# changelog

author: Rafael Aquini <aquini@redhat.com> [2.6.32-412.el6]
changelog:
  - [netdrv] ixgbe: fix broken module parameter IntMode (Andy Gospodarek) [958967]
  - [netdrv] ixgbe: fix broken module parameter FdirMode (Andy Gospodarek) [958967]
  - [fs] fuse: initialize dentry->d_op properly in fuse_direntplus_link() (Brian Foster) [994492]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [987426]
  - [tracing] Replace syscall_meta_data struct array with pointer array (Jiri Olsa) [992987]
  - [tracing] Replace trace_event struct array with pointer array (Jiri Olsa) [992987]
  - [mm] percpu: don't implicitly include slab.h from percpu.h (Baoquan He) [878312]
  - [mm] percpu: fix per_cpu_ptr_to_phys() handling of non-page-aligned addresses (Baoquan He) [878312]
  - [mm] percpu: explain why per_cpu_ptr_to_phys() is more complicated than necessary (Baoquan He) [878312]
  - [mm] percpu: fix chunk range calculation (Baoquan He) [878312]
  - [mm] percpu: should use is_vmalloc_addr() (Baoquan He) [878312]
  - [mm] percpu: fix pcpu_last_unit_cpu (Baoquan He) [878312]
  - [mm] percpu: fix first chunk match in per_cpu_ptr_to_phys() (Baoquan He) [878312]
  - [mm] percpu: fix trivial bugs in pcpu_build_alloc_info() (Baoquan He) [878312]
  - [mm] percpu: move vmalloc based chunk management into percpu-vm.c (Baoquan He) [878312]
  - [mm] percpu: misc preparations for nommu support (Baoquan He) [878312]
  - [mm] percpu: reorganize chunk creation and destruction (Baoquan He) [878312]
  - [mm] percpu: factor out pcpu_addr_in_first/reserved_chunk() and update per_cpu_ptr_to_phys() (Baoquan He) [878312]
  - [mm] percpu: add __percpu sparse annotations to core kernel subsystems (Baoquan He) [878312]
  - [mm] percpu: avoid calling __pcpu_ptr_to_addr() (Baoquan He) [878312]
  - [mm] percpu: refactor the code in pcpu_depopulate_chunk() (Baoquan He) [878312]
  - [mm] percpu: add missing per_cpu_ptr_to_phys() definition for UP (Baoquan He) [878312]
  - [mm] percpu: Fix kdump failure if booted with percpu_alloc=page (Baoquan He) [878312]
  - [mm] Revert: percpu: fix chunk range calculation (Baoquan He) [878312]
  - [mm] Revert: percpu: Fix kdump crash_notes content lost in case i386 debug (Baoquan He) [878312]
  - [md] raid5: fix interaction of 'replace' and 'recovery' (Jes Sorensen) [994382]
  - [md] raid10: remove use-after-free bug (Jes Sorensen) [994382]
  - [md] Remove recent change which allows devices to skip recovery (Jes Sorensen) [994382]
  - [md] raid10: fix two problems with RAID10 resync (Jes Sorensen) [994382]
  - [infiniband] ocrdma: Fix several stack info leaks (Doug Ledford) [827601]
  - [infiniband] ocrdma: Remove unused include (Doug Ledford) [827601]
  - [infiniband] hw: import new ocrdma driver from upstream tree (Doug Ledford) [827601]
  - [infiniband] cma: Export AF_IB statistics (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to specify AF_IB when joining multicast (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to pass AF_IB into resolve (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to bind to AF_IB (Michal Schmidt) [908111]
  - [infiniband] ucma: Name changes to indicate only IP addresses supported (Michal Schmidt) [908111]
  - [infiniband] ucma: Add ability to query GID addresses (Michal Schmidt) [908111]
  - [infiniband] cma: Export cma_get_service_id() (Michal Schmidt) [908111]
  - [infiniband] ucma: Support querying when IB paths are not reversible (Michal Schmidt) [908111]
  - [infiniband] sa: Export function to pack a path record into wire format (Michal Schmidt) [908111]
  - [infiniband] ucma: Support querying for AF_IB addresses (Michal Schmidt) [908111]
  - [infiniband] cma: Only listen on IB devices when using AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Set qkey for AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Expose private data when using AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Merge cma_get/save_net_info (Michal Schmidt) [908111]
  - [infiniband] cma: Remove unused SDP related code (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to cma_get_service_id() (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to rdma_resolve_route() (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to rdma_resolve_addr() (Michal Schmidt) [908111]
  - [infiniband] cma: Verify that source and dest sa_family are the same (Michal Schmidt) [908111]
  - [infiniband] cma: Restrict AF_IB loopback to binding to IB devices only (Michal Schmidt) [908111]
  - [infiniband] cma: Add helper functions to return id address information (Michal Schmidt) [908111]
  - [infiniband] cma: Do not modify sa_family when setting loopback address (Michal Schmidt) [908111]
  - [infiniband] cma: Allow user to specify AF_IB when binding (Michal Schmidt) [908111]
  - [infiniband] cma: Update port reservation to support AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Add AF_IB support to ip_addr_size (Michal Schmidt) [908111]
  - [infiniband] cma: Include AF_IB in loopback and any address checks (Michal Schmidt) [908111]
  - [infiniband] cma: Allow enabling reuseaddr in any state (Michal Schmidt) [908111]
  - [infiniband] rdma: Define native IB address (Michal Schmidt) [908111]
  - [netdrv] mlx4: Set link type for RAW PACKET QPs in the QP context (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Disable VLAN stripping for RAW PACKET QPs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fetch XRC SRQ in the CQ polling code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Advertise MW support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Support memory window binding (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Remove redundant NULL check before kfree (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix compiler warning about uninitialized 'vlan' variable (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Convert is_xxx variables in build_mlx_header() to bool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Remove local invalidate segment unused fields (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Adjust duplicate test (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix bug unwinding on error in mlx4_ib_init_sriov() (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix build error on platforms where UL is not 64 bits (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: fix unresolved 64bit math in mellanox/mlx4/en_dcb_nl.c (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Can set maxrate only for TC0 (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Set max rate-limit for a TC (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] dcb: Add an optional max rate attribute (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Disable RFS when running in SRIOV mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Initialize RFS filters lock and list in init_netdev (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Limit the RFS filter IDs to be < RPS_NO_FILTER (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add accelerated RFS support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add rmap support to mlx4_assign_eq (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: fix small memory leak on error (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Dynamic VST to VST vlan/qos changes (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fail device init if num_vfs is negative (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add warning in case of command timeouts (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Replace sscanf() with kstrtoint() (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add prints when TX timeout occurs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix a race between napi poll function and RX ring cleanup (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Change log level from error to debug for vlan related messages (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Move register_netdev() to the end of initialization function (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Do not query stats when device port is down (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix resource leak in error flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: allow order-0 memory allocations in RX path (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: use one page fragment per incoming frame (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx_en: Timestamping is not supported in slave mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Keep VF assigned MAC in the PF admin table (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Handle unassigned VF MAC address correctly (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix adaptive moderation cq update (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Strengthen VLAN tags/priorities enforcement in VST mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add missing report on VST and spoof-checking dev caps (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix a build error on 32bit arches (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add support to get VF config (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add set VF default vlan ID and priority support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add set VF mac address support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add structures to keep VF Ethernet ports information (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add reference counting to MAC registeration (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Disable HW clock overflow check when no