbz#796526)
  - xml: Output memory unit for clarity (rhbz#796526)
  - storage: Support more scaling suffixes (rhbz#796526)
  - xml: Drop unenforced minimum memory limit from RNG (rhbz#796526)
  - xml: Use long long internally, to centralize overflow checks (rhbz#796526)
  - xml: Use better types for memory values (rhbz#796526)
  - xml: Allow scaled memory on input (rhbz#796526)
  - virsh: Add option aliases (rhbz#796526)
  - virsh: Use option aliases (rhbz#796526)
  - virsh: Add command aliases, and rename nodedev-detach (rhbz#796526)
  - virsh: Improve storage unit parsing (rhbz#796526)
  - virsh: Improve memory unit parsing (rhbz#796526)
  - qemuBuildCommandLine: Don't add tlsPort if none set (rhbz#801443)
  - Removed more AMD-specific features from cpu64-rhel* models (rhbz#768450)
  - qemu: Support disk filenames with comma (rhbz#801970)
  - cpustats: Collect VM user and sys times (miss python bindings) (rhbz#800366)
  - cpustats: Report user and sys times (rhbz#800366)
  - qemu: Fix (managed)save and snapshots with host mode CPU (rhbz#801160)
  - qemu: Make block io tuning smarter (rhbz#770683)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-6.el6
changelog:
  - cpu: Add new flag supported by qemu to the cpu definition (rhbz#767364)
  - Added support for AMD Bulldozer CPU (rhbz#767364)
  - graphics: Cleanup port policy (rhbz#801443)
  - qemu: Reverse condition in qemuDomainCheckDiskPresence (rhbz#798938)
  - cpu: Add cpu definition for Intel Sandy Bridge cpu type (rhbz#761005)
  - cpu: Disable tsc-deadline feature not supported in qemu on RHEL 6.3 (rhbz#761005)
  - qemu: Support numad (rhbz#769930)
  - numad: Fix typo and warning (rhbz#769930)
  - qemu: Use scsi-block for lun passthrough instead of scsi-disk (rhbz#782034)
  - util: Make virDomainLeaseDefFree global (rhbz#802851)
  - qemu: Don't 'remove' hostdev objects from domain if operation fails (rhbz#802851)
  - util: Eliminate device object leaks related to virDomain*Remove*() (rhbz#802851)
  - virsh: Fix invalid free (rhbz#803591)
  - qemu: Eliminate memory leak in qemuDomainUpdateDeviceConfig (rhbz#802854)
  - qemu: Support persistent hotplug of <hostdev> devices (rhbz#802856)
  - qemu: Fix segfault when detaching non-existent network device (rhbz#802644)
  - remote: Fix migration leaks (rhbz#798497)
  - virsh: Trim aliases from -h output (rhbz#796526)
  - Fix handling of blkio deviceWeight empty string (rhbz#804028)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-7.el6
changelog:
  - snapshot: Make quiesce a bit safer (rhbz#804210)
  - python: Avoid memory leaks on libvirt_virNodeGetMemoryStats (rhbz#770944)
  - qemu: Use unlimited speed when migrating to file (rhbz#740099)
  - qemu: Add support for domain cleanup callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#795305)
  - qemu: Add connection close callbacks (rhbz#795305)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#795305)
  - python: Avoid memory leaks on libvirt_virNodeGetCPUStats (rhbz#770943)
  - util: Consolidate duplicated error messages in virnetlink.c (rhbz#693842)
  - python: Add virDomainGetCPUStats python binding API (rhbz#800366)
  - snapshot: Add qemu capability for 'transaction' command (rhbz#782457)
  - snapshot: Add atomic create flag (rhbz#782457)
  - snapshot: Make offline qemu snapshots atomic (rhbz#782457)
  - snapshot: Rudimentary qemu support for atomic disk snapshot (rhbz#782457)
  - snapshot: Add support for qemu transaction command (rhbz#782457)
  - snapshot: Wire up qemu transaction command (rhbz#782457)
  - snapshot: Improve qemu handling of reused snapshot targets (rhbz#782457)
  - Clarify virsh freecell manpage entry (rhbz#698521)
  - Add support for event tray moved of removable disks (rhbz#575160)
  - docs: Add documentation for new attribute tray of disk target (rhbz#575160)
  - conf: Parse and for the tray attribute (rhbz#575160)
  - qemu: Do not start with source for removable disks if tray is open (rhbz#575160)
  - qemu: Prohibit setting tray status as open for block type disk (rhbz#575160)
  - qemu: Update tray status while tray moved event is emitted (rhbz#575160)
  - build: Fix incorrect enum declaration (rhbz#575160)
  - spec: Add missed dependancy for numad (rhbz#769930)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-9.el6
changelog:
  - qemu: Avoid entering monitor with locked driver (rhbz#803186)
  - snapshot: Don't pass NULL to QMP command creation (rhbz#807147)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-10.el6
changelog:
  - python: Add new helper functions for python to C conversion (rhbz#807751)
  - python: Make python APIs use these helper functions (rhbz#807751)
  - python: Improve conversion validation (rhbz#807751)
  - qemu_agent: Issue guest-sync prior to every command (rhbz#808527)
  - qemu: Fix memory leak in virDomainGetVcpus (rhbz#808979)
  - qemu: Reflect any memory rounding back to xml (rhbz#808522)
  - conf: Allow fuzz in XML with cur balloon > max (rhbz#808522)
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#803186)
  - virsh: Clarify escape sequence (rhbz#808652)
  - virsh: Plug memory leaks on failure path (rhbz#807555)
  - conf: Prevent crash of libvirtd without channel target name (rhbz#808371)
  - qemu: Don't leak temporary list of USB devices (rhbz#808459)
  - qemu: Delete USB devices used by domain on stop (rhbz#808459)
  - qemu: Build activeUsbHostdevs list on process reconnect (rhbz#808459)
  - qemu: Fix virtio+macvtap migration from 6.3 to older hosts (rhbz#806633)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-11.el6
changelog:
  - test: Fix segfault in networkxml2argvtest (rhbz#810100)
  - conf: Plug memory leaks on virDomainDiskDefParseXML (rhbz#575160)
  - qemu_ga: Don't overwrite errors on FSThaw (rhbz#808527)
  - Fix parallel build in docs/ directory (rhbz#810559)
  - qemu: Make migration fail when port profile association fails on the dst host (rhbz#811026)
  - Wire up <loader> to set the QEMU BIOS path (rhbz#811227)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-12.el6
changelog:
  - blockjob: Add qemu capabilities related to block pull jobs (rhbz#811683)
  - blockjob: Add API for async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Optimize JSON event handler lookup (rhbz#811683)
  - blockjob: Wire up qemu async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Allow for fast-finishing job (rhbz#811683)
  - virsh: Minor syntactic cleanups (rhbz#811683)
  - qemu: Use consistent error when qemu binary is too old (rhbz#811683)
  - blockjob: Add virsh blockpull --wait (rhbz#811683)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix mem leak in qemuProcessInitCpuAffinity (rhbz#810157)
  - numad: Convert node list to cpumap before setting affinity (rhbz#810157)
  - numad: Ignore cpuset if placement is auto (rhbz#810157)
  - conf: Do not parse cpuset only if the placement is auto (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.13-1.el6
changelog:
  - first rebase for 6.4 more to come
  - kvm-guest failed to start; double-close bug in libvirt (rhbz#823716)
  - potential to deadlock libvirt on EPIPE (rhbz#827234)
  - fix keepalive issues (rhbz#832081)
  - CPU topology parsing bug on special NUMA platform (rhbz#828729)
  - libvirtd will crash when tight loop of hotplug/unplug PCI device (rhbz#822373)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-0rc0.el6
changelog:
  - New build based on upstream snapshot 0.10.0-0rc0 (rhbz#836934)
  - Cleanup and rebase of the few RHEL-only patches


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-1.el6
changelog:
  - New build based on upstream release 0.10.0 (rhbz#836934)
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.2-1.el6
changelog:
  - New build based on upstream release 0.10.2 (rhbz#836934)
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-2.el6
changelog:
  - qemu: Wait for SPICE to migrate (rhbz#836135)
  - lxc: Correctly report active cgroups (rhbz#860907)
  - network: Backend for virNetworkUpdate of interface list (rhbz#844404)
  - Fix start of containers with custom root filesystem (rhbz#861564)
  - Correct checking of virStrcpyStatic() return value (rhbz#864122)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-3.el6
changelog:
  - conf: Rename life cycle actions to event actions (rhbz#832156)
  - conf: Add on_lockfailure event configuration (rhbz#832156)
  - locking: Add const char * parameter to avoid ugly typecasts (rhbz#832156)
  - locking: Pass hypervisor driver name when acquiring locks (rhbz#832156)
  - locking: Add support for lock failure action (rhbz#832156)
  - locking: Implement lock failure action in sanlock driver (rhbz#832156)