HW support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable HW timestamping for VFs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Expose a few helpers to fill DMFS HW strucutures (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Directly expose fields of DMFS HW rule control segment (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Change a few DMFS fields names to match firmare spec (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Match DMFS promiscuous field names to firmware spec (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Move DMFS HW structs to common header file (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Reduce warning message for SRQ_LIMIT event to debug level (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add a service task (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Support software timestamping (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add HW timestamping support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Read HCA frequency and map internal clock (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add timestamping device capability (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Implement SRQ object lookup from srqn (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: set correct MTU in SRIOV (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Translate guest B0 steering rules to DMFS (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add helper function to translate B0 steering rules to DMFS (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Advertize DCB_CAP_DCBX_HOST in getdcbx (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Enable DCB ETS ops only when supported by the firmware (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Added proper description for two device capabilities (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix setting initial MAC address (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disallow releasing VF QPs which have steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Always use 64 bit resource ID when doing lookup (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Remove ethtool flow steering rules before releasing QPs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix wrong order of flow steering resources removal (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix wrong mask applied on EQ numbers in the wrapper (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Cleanup MAC resources on module unload or port stop (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix race when setting the device MAC address (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix endianness bug in set_param_l (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Turn off device-managed FS bit in dev-cap wrapper if DMFS is not enabled (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable mlx4_QP_ATTACH calls from guests if the host uses flow steering (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Implement memory windows allocation and deallocation (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Enable memory windows in INIT_HCA and QUERY_HCA (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable memory windows for virtual functions (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix allocation of device tx_cq (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Propagate MR deregistration failures to caller (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Rename MPT-related functions to have mpt_ prefix (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add unicast MAC filtering (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Manage hash of MAC addresses per port (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Save previous MAC address of the port so we can replace it later (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Re-arrange ndo_set_rx_mode related code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Move Ethernet related functionality from mlx4_core to mlx4_en (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Cleanup multiline strings (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Optimize Rx fast path filter checks (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Optimize loopback related checks in data path (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Assigning TX irq per ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix compilation error when CONFIG_INET isn't defined (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix error propagation for ethtool helper function (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix transmit timeout when driver restarts port (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Don't reassign port mac address on firmware that supports it (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Use firmware driven flow steering hash mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix ethtool rules leftovers after module unloaded (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Block insertion of ethtool steering rules while the interface is down (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix vlan mask for ethtool steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Validate VLAN IDs provided in ethtool flow steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix ip/udp steering rules multicast mac when attached via ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Set correctly allow_loopback flag (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Directly expose fields of HW flow steering rule control segment (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix a race when closing TX queue (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Return proper error code when __mlx4_add_one fails (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Use the correct netif lock on ndo_set_rx_mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix traffic loss under promiscuous mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Issue the dump eth statistics command under lock (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: remove redundant code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add support for destination MAC in steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Use generic etherdevice.h functions (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Set number of rx/tx channels using ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix TX moderation info loss after set_ringparam is called (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Adjusting moderation per each ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Remove remnants of LRO support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Unmap UAR also in the case of error flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Don't use vlan tag value as an indication for vlan presence (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Perform correct resource cleanup if mlx4_QUERY_ADAPTER() fails (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Remove annoying debug messages from SR-IOV flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix skb truesize underestimation (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] etherdevice.h: Add ether_addr_equal_64bits (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] ethtool: Add destination MAC address to flow steering API (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fixing TX queue stop/wake flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: nullify cq->vector field when closing completion queue (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Checksum counters per ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix vlan table overflow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Adding 40gb speed report for ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix crash upon device initialization error (Amir Vadai) [950401 950910 950913 950915]
  - [net] introduce IFF_NO_UNICAST_FLT (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ipoib: Add more rtnl_link_ops callbacks (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ipoib: Add rtnl_link_ops support (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ib_srp: Eliminate state SRP_TARGET_DEAD - minus system_long_wq (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Allow SRP disconnect through sysfs (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Simplify attribute initialization code (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Fix attribute registration (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Document sysfs attributes (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: use __scsi_target_unblock (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add Mellanox copyright (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Fix device removal flow (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add support for iser CM REQ additional info (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Return error to upper layers on EAGAIN registration failures (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Move informational messages from error to info level (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add module version (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: add support for TIPC protocol (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix ipoib_hard_header() return value (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix send lockup due to missed TX completion (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: zero last byte for strncpy (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: simplify a warning message (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: limit the size allocated by rds_message_alloc() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Free ipoib neigh on path record failure so path rec queries are retried (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Fail I/O requests if the transport is offline (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Avoid endless SCSI error handling loop (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Avoid sending a task management function needlessly (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Track connection state properly (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Enable iser when FMRs are not supported (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Avoid error prints on EAGAIN registration failures (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Use proper define for the commands per LUN value advertised to SCSI ML (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Don't attempt to release resources on error flow (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Add version and firmware info to ethtool reporting (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix ipoib_neigh hashing to use the correct daddr octets (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix crash due to skb double destruct (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: remove depends on CONFIG_EXPERIMENTAL (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Call skb_dst_drop() once skb is enqueued for sending (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: send disconnect request without waiting for CM timewait exit (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: destroy and recreate QP and CQs when reconnecting (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Introduce the helper function srp_remove_target() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Suppress superfluous error messages (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Process all error completions (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Introduce srp_handle_qp_err() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Simplify SCSI error handling (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Keep processing commands during host removal (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Eliminate state SRP_TARGET_CONNECTING (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Increase block layer timeout (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add more RX CQs to scale out processing of SCSI responses (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Don't touch cmid after dropping reference (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Verify that QP handler is valid before dispatching events (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] uverbs: Implement memory windows support in uverbs (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Add "type 2" memory windows support (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Change return value from find_gid_port() (Doug Ledford) [791284 865301 950918 983117]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-413.el6]
changelog:
  - [mm] reinstate mmap -EINVAL return error code when mapping length is zero (Rafael Aquini) [995339]
  - [fs] ext4: introduce reserved space (Lukas Czerner) [916592]
  - [fs] ext4: dont let i_reserved_meta_blocks go negative (Lukas Czerner) [916592]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [867689]
  - [s390] zfcp: block queue limits with data router (Hendrik Brueckner) [952734]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (George Beshers) [876778]
  - [net] bridge: fix a conflict in if_bridge.h with glibc headers (Amerigo Wang) [981325]
  - [usb] fix endpoint-disabling for failed config changes (Don Zickus) [889391]
  - [usb] Free the allocated memory before exiting on error (Don Zickus) [889391]
  - [usb] xhci: fix list access before init (Don Zickus) [889391]
  - [usb] xhci-mem: init list heads at the beginning of init (Don Zickus) [889391]
  - [usb] xhci: override bogus bulk wMaxPacketSize values (Don Zickus) [889391]
  - [usb] enclose USB_XHCI_HCD related symbols within a if USB_XHCI_HCD block (Don Zickus) [889391]
  - [usb] xhci: clarify compliance mode debug messages (Don Zickus) [889391]
  - [usb] xhci: Rename SEGMENT_SIZE and SEGMENT_SHIFT as the former is used in a.out.h (Don Zickus) [889391]
  - [usb] xhci: Use ilog2() rather than __ffs() for calculating SEGMENT_SHIFT (Don Zickus) [889391]
  - [usb] xhci: Don't warn on empty ring for suspended devices (Don Zickus) [889391]
  - [usb] xhci: Fix TRB transfer length macro used for Event TRB (Don Zickus) [889391]
  - [usb] xhci: fix build warning (Don Zickus) [889391]
  - [usb] xhci: fix bit definitions for IMAN register (Don Zickus) [889391]
  - [usb] xhci: correctly enable interrupts (Don Zickus) [889391]
  - [usb] xhci: fix memory leak of URB-private data (Don Zickus) [889391]
  - [usb] xhci: fix incorrect bit test (Don Zickus) [889391]
  - [usb] xhci: Fix TD size for isochronous URBs (Don Zickus) [889391]
  - [usb] xhci: Fix isoc TD encoding (Don Zickus) [889391]
  - [usb] xhci: remove unused trb var in xhci_irq() (Don Zickus) [889391]
  - [usb] xhci: Add Lynx Point LP to list of Intel switchable hosts (Don Zickus) [889391]
  - [usb] xhci: move HC_STATE_SUSPENDED check to xhci_suspend() (Don Zickus) [889391]
  - [usb] xhci: Stricter conditional for Z1 system models for Compliance Mode Patch (Don Zickus) [889391]
  - [usb] xhci: Extend Fresco Logic MSI quirk (Don Zickus) [889391]
  - [usb] xhci: fix null-pointer dereference when destroying half-built segment rings (Don Zickus) [889391]
  - [usb] xhci: Fix TD Size calculation on 1.0 hosts (Don Zickus) [889391]
  - [usb] xhci: Fix conditional check in bandwidth calculation (Don Zickus) [889391]
  - [usb] xhci: Avoid global symbol pollution with handshake (Don Zickus) [889391]
  - [usb] xhci: Remove assigned but unused ep_ctx (Don Zickus) [889391]
  - [usb] xhci: Remove assigned but unused slot_ctx (Don Zickus) [889391]
  - [usb] xhci: Fix missing break in xhci_evaluate_context_result (Don Zickus) [889391]
  - [usb] xhci: Fix potential NULL ptr deref in command cancellation (Don Zickus) [889391]
  - [usb] xhci: Remove __force__ __u16 before assigning DeviceRemovable and assign directly (Don Zickus) [889391]
  - [usb] xhci-ring: removes unnecessary semicolon (Don Zickus) [889391]
  - [usb] xhci: update a comment regarding the BOS descriptor to reflect the code (Don Zickus) [889391]
  - [usb] xhci: sparse fixes (Don Zickus) [889391]
  - [usb] Fail a get config when the port is powered off (Don Zickus) [889391]
  - [usb] xhci: Handle clear PORT_POWER feature (Don Zickus) [889391]
  - [usb] redefine DeviceRemovable and wHubDelay as _le16 (Don Zickus) [889391]
  - [usb] xhci: Avoid "dead ports", add roothub port polling (Don Zickus) [894180]
  - [usb] Handle warm reset failure on empty port (Don Zickus) [894180]
  - [usb] Ignore port state until reset completes (Don Zickus) [894180]
  - [usb] Increase reset timeout (Don Zickus) [894180]
  - [usb] Allow USB 3.0 ports to be disabled (Don Zickus) [894180]
  - [usb] Ignore xHCI Reset Device status (Don Zickus) [894180]
  - [usb] Handle auto-transition from hot to warm reset (Don Zickus) [894180]
  - [usb] xhci: Handle HS bulk/ctrl endpoints that don't NAK (Don Zickus) [894180]
  - [usb] Enable LPM after a failed probe (Don Zickus) [815547]
  - [usb] Don't enable LPM if the exit latency is zero (Don Zickus) [815547]
  - [usb] Send Set SEL before enablng parent U1/U2 timeout (Don Zickus) [815547]
  - [usb] xhci: endianness xhci_calculate_intel_u2_timeout (Don Zickus) [815547]
  - [usb] xhci: fix integer overflow (Don Zickus) [815547]
  - [usb] Fix LPM disable count mismatch on driver unbind (Don Zickus) [815547]
  - [usb] Disable LPM while the device is unconfigured (Don Zickus) [815547]
  - [usb] Fix LPM disable/enable during device reset (Don Zickus) [815547]
  - [usb] xhci: Fix DIV_ROUND_UP compile error (Don Zickus) [815547]
  - [usb] xhci: Fix compile with CONFIG_USB_SUSPEND=n (Don Zickus) [815547]
  - [usb] Fix core compile with CONFIG_USB_SUSPEND=n (Don Zickus) [815547]
  - [usb] Disable hub-initiated LPM for comms devices (Don Zickus) [815547]
  - [usb] xhci: Add Intel U1/U2 timeout policy (Don Zickus) [815547]
  - [usb] xhci: Add infrastructure for host-specific LPM policies (Don Zickus) [815547]
  - [usb] Add macros for interrupt endpoint types (Don Zickus) [815547]
  - [usb] xhci: Reserve one command for USB3 LPM disable (Don Zickus) [815547]
  - [usb] xhci: Some Evaluate Context commands must succeed (Don Zickus) [815547]
  - [usb] Disable USB 3.0 LPM in critical sections (Don Zickus) [815547]
  - [usb] Add support to enable/disable USB3 link states (Don Zickus) [815547]
  - [usb] Allow drivers to disable hub-initiated LPM (Don Zickus) [815547]
  - [usb] Calculate USB 3.0 exit latencies for LPM (Don Zickus) [815547]
  - [usb] Refactor code to set LPM support flag (Don Zickus) [815547]
  - [usb] Make sure to fetch the BOS desc for roothubs (Don Zickus) [815547]
  - [usb] xhci: Add roothub code to set U1/U2 timeouts (Don Zickus) [815547]
  - [scsi] pm8001: Add new driver pmc8001 to RHEL 6.5 (Rich Bono) [922129]
  - [scsi] bnx2fc: introduce missing kfree (Jan Vesely) [916004]
  - [scsi] bnx2fc: Fix common misspellings (Jan Vesely) [916004]
  - [scsi] bnx2fc: Drivers: scsi: remove __dev* attributes (Jan Vesely) [916004]