  - conf: Add support for startupPolicy for USB devices (rhbz#843560)
  - qemu: Introduce qemuFindHostdevUSBDevice (rhbz#843560)
  - qemu: Add option to treat missing USB devices as success (rhbz#843560)
  - qemu: Implement startupPolicy for USB passed through devices (rhbz#843560)
  - Add MIGRATABLE flag for virDomainGetXMLDesc (rhbz#843560)
  - qemu: Make save/restore with USB devices usable (rhbz#843560)
  - conf: Mark missing optional USB devices in domain XML (rhbz#843560)
  - security: Also parse user/group names instead of just IDs for DAC labels (rhbz#860519)
  - doc: Update description about security labels on formatdomain.html (rhbz#860519)
  - util: Extend virGetUserID and virGetGroupID to support names and IDs (rhbz#860519)
  - security: Update user and group parsing in security_dac.c (rhbz#860519)
  - doc: Update description about user/group in qemu.conf (rhbz#860519)
  - Fix kvm_pv_eoi with kvmclock (rhbz#860971)
  - Change qemuSetSchedularParameters to use AFFECT_CURRENT (rhbz#852260)
  - Fix handling of itanium arch name in QEMU driver (rhbz#863115)
  - Add a qemu capabilities cache manager (rhbz#863115)
  - Switch over to use cache for building QEMU capabilities (rhbz#863115)
  - Remove probing of flags when launching QEMU guests (rhbz#863115)
  - Remove probing of machine types when canonicalizing XML (rhbz#863115)
  - Remove probing of CPU models when launching QEMU guests (rhbz#863115)
  - Make qemuCapsProbeMachineTypes & qemuCapsProbeCPUModels static (rhbz#863115)
  - Remove xenner support (rhbz#863115)
  - Refactor guest init to support qemu-system-i386 binary too (rhbz#863115)
  - Add a qemuMonitorGetVersion() method for QMP query-version command (rhbz#863115)
  - Add a qemuMonitorGetMachines() method for QMP query-machines command (rhbz#863115)
  - Add a qemuMonitorGetCPUDefinitions method for QMP query-cpu-definitions command (rhbz#863115)
  - Add a qemuMonitorGetCommands() method for QMP query-commands command (rhbz#863115)
  - Add a qemuMonitorGetEvents() method for QMP query-events command (rhbz#863115)
  - Add a qemuMonitorGetObjectTypes() method for QMP qom-list-types command (rhbz#863115)
  - Add a qemuMonitorGetObjectProps() method for QMP device-list-properties command (rhbz#863115)
  - Add a qemuMonitorGetTargetArch() method for QMP query-target command (rhbz#863115)
  - Remove some unused includes in QEMU code (rhbz#863115)
  - Move command/event capabilities detection out of QEMU monitor code (rhbz#863115)
  - Fix regression starting QEMU instances without query-events (rhbz#863115)
  - Refactor qemuCapsParseDeviceStr to work from data tables (rhbz#863115)
  - Fix QEMU test with 1.2.0 help output (rhbz#863115)
  - Ignore error from query-cpu-definitions (rhbz#863115)
  - Fix potential deadlock when agent is closed (rhbz#859712)
  - Fix (rare) deadlock in QEMU monitor callbacks (rhbz#859712)
  - Convert virLXCMonitor to use virObject (rhbz#864336)
  - Remove pointless virLXCProcessMonitorDestroy method (rhbz#864336)
  - Simplify some redundant locking while unref'ing objects (rhbz#859712)
  - Fix deadlock in handling EOF in LXC monitor (rhbz#864336)
  - Avoid bogus I/O event errors when closing the QEMU monitor (rhbz#859712)
  - qemu: Fix parsing of x86 CPU models (rhbz#864097)
  - python: Keep consistent handling of Python integer conversion (rhbz#816609)
  - esx: Fix and improve esxListAllDomains function (rhbz#864384)
  - virsh: Block SIGINT while getting BlockJobInfo (rhbz#845448)
  - spec: Add support for libssh2 transport (rhbz#513363)
  - Revert "Use XDG Base Directories instead of storing in home directory" (rhbz#859331)
  - doc: Sort out the relationship between <vcpu>, <vcpupin>, and <emulatorpin> (rhbz#855218)
  - conf: Ignore vcpupin for not onlined vcpus when parsing (rhbz#855218)
  - conf: Initialize the pinning policy for vcpus (rhbz#855218)
  - qemu: Create or remove cgroup when doing vcpu hotpluging (rhbz#857013)
  - qemu: Initialize cpuset for hotplugged vcpu as def->cpuset (rhbz#855218)
  - conf: Ignore emulatorpin if vcpu placement is auto (rhbz#855218)
  - qemu: Ignore def->cpumask if emulatorpin is specified (rhbz#855218)
  - Avoid straying </cpuset> (rhbz#855218)
  - conf: Fix virDevicePCIAddressEqual args (rhbz#805071)
  - conf: VirDomainDeviceInfoCopy utility function (rhbz#805071)