  - [scsi] bnx2fc: Make the fcoe_cltr the SCSI host parent (Jan Vesely) [916004]
  - [scsi] bnx2fc: Bumped version to 1.0.14 (Jan Vesely) [916004]
  - [scsi] bnx2fc: Update copyright dates (Jan Vesely) [916004]
  - [scsi] bnx2fc: Fix race condition between IO completion and abort (Jan Vesely) [916004]
  - [scsi] bnx2fc: Include chip number in the symbolic name (Jan Vesely) [916004]
  - [scsi] bnx2fc: Enable cached tasks to improve performance (Jan Vesely) [916004]
  - [scsi] bnx2fc: adjust duplicate test (Jan Vesely) [916004]
  - [scsi] bnx2fc: Bumped version to 1.0.13 (Jan Vesely) [916004]
  - [scsi] bnx2fc: Support max IO size to 512KB (Jan Vesely) [916004]
  - [scsi] bnx2fc: Tx/Rx byte counts reset to 0 when exceeding 32 bit values (Jan Vesely) [916004]
  - [scsi] bnx2fc: Map the doorbell register between offload and enable requests (Jan Vesely) [916004]
  - [scsi] bnx2fc: Move offload/upload wait logic into a function (Jan Vesely) [916004]
  - [scsi] bnx2fc: support software fcoe target (Jan Vesely) [916004]
  - [scsi] bnx2fc: remove useless calls to memset() (Jan Vesely) [916004]
  - [scsi] bnx2fc: use fcoe_get_lesb/fcoe_ctlr_get_lesb() directly from libfcoe (Jan Vesely) [916004]
  - [scsi] bnx2fc: use fcoe_link_speed_update() from the exported symbol in libfcoe (Jan Vesely) [916004]
  - [scsi] bnx2fc: add support to get_netdev for bnx2f_interface (Jan Vesely) [916004]
  - [scsi] bnx2fc: Use the fcoe_sysfs control interface (Jan Vesely) [916004]
  - [scsi] libfcoe, fcoe, bnx2fc: Add new fcoe control interface (Jan Vesely) [916004]
  - [scsi] bnx2fc: treewide: fix typo of "suppport" in various comments (Jan Vesely) [916004]
  - [scsi] fix various printk and comment typos (Jan Vesely) [916004]
  - [scsi] fcoe, bnx2fc, libfcoe: SW FCoE and bnx2fc use FCoE Syfs (Jan Vesely) [916004]
  - [scsi] bnx2fc: Allocate fcoe_ctlr with bnx2fc_interface, not as a member (Jan Vesely) [916004]
  - [scsi] bnx2i: Fixed bugs in the handling of unsolicited NOP-Ins (Jan Vesely) [916003]
  - [scsi] bnx2i: Update version and copyright year 2013 (Jan Vesely) [916003]
  - [scsi] bnx2i: Drivers: scsi: remove __dev* attributes (Jan Vesely) [916003]
  - [scsi] bnx2i: Fix typo in printk and comments (Jan Vesely) [916003]
  - [scsi] bnx2i: fix the bit manipulation when setting the error mask (Jan Vesely) [916003]
  - [scsi] bnx2i: removed the individual PCI DEVICE ID checking (Jan Vesely) [916003]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-414.el6]
changelog:
  - [fs] Revert "ext4: dont let i_reserved_meta_blocks go negative" (Rafael Aquini) [916592]
  - [fs] Revert "ext4: introduce reserved space" (Rafael Aquini) [916592]
  - [netdrv] bnx2x: fill in sane dump flag information (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: remove zeroing of dump data buffer (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: fix dump flag handling (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: fix crash in bnx2x_set_vlan_stripping() (Michal Schmidt) [995475]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.1p driver release (Rob Evers) [947546]
  - [scsi] lpfc: Merge with "lpfc 8.3.31: Fixed system panic due to midlayer abort and (Rob Evers) [947546]
  - [scsi] lpfc: Removed obsolete fcp_eq_count and fcp_wq_count driver attributes (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Update Copyrights to 2013 for 8.3.38, 8.3.39, and 8.3.40 modifications (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed a race condition between SLI host and port failed FCF rediscovery (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed issue mailbox wait routine failed to issue dump memory mbox command (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed system panic due to unsafe walking and deleting linked list (Rob Evers) [947546]
  - [scsi] lpfc: lpfc 8.3.40: Fixed FCoE connection list vlan identifier and add FCF list debug (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Clarified the behavior of the lpfc_max_luns module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix to allow OCM to report FEC status (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed a missing return code in a logging message (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed some logging message fields (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed list corruption when lpfc_drain_tx runs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix starting reference tag when calculating BG error (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix inconsistent list removal causes crash (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed system panic during handling unsolicited receive buffer error condition (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix BlockGuard error checking (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed crash during FCoE failover testing (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix lpfc_used_cpu to be more dynamic (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed driver handling of CLEAR_LA with NPIV enabled causing SID=0 frames out (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Reduced tmo value set to FLOGI WQE for quick recovery from FLOGI sequence timeout (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Add log message when completes with clean address bit set to zero (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed driver vector mapping to CPU affinity (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed iocb flags not being reset for scsi commands (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed system panic during EEH recovery due to midlayer acting on outstanding I/O (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed not returning FAILED status when SCSI invoking host reset handler failed (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed bad book keeping in posting els sgls to port (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed BlockGuard to take advantage of rdprotect/wrprotect info when available (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Reduced spinlock contention on SCSI buffer list (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed crash when processing bsg's sg list with high memory pages (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Remove lpfc_fcp_look_ahead module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with SCSI Host reset (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Doorbell formation information logged in dual-chute mode WQ and RQ setup (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with large s/g lists for BlockGuard (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with large lpfc_sg_seg_cnt values (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed pt2pt and loop discovery problems on topology changes (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Remove driver dependency on HZ (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed BlockGuard error reporting (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed VPI allocation issues after firmware dump is performed (Rob Evers) [947546]
  - [scsi] lpfc: fix potential NULL pointer dereference in lpfc_sli4_rq_put() (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed potential mis-interpretation of READ_TOPOLOGY reserved fields (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fix default value for lpfc_enable_rrq (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed circular locking dependency and inconsistent lock state issues (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed PT2PT bring up problem for FC SLI4 (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed OXID reuse issue (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed async FCF modified event to in-use FCF failure to trigger recovery (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed deadlock condition in FCF round robin handling (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed bsg timeout handling issues that would result in crashes ? applied and checked into RHEL6.5 (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed degraded performance after cable pulls (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed NMI watch dog panic's when resetting the hba (Rob Evers) [947546]
  - [scsi] lpfc: treewide: Fix typos in kernel messages (Rob Evers) [947546]
  - [scsi] lpfc: fix lpfc build when wmb() is defined as mb() (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed infinite loop in lpfc_sli4_fcf_rr_next_index_get (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed crash due to SLI Port invalid resource count (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Provide support for FCoE protocol dual-chute (ULP) operation (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed stale ndlp state when the node is marked for deferred removal (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fix potential memory corruption bug (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed no-context ABTS failed with BA_RJT (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Removed use of NOP mailboxes for interrupt verification (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed exhausted retry for plogi to nameserver (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed ELS_REC received on the unsolicited receive queue (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Provide support for change_queue_type (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Correct mask error (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Correct buffer length overrun (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Update DIF support for passthru/strip/insert (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Fix bug with Target Resets and FCP2 devices (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fixed not checking solicition in progress bit when verifying FCF record for use (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fixed PRLI not being retried if a LS_RJT with a reason (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Expand I/O channel support for large systems (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.34: Adjust IO Channels to 1 when INTx (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fix interrupt delay multipler conversion for eq_create (Rob Evers) [947546]
  - [scsi] lpfc 8.3.34: Correct typecasts for snprintf messages (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.34: Fix number of IO channels to match CPUs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Fixed debugfs queInfo to include queue stats (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add lpfc_fcp_look_ahead module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Make I/O to hw queue distribution algorithm a module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Change Naming convention for SLI4 Interrupt vector (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Allow per-hba interrupt rate tuning (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Tie parallel I/O queues into separate MSIX vectors (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add Interrupts per second stats via debugfs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Parallelize SLI-4 Q distribution (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Formally separate lpfc_sli_ring SLI-3 and SLI-4 variantions (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add debugfs interface to display SLI queue information (Rob Evers) [947546]
  - [scsi] lpfc: treewide: fix comment/printk/variable typos (Rob Evers) [947546]
  - [netdrv] qlcnic: Update version to 5.2.43 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enhance virtual NIC logging (Chad Dupuis) [927395]
  - [netdrv] qlcnic: qlcnic_get_board_name() function cleanup (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Implement GET_LED_STATUS command for 82xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: modify reset recovery path in diag mode (Chad Dupuis) [927395]
  - [netdrv] qlcnic: diagnostics routine changes (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Convert nested if-else to switch-case (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Initialize trans_work and idc_aen_work at VF probe (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Remove qlcnic_config_npars module parameter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update IRQ name for 8200 and 8300 Series adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Disable INT-x interrupt for 83xx on driver unload (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support spoof check config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix LRO bugs while tuning offloads using Q application (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enable LRO if it was disabled by RX checksum (Chad Dupuis) [927395]
  - [netdrv] qlcnic: remove netdev->trans_start updates within the driver (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Return proper error codes from probe failure paths (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix validation of link event command (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix mailbox response handling (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix bug in diagnostics test reset recovery path (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix reset recovery after transmit timeout (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix ethtool supported port status for 83xx (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix missing bracket in module parameter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix ethtool strings (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix setting MAC address (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update version to 5.2.42 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add identifying string for 83xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Rename the IRQ description (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enable Interrupt Coalescing for 83xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add eSwitch statistics support (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Take EPORT out of reset sequence before disabling PAUSE (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enhance channel configuration logs (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update version to 5.2.41 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support polling for mailbox events (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix loopback test for SR-IOV PF (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support VLAN id config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support MAC address, Tx rate config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF reset recovery implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF FLR implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Change 82xx adapter VLAN id endian type (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix typo in logs (Chad Dupuis) [927395]
  - [netdrv] qlcnic: fix TSO race condition (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Stop traffic before performing loopback test (Chad Dupuis) [927395]
  - [netdrv] qlcnic: fix beaconing test for 82xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix set_flags handler for ethtool (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Bump up the version to 5.2.40 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix sparse warnings (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix NULL dereference in error path (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix potential NULL dereference (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Bump up the version to 5.2.39 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support atomic commands (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support VF-PF communication channel commands (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF-PF communication channel implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Use shared interrupt vector for Tx and Rx (Chad Dupuis) [927395]
  - [netdrv] qlcnic: SR-IOV VF probe (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support SR-IOV enable and disable (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add QLCNIC_SRIOV to Kconfig (Chad Dupuis) [927395]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-415.el6]
changelog:
  - [drm] upstream sync to 3.9.9 (Rob Clark) [818344 902637 962824]
  - [uapi] install UAPI headers in the correct path (Rob Clark) [962824]
  - [debug] lockdep: provide mutex_lock_nest_lock (Rob Clark) [962824]
  - [pci] backport PCIE_SPEED_* (Rob Clark) [962824]
  - [pci] Add PCIe Link Capability link speed and width names (Rob Clark) [962824]
  - [fs] export get_task_comm() (Rob Clark) [962824]
  - [x86] sgi-xp: handle non-fatal traps - headers (George Beshers) [956876]
  - [x86] sgi-xp: handle non-fatal traps (George Beshers) [956876]
  - [x86] irq: Rename gsi_end gsi_top, and fix off by one errors (Prarit Bhargava) [998602]
  - [x86] ioapic: In mpparse use mp_register_ioapic (Prarit Bhargava) [998602]
  - [x86] ioapic: Teach mp_register_ioapic to compute a global gsi_end (Prarit Bhargava) [998602]
  - [x86] Reinsert "io_apic: initialize nr_ioapic_registers early in mp_register_ioapic()" (Prarit Bhargava) [855057 998602]
  - [virt] Add a check to catch KVM emulation of Hyper-V (Jason Wang) [985747]
  - [virt] kvm: Switch to use hypervisor_cpuid_base() (Jason Wang) [985747]
  - [x86] Introduce hypervisor_cpuid_base() (Jason Wang) [985747]
  - [kernel] kexec: add the values related to buddy system for filtering free pages (Nigel Croxon) [960746]
  - [virt] hv_balloon: Initialize the transaction ID just before sending the packet (Jason Wang) [993473]
  - [virt] hv_balloon: Do not post pressure status if interrupted (Jason Wang) [993473]
  - [virt] hv_balloon: Fix a bug in the hot-add code (Jason Wang) [993473]
  - [kernel] sysctl: range checking in do_proc_dointvec_ms_jiffies_conv (Francesco Fusco) [972430]
  - [net] neigh: prevent overflowing params in /proc/sys/net/ipv4/neigh/ (Francesco Fusco) [972430]
  - [net] neigh: fix some compiler warning in net/core/neighbour.c (Francesco Fusco) [972430]
  - [net] neigh: prohibit negative value for unres_qlen_bytes parameter (Francesco Fusco) [972430]
  - [net] netfilter: don't permit ct creation with random tuple (Thomas Graf) [994393]
  - [net] netfilter: fix BUG_ON while removing nf_conntrack with netns (Thomas Graf) [991246]
  - [net] gro: Fix kcalloc argument order (Amerigo Wang) [995405]
  - [net] gro: fix a race in gro_cell_poll() (Amerigo Wang) [995405]
  - [net] ip_tunnel: fix a pointer cast in ip_tunnel_xmit() (Amerigo Wang) [995405]
  - [virt] xen: avoid allocation causing potential swap activity on the resume path (Radim Krcmar) [996631]
  - [virt] xen: ensure timer tick is resumed even on CPU driving the resume (Radim Krcmar) [996631]
  - [infiniband] ipoib: Fix race in deleting ipoib_neigh entries (Doug Ledford) [987174]
  - [scsi] libiscsi: Added new boot entries in the session sysfs (Chris Leech) [994743]
  - [x86] kvm: use kernel_fpu_begin/end() in kvm_load/put_guest_fpu() (Fam Zheng) [988658]