  - qemu: Reorganize qemuDomainChangeNet and qemuDomainChangeNetBridge (rhbz#805071)
  - Add support for SUSPEND_DISK event (rhbz#839661)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-4.el6
changelog:
  - node_memory: Add new parameter field to tune the new sysfs knob (rhbz#840113)
  - daemon: Fix removing abstract namespaces (rhbz#859331)
  - tests: Fix domain-events python test (rhbz#839661)
  - conf: Fix crash with cleanup (rhbz#866288)
  - spec: Add runtime requirement for libssh2 (rhbz#866508)
  - spec: Require newer sanlock on recent distros (rhbz#832156)
  - spec: Require newer sanlock on recent distros 2 (rhbz#832156)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-5.el6
changelog:
  - qemu: Clear async job when p2p migration fails early (rhbz#867412)
  - qemu: Pin the emulator when only cpuset is specified (rhbz#867372)
  - qemu: Correctly wait for spice to migrate (rhbz#867724)
  - qemu: Fixed default machine detection in qemuCapsParseMachineTypesStr (rhbz#867764)
  - conf: Make tri-state feature options more universal (rhbz#864606)
  - conf: Add support for HyperV Enlightenment features (rhbz#864606)
  - qemu: Add support for HyperV Enlightenment feature "relaxed" (rhbz#864606)
  - network: Set to NULL after virNetworkDefFree() (rhbz#866364)
  - qemu: Always format CPU topology (rhbz#866999)
  - qemu: Don't fail without emulatorpin or cpumask (rhbz#867372)
  - qemu: Allow migration with host USB devices (rhbz#843560)
  - qemu: Do not require hostuuid in migration cookie (rhbz#863059)
  - network: Free/null newDef if network fails to start (rhbz#866364)
  - migrate: v2: Use VIR_DOMAIN_XML_MIGRATABLE when available (rhbz#856864)
  - qemu: Avoid holding the driver lock in trivial snapshot API's (rhbz#772088)
  - storage: List more file types (rhbz#772088)
  - storage: Treat 'aio' like 'raw' at parse time (rhbz#772088)
  - storage: Match RNG to supported driver types (rhbz#772088)
  - storage: Use enum for default driver type (rhbz#772088)
  - storage: Use enum for disk driver type (rhbz#772088)
  - storage: Use enum for snapshot driver type (rhbz#772088)
  - storage: Don't probe non-files (rhbz#772088)
  - storage: Get entire metadata chain in one call (rhbz#772088)
  - storage: Don't require caller to pre-allocate metadata struct (rhbz#772088)
  - storage: Remember relative names in backing chain (rhbz#772088)
  - storage: Make it easier to find file within chain (rhbz#772088)
  - storage: Cache backing chain while qemu domain is live (rhbz#772088)
  - storage: Use cache to walk backing chain (rhbz#772088)
  - blockjob: Remove unused parameters after previous patch (rhbz#772088)
  - blockjob: Manage qemu block-commit monitor command (rhbz#772088)
  - blockjob: Wire up online qemu block-commit (rhbz#772088)
  - blockjob: Implement shallow commit flag in qemu (rhbz#772088)
  - blockjob: Refactor qemu disk chain permission grants (rhbz#772088)
  - blockjob: Properly label disks for qemu block-commit (rhbz#772088)
  - blockjob: Avoid segv on early error (rhbz#772088)
  - blockjob: Accommodate early RHEL backport naming (rhbz#772088)
  - virsh: Fix segfault of snapshot-list (rhbz#837544)
  - network: Always create dnsmasq hosts and addnhosts files, even if empty (rhbz#868389)
  - network: Don't allow multiple default portgroups (rhbz#868483)
  - selinux: Use raw contexts (rhbz#851981)
  - selinux: Add security selinux function to label tapfd (rhbz#851981)
  - selinux: Use raw contexts 2 (rhbz#851981)
  - selinux: Fix wrong tapfd relablling (rhbz#851981)
  - selinux: Remove unused variables in socket labelling (rhbz#851981)
  - selinux: Relabel tapfd in qemuPhysIfaceConnect (rhbz#851981)
  - storage: Let format probing work on root-squash NFS (rhbz#856247)
  - snapshot: Sanity check when reusing file for snapshot (rhbz#856247)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#856247)
  - blockjob: React to active block copy (rhbz#856247)
  - blockjob: Return appropriate event and info (rhbz#856247)
  - blockjob: Support pivot operation on cancel (rhbz#856247)
  - blockjob: Make drive-reopen safer (rhbz#856247)
  - blockjob: Implement block copy for qemu (rhbz#856247)
  - blockjob: Allow for existing files in block-copy (rhbz#856247)
  - blockjob: Allow mirroring under SELinux and cgroup (rhbz#856247)
  - blockjob: Relabel entire existing chain (rhbz#856247)