  - [block] do not pass disk names as format strings (Alexander Gordeev) [971372] {CVE-2013-2851}


author: Rafael Aquini <aquini@redhat.com> [2.6.32-416.el6]
changelog:
  - [fs] gfs2: dont overrun reserved revokes (Benjamin Marzinski) [996637]
  - [s390] qeth: change default standard blkt settings for OSA (Hendrik Brueckner) [997625]
  - [s390] kernel: z90crypt module load crash (Hendrik Brueckner) [997621]
  - [s390] dasd: fix hanging devices after path events (Hendrik Brueckner) [996185]
  - [cpufreq] revert "remove rwsem lock from CPUFREQ_GOV_STOP call -- second call site" (Prarit Bhargava) [869899]
  - [perf] Fix regs retrieval for tracepoints events (Jiri Olsa) [1000706]
  - [tools] perf: Fix period symbol_conf.field_sep display (Jiri Olsa) [985968]
  - [tools] traceevent: Handle dynamic array's element size properly (Jiri Olsa) [664899]
  - [tools] perf: Fix perf build make command and BuildRequires (Jiri Olsa) [968186]
  - [tools] perf: Add support for wildcard in tracepoint system name (Jiri Olsa) [664899]
  - [perf] Add support for PERF_HW_COUNT_REF_CPU_CYCLES (Jiri Olsa) [968806]
  - [perf] events: Add Intel x86 mapping for PERF_COUNT_HW_REF_CPU_CYCLES (Jiri Olsa) [968806]
  - [perf] events: Add PERF_COUNT_HW_REF_CPU_CYCLES generic PMU event (Jiri Olsa) [968806]
  - [perf] events: Enable raw event support for Intel unhalted_reference_cycles event (Jiri Olsa) [968806]
  - [net] phonet: some signedness bugs (Francesco Fusco) [1000271]
  - [net] phonet: put protocols array under RCU (Francesco Fusco) [1000271]
  - [net] openvswitch: Add vxlan tunneling support (Amerigo Wang) [981285]
  - [net] vxlan: Add tx-vlan offload support (Amerigo Wang) [981285]
  - [net] vxlan: Improve vxlan headroom calculation (Amerigo Wang) [981285]
  - [net] vxlan: Factor out vxlan send api (Amerigo Wang) [981285]
  - [net] vxlan: Extend vxlan handlers for openvswitch (Amerigo Wang) [981285]
  - [net] vxlan: Add vxlan recv demux (Amerigo Wang) [981285]
  - [net] vxlan: Restructure vxlan receive (Amerigo Wang) [981285]
  - [net] vxlan: Restructure vxlan socket apis (Amerigo Wang) [981285]
  - [net] openvswitch: Reset tunnel key between input and output (Amerigo Wang) [981285]
  - [net] openvswitch: Use correct type while allocating flex array (Amerigo Wang) [981285]
  - [net] openvswitch: Fix bad merge resolution (Amerigo Wang) [981285]
  - [net] vxlan: fix a soft lockup in vxlan module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix a regression of igmp join (Amerigo Wang) [923915]
  - [net] vxlan: fix rcu related warning (Amerigo Wang) [923915]
  - [net] vxlan: fdb: replace an existing entry (Amerigo Wang) [923915]
  - [kernel] list: introduce list_first_entry_or_null (Amerigo Wang) [923915]
  - [net] vxlan: fix igmp races (Amerigo Wang) [923915]
  - [net] vxlan: unregister on namespace exit (Amerigo Wang) [923915]
  - [net] vxlan: add necessary locking on device removal (Amerigo Wang) [923915]
  - [net] vxlan: Fix kernel crash on rmmod (Amerigo Wang) [923915]
  - [net] vxlan: fix function name spelling (Amerigo Wang) [923915]
  - [net] vxlan: fdb: allow specifying multiple destinations for zero MAC (Amerigo Wang) [923915]
  - [net] rtnetlink: allow using zero MAC address in rtnl_fdb_add, rtnl_fdb_del (Amerigo Wang) [923915]
  - [net] fix address check in rtnl_fdb_del (Amerigo Wang) [923915]
  - [net] vxlan: allow removal of single destination from fdb entry (Amerigo Wang) [923915]
  - [net] vxlan: introduce vxlan_fdb_parse (Amerigo Wang) [923915]
  - [net] vxlan: introduce vxlan_fdb_find_rdst (Amerigo Wang) [923915]
  - [net] vxlan: add implicit fdb entry for default destination (Amerigo Wang) [923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: cosmetic cleanup's (Amerigo Wang) [923915]
  - [net] vxlan: Use initializer for dummy structures (Amerigo Wang) [923915]
  - [net] vxlan: port module param should be ushort (Amerigo Wang) [923915]
  - [net] vxlan: convert remotes list to list_rcu (Amerigo Wang) [923915]
  - [net] vxlan: make vxlan_xmit_one void (Amerigo Wang) [923915]
  - [net] vxlan: move cleanup to uninit (Amerigo Wang) [923915]
  - [net] vxlan: fix race caused by dropping rtnl_unlock (Amerigo Wang) [923915]
  - [net] vxlan: send notification when MAC migrates (Amerigo Wang) [923915]
  - [net] vxlan: move IGMP join/leave to work queue (Amerigo Wang) [923915]
  - [net] vxlan: fix crash from work pending on module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix out of order operation on module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix check for migration of static entry (Amerigo Wang) [923915]
  - [net] vxlan: handle skb_clone failure (Amerigo Wang) [923915]
  - [net] vxlan: only migrate dynamic FDB entries (Amerigo Wang) [923915]
  - [net] vxlan: fix race between flush and incoming learning (Amerigo Wang) [923915]
  - [net] vxlan: defer vxlan init as late as possible (Amerigo Wang) [923915]
  - [net] vxlan: use unsigned int instead of unsigned (Amerigo Wang) [923915]
  - [net] vxlan: remove the unused rcu head from struct vxlan_rdst (Amerigo Wang) [923915]
  - [net] vxlan: Update vxlan fdb 'used' field after each usage (Amerigo Wang) [923915]
  - [net] vxlan: listen on multiple ports (Amerigo Wang) [923915]
  - [net] vxlan: do not set SKB_GSO_UDP (Amerigo Wang) [923915]
  - [net] vxlan: allow choosing destination port per vxlan (Amerigo Wang) [923915]
  - [net] vxlan: compute source port in network byte order (Amerigo Wang) [923915]
  - [net] vxlan: source compatiablity with IFLA_VXLAN_GROUP (Amerigo Wang) [923915]
  - [net] vxlan: fix byte order issues with NDA_PORT (Amerigo Wang) [923915]
  - [net] vxlan: document UDP default port (Amerigo Wang) [923915]
  - [net] vxlan: update mail address and copyright date (Amerigo Wang) [923915]
  - [net] vxlan: Allow L2 redirection with L3 switching (Amerigo Wang) [923915]
  - [net] vxlan: Allow setting destination to unicast address (Amerigo Wang) [923915]
  - [net] vxlan: don't bypass encapsulation for multi- and broadcasts (Amerigo Wang) [923915]
  - [net] vxlan: use htonl when snooping for loopback address (Amerigo Wang) [923915]
  - [net] vxlan: fix some sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: Bypass encapsulation if the destination is local (Amerigo Wang) [923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: Use IP Tunnels tunnel ENC encap API (Amerigo Wang) [923915]
  - [net] vxlan: generalize forwarding tables (Amerigo Wang) [923915]
  - [net] vxlan: Add vlan support to static neighbors (Amerigo Wang) [923915]
  - [net] vxlan: allow live mac address change (Amerigo Wang) [923915]
  - [net] vxlan: add DOVE extensions for VXLAN (Amerigo Wang) [923915]
  - [net] vxlan: move SET_ETHTOOL_OPS() to vxlan_newlink() (Amerigo Wang) [923915]
  - [net] vxlan: specify fl4.proto before calling ip_route_output_key() (Amerigo Wang) [923915]
  - [net] vxlan: Depend on CONFIG_INET (Amerigo Wang) [923915]
  - [net] fix invalid usage of netdev->priv_flags (Stanislaw Gruszka) [984373]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-417.el6]
changelog:
  - [target] Set bi_destructor in iblock_get_bio (Andy Grover) [999490]
  - [target] Fix calling bdev_get_queue on a NULL *bio (Andy Grover) [999490]
  - [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999365] {CVE-2013-0343}
  - [net] soreuseport: UDP/IPv6 implementation (Thomas Graf) [991600]
  - [net] soreuseport: TCP/IPv6 implementation (Thomas Graf) [991600]
  - [net] soreuseport: UDP/IPv4 implementation (Thomas Graf) [991600]
  - [net] soreuseport: TCP/IPv4 implementation (Thomas Graf) [991600]
  - [net] soreuseport: infrastructure (Thomas Graf) [991600]
  - [kernel] prevent an older auditd shutdown from orphaning a newer auditd startup (Richard Guy Briggs) [742562]
  - [kernel] audit: add an option to control logging of passwords with pam_tty_audit (Richard Guy Briggs) [725100]
  - [misc] hpilo: Correct panic when an AUX iLO is detected (Nigel Croxon) [996600]
  - [watchdog] hpwdt: Patch to ignore auxilary iLO devices (Nigel Croxon) [996608]
  - [netdrv] igb: fix vlan filtering in promisc mode when not in VT mode (Stefan Assmann) [996277]
  - [char] random: fix priming of last_data (Jarod Wilson) [997985]
  - [char] random: prime last_data value per fips requirements (Jarod Wilson) [997985]
  - [char] random: simplify fips mode (Jarod Wilson) [997985]
  - [fs] nfs: don't extend writes to cover entire page if pagecache is invalid (Jeff Layton) [1002830]
  - [fs] nfs: fix inode reference leak (Steve Dickson) [998694]
  - [fs] nfs: Use session max response size for GETDEVICEINFO gdia_maxcount (Steve Dickson) [922810]
  - [fs] nfs: Simplify the NFSv4 REMOVE, LINK and RENAME compounds (Steve Dickson) [998697]
  - [fs] nfs: Simplify the NFSv4 CREATE compound (Steve Dickson) [998697]
  - [fs] nfs: Simplify the NFSv4 OPEN compound (Steve Dickson) [998697]
  - [fs] nfs: Simplify the cache invalidation code (Steve Dickson) [998697]
  - [fs] nfs: Change attribute updates should set NFS_INO_REVAL_PAGECACHE (Steve Dickson) [998697]
  - [fs] nfs: Simplify nfs_fhget() (Steve Dickson) [998697]
  - [fs] nfs: Always trust the PageUptodate flag when we have a delegation (Steve Dickson) [998697]
  - [fs] nfs: Optimise away nfs_check_inode_attributes() when holding a delegation (Steve Dickson) [998697]
  - [fs] nfs: Dont force page cache revalidations when holding a delegation (Steve Dickson) [998697]
  - [fs] nfs: Retrieve attributes _before_ calling delegreturn (Steve Dickson) [998697]
  - [fs] nfs: Fix a typo in NFS4_enc_link_sz (Steve Dickson) [998697]
  - [scsi] Fix bug on some bnx2x devices that don't support iSCSI (Tomas Henzl) [957217]
  - [scsi] mpt3sas: Added a driver module parameter max_msix_vectors (Tomas Henzl) [997045]
  - [scsi] aacraid: Fix for arrays going offline in the system. System hangs (Rich Bono) [996207]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-418.el6]
changelog:
  - [netdrv] bnx2x: prevent crash in shutdown flow with CNIC (Michal Schmidt) [1003436]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [998752]
  - [wireless] iwl4965: fix rfkill set state regression (Stanislaw Gruszka) [992969]
  - [wireless] rt2800: fix wrong TX power compensation (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: add missing channel context release (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: add a flag to indicate CCK support for HT clients (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: Restore skb headroom when returning skb to mac80211 (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Enable PLL fix only for AR9340/AR9330 (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: disable L1 Active after pci_enable_device (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: dvm: fix calling ieee80211_chswitch_done() with NULL (Stanislaw Gruszka) [992969]
  - [wireless] Hostap: copying wrong data prism2_ioctl_giwaplist() (Stanislaw Gruszka) [992969]
  - [wireless] zd1201: do not use stack as URB transfer_buffer (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: unregister leds when registration failed (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: take the seqno from packet if transmit failed (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: don't set the MCAST queue in STA's queue list (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: properly tell the fw that a STA is awake (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix MCAST in AP mode (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: correctly configure MCAST in AP mode (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: don't wait for TX status forever (Stanislaw Gruszka) [992969]
  - [wireless] nl80211: fix another nl80211_fam.attrbuf race (Stanislaw Gruszka) [992969]
  - [wireless] cfg80211: fix P2P GO interface teardown (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: continue using disabled channels while connected (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix infinite loop in ieee80211_determine_chantype (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: ignore HT primary channel while connected (Stanislaw Gruszka) [992969]
  - [wireless] iwl4965: reset firmware after rfkill off (Stanislaw Gruszka) [992969]
  - [wireless] iwl4965: set power mode early (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: dvm: don't send BT_CONFIG on devices w/o Bluetooth (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: set SSID bits for passive channels (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: fix stop queue (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix monitor interface suspend crash regression (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix ethtool stats for non-station interfaces (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix duplicate retransmission detection (Stanislaw Gruszka) [992969]
  - [wireless] mac80211/minstrel_ht: fix cck rate sampling (Stanislaw Gruszka) [992969]
  - [wireless] mac80211/minstrel: fix NULL pointer dereference issue (Stanislaw Gruszka) [992969]
  - [wireless] nl80211: fix mgmt tx status and testmode reporting for netns (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: reboot firmware if it was loaded (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: do some initial hardware configuration (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix flushing not started aggregation sessions (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: add DELL SKU for 5150 HMC (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: refuse connection to APs with BI < 16 (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix bug in scan ssid (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix L2P BA ressources leak (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: close AP_VLAN interfaces before unregistering all (Stanislaw Gruszka) [992969]
  - [wireless] b43: ensue that BCMA is "y" when B43 is "y" (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Do not assign noise for NULL caldata (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Fix noisefloor calibration (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_hw: Assign default xlna config for AR9485 (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: rt2800lib: fix default TX power check for RT55xx (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: read 5GHz TX power values from the correct offset (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: wake the queue if stopped when being unmapped (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: fix race in queue unmapping (Stanislaw Gruszka) [992969]
  - [fs] ext4: don't let i_reserved_meta_blocks go negative (Lukas Czerner) [916592]
  - [fs] ext4: introduce reserved space (Lukas Czerner) [916592]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-419.el6]
changelog:
  - [netdrv] bonding: Fix corrupted queue_mapping (Veaceslav Falico) [991799]
  - [fs] xfs: fallback to vmalloc for large buffers in xfs_attrlist_by_handle (Eric Sandeen) [905086]
  - [fs] nfs: set open access operation call flag in nfs4_init_opendata_res (Jeff Layton) [1002855]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1002765]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-420.el6]
changelog:
  - [net] ipv6: Don't depend on per socket memory for neighbour discovery messages (Thomas Graf) [963317]
  - [netdrv] bnx2x: add missing ethtool ops of virtual functions (Michal Schmidt) [1009492]
  - [netdrv] bnx2x: avoid atomic allocations during initialization (Michal Schmidt) [1004645 1007900]
  - [netdrv] bnx2x: Fix VF stats sync (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix VF memory leak unload (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix functionality of configuring vlan list (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix move FP memory deallocations (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: vf mark stats started (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: set VF DMAE when first function has 0 supported VFs (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Protect against VFs' ndos when SR-IOV is disabled (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: prevent VF benign attentions (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Consider DCBX remote error (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Change DCB context handling (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: dropless flow control not always functional (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: fix PTE write access error (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: fix memory leak in VF (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: update fairness parameters following DCB negotiation (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: protect different statistics flows (Michal Schmidt) [1007900]
  - [scsi] lpfc: update version for 8.3.7.21.2p driver release (Rob Evers) [1007485]
  - [scsi] lpfc: 8.3.42: Fixed issue of task management commands having a fixed timeout (Rob Evers) [1007485]
  - [scsi] rdac: Add new IBM product id to the RDAC devlist (Rob Evers) [1006061]
  - [block] hpsa: remove unused Smart Array ID (Tomas Henzl) [1002788]
  - [block] hpsa: bump driver version to reflect changes (Tomas Henzl) [1002788]
  - [block] hpsa: housekeeping patch for device_id and product arrays (Tomas Henzl) [1002788]
  - [block] hpsa: add HP Smart Array Gen8 names (Tomas Henzl) [1002788]
  - [block] hpsa: add HP Smart Array Gen9 PCI ID's (Tomas Henzl) [1002788]
  - [block] hpsa: remove unneeded variable (Tomas Henzl) [893773]
  - [block] hpsa: fix a race in cmd_free/scsi_done (Tomas Henzl) [893773]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k2 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Export more firmware info in sysfs (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Only BIOS boot target entries should be at index 0 and 1 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: discovery_parent_idx can be shown without any check (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Set IPv6 traffic class if device type is IPv6 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Use discovery_parent_idx instead of discovery_parent_type (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Allow removal of failed session using logout (Chad Dupuis) [982175]
  - [scsi] libiscsi: Add missing prints for session and connection sysfs attrs (Chad Dupuis) [982175]
  - [scsi] megaraid_sas: Add High Availability clustering support using shared Logical Disks (Tomas Henzl) [997004]
  - [scsi] megaraid_sas: Version and Changelog update (Tomas Henzl) [997004]
  - [net] cnic: Use CHIP_NUM macros from bnx2x.h (Tomas Henzl) [1004554]
  - [hid] validate HID report id size (Frantisek Hrbata) [1000453] {CVE-2013-2888}
  - [infiniband] cma: Check for GID on listening device first (Doug Ledford) [920306]
  - [infiniband] cma: use cached gids (Doug Ledford) [920306]
  - [input] wacom: collect device quirks into single function (Aristeu Rozanski) [815589]
  - [input] wacom: add device type to device name string (Aristeu Rozanski) [815589]
  - [input] wacom: request tablet data for Bamboo Pens (Aristeu Rozanski) [815589]
  - [input] wacom: implement missing multitouch wrappers (Aristeu Rozanski) [815589]
  - [input] wacom: fix bug in HID parsing introduced by last patchset (Aristeu Rozanski) [815589]
  - [fs] nfsv4: Clean up delegation recall error handling (Steve Dickson) [1007556]
  - [fs] nfsv4: Clean up nfs4_open_delegation_recall (Steve Dickson) [1007556]
  - [fs] nfsv4: Clean up nfs4_lock_delegation_recall (Steve Dickson) [1007556]
  - [fs] nfs: It is not safe to dereference lsp->ls_state in release_lockowner (Steve Dickson) [962844]
  - [fs] nfs: Ensure that we free the lock stateid on the server (Steve Dickson) [962844]
  - [fs] nfs: Don't free the nfs4_lock_state until after the release_lockowner (Steve Dickson) [962844]
  - [fs] nfs: Convert nfs41_free_stateid to use an asynchronous RPC call (Steve Dickson) [962844]
  - [fs] nfs: Clean up TEST_STATEID and FREE_STATEID error reporting (Steve Dickson) [962844]
  - [fs] nfs: Clean up handling of privileged operations (Steve Dickson) [962844]
  - [fs] nfs: Clean up nfs41_setup_sequence (Steve Dickson) [962844]
  - [fs] nfs: Pass a stateid to test_stateid() and free_stateid() (Steve Dickson) [962844]
  - [fs] nfs: added FREE_STATEID call (Steve Dickson) [962844]
  - [virt] xen: mask cpu feature avx (Andrew Jones) [1006549]
  - [fs] nfsv4: Fix up nfs4_proc_lookup_mountpoint (Jeff Layton) [997133]
  - [block] rsxx: Moving pci_map_page to prevent overflow (Steve Best) [1001555]
  - [block] rsxx: Handling failed pci_map_page on PowerPC and double free (Steve Best) [1001545]
  - [kernel] sched/rt: Add a tuning knob to allow changing SCHED_RR timeslice (Herbert Xu) [919238]
  - [kernel] sched: Make initial SCHED_RR timeslace DEF_TIMESLICE (Herbert Xu) [919238]
  - [block] nvme: nvme_submit_bio_queue fixup check for DISCARD (David Milburn) [1006051]
  - [block] nvme: Update nvme_id_power_state with latest spec (David Milburn) [1006051]
  - [block] nvme: Split header file into user-visible and kernel-visible pieces (David Milburn) [1006051]
  - [block] nvme: Merge issue on character device bring-up (David Milburn) [1006051]
  - [block] nvme: Handle ioremap failure (David Milburn) [1006051]
  - [block] nvme: Add pci suspend/resume driver callbacks (David Milburn) [1006051]
  - [block] nvme: Use normal shutdown (David Milburn) [1006051]
  - [block] nvme: Separate controller init from disk discovery (David Milburn) [1006051]
  - [block] nvme: Separate queue alloc/free from create/delete (David Milburn) [1006051]
  - [block] nvme: Group pci related actions in functions (David Milburn) [1006051]
  - [block] nvme: Disk stats for read/write commands only (David Milburn) [1006051]
  - [block] nvme: Bring up cdev on set feature failure (David Milburn) [1006051]
  - [block] nvme: Fix checkpatch issues (David Milburn) [1006051]
  - [block] nvme: Namespace IDs are unsigned (David Milburn) [1006051]
  - [block] nvme: Call nvme_process_cq from submission path (David Milburn) [1006051]
  - [block] nvme: Remove "process_cq did something" message (David Milburn) [1006051]
  - [block] nvme: Return correct value from interrupt handler (David Milburn) [1006051]
  - [block] nvme: Disk IO statistics (David Milburn) [1006051]
  - [block] nvme: Restructure MSI / MSI-X setup (David Milburn) [1006051]
  - [block] nvme: Use kzalloc instead of kmalloc+memset (David Milburn) [1006051]
  - [netdrv] e1000e: Add code to check for failure of pci_disable_link_state call (John Green) [1000548]
  - [tools] perf: Fix missing tool parameter (Jiri Olsa) [984785]
  - [tools] perf: Remove builtin-inject unused parameter (Jiri Olsa) [984785]
  - [mm] pagewalk: walk_page_range should avoid VM_PFNMAP areas (Larry Woodman) [990753]
  - [mm] pagemap: set pagemap walk limit to PMD boundary (Motohiro Kosaki) [991260]
  - [mm] task_mmu: fix buffer overflow in add_page_map() (Motohiro Kosaki) [991260]
  - [mm] proc: copy_to_user() returns unsigned (Motohiro Kosaki) [991260]
  - [mm] pagemap: Hold mmap_sem during page walk (Motohiro Kosaki) [991260]
  - [netdrv] ixgbe: fix lockdep annotation issue for ptp's work item (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: add support for quad-port x520 adapter (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: clear semaphore bits on timeouts (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix semaphore lock for I2C read/writes on 82598 (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: add new media type (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: bump version number (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix SFF data dumps of SFP+ modules (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Fix Tx Hang issue with lldpad on 82598EB (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix fc autoneg ethtool reporting (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Retain VLAN filtering in promiscuous + VT mode (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (Andy Gospodarek) [986967]
  - [lib] dma-debug: Fix comparison using wrong pointer variable in dma debug code (Stefan Assmann) [1002992]
  - [lib] dma-debug: hash_bucket_find needs to allow for offsets within an entry (Stefan Assmann) [1002992]
  - [mm] x86-64: fall back to regular page vmemmap on allocation failure (Johannes Weiner) [854363]
  - [mm] x86-64: use vmemmap_populate_basepages() for !pse setups (Johannes Weiner) [854363]
  - [mm] x86-64: remove dead debugging code for !pse setups (Johannes Weiner) [854363]
  - [mm] sparse-vmemmap: specify vmemmap population range in bytes (Johannes Weiner) [854363]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-421.el6]
changelog:
  - [scsi] bnx2fc: Bump version from 1.0.14 to 2.4.1 (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: hung task timeout warning observed when rmmod bnx2x with active FCoE targets (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: Fixed a SCSI CMD cmpl race condition between ABTS and CLEANUP (Tomas Henzl) [1008733]
  - [scsi] cnic: Fix crash in, cnic_bnx2x_service_kcq() (Tomas Henzl) [1004554]
  - [hid] zeroplus: validate output report details (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [hid] provide a helper for validating hid reports (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [netdrv] sfc: Add SIOCEFX:EFX_MCDI_REQUEST ioctl to workaround MTD limits (Nikolay Aleksandrov) [1008705]
  - [netdrv] sfc: deny changing of unsupported flags (Nikolay Aleksandrov) [1010840]
  - [kernel] __ptrace_may_access() should not deny sub-threads (Oleg Nesterov) [927360]
  - [tools] perf: Make kmem work for non numa machines (Jiri Olsa) [984788]
  - [powerpc] Bring all threads online prior to migration/hibernation (Steve Best) [1010528]
  - [kvm] introduce guest count uevent (Paolo Bonzini) [1004802]
  - [scsi] iscsi_tcp: consider session state in iscsi_sw_sk_state_check (Chris Leech) [840638]
  - [crypto] ansi_cprng: Fix off by one error in non-block size request (Neil Horman) [1007694] {CVE-2013-4345}
  - [infiniband] cache: don't fill the cache with junk (Doug Ledford) [920306]
  - [usb] core: don't try to reset_device() a port that got just disconnected (Don Zickus) [1000944]
  - [usb] Fix connected device switch to Inactive state (Don Zickus) [1000944]
  - [usb] Don't use EHCI port sempahore for USB 3.0 hubs (Don Zickus) [1000944]
  - [netdrv] macvtap: Ignore tap features when VNET_HDR is off (Vlad Yasevich) [987201]
  - [netdrv] macvtap: Correctly set tap features when IFF_VNET_HDR is disabled (Vlad Yasevich) [987201]
  - [netdrv] macvtap: simplify usage of tap_features (Vlad Yasevich) [987201]
  - [infiniband] mlx4: Use default pkey when creating tunnel QPs (Doug Ledford) [993587]
  - [infiniband] core: Create QP1 using the pkey index which contains the default pkey (Doug Ledford) [993587]
  - [infiniband] ipoib: Make sure child devices use valid/proper pkeys (Doug Ledford) [993587]
  - [infiniband] ipoib: Fix pkey change flow for virtualization environments (Doug Ledford) [993587]
  - [netdrv] igb: don't deprecate the max_vfs parameter (Stefan Assmann) [1005877]
  - [netdrv] igb: Read flow control for i350 from correct EEPROM section (Stefan Assmann) [1005877]
  - [netdrv] igb: Add additional get_phy_id call for i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Update version number (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation to report advertised/supported link on i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Get speed and duplex for 1G non_copper devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Support to get 2_5G link status for appropriate media type (Stefan Assmann) [1005877]
  - [netdrv] igb: No PHPM support in i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: M88E1543 PHY downshift implementation (Stefan Assmann) [1005877]
  - [netdrv] igb: New PHY_ID for i354 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation of 1-sec delay for i210 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Don't look for a PBA in the iNVM when flashless (Stefan Assmann) [1005877]
  - [netdrv] igb: Expose RSS indirection table for ethtool (Stefan Assmann) [1005877]
  - [netdrv] igb: Add macro for size of RETA indirection table (Stefan Assmann) [1005877]
  - [netdrv] igb: Fix get_fw_version function for all parts (Stefan Assmann) [1005877]
  - [netdrv] igb: Add device support for flashless SKU of i210 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor NVM read functions to accommodate devices with no flash (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor of init_nvm_params (Stefan Assmann) [1005877]
  - [netdrv] igb: Update MTU so that it is always at least a standard frame size (Stefan Assmann) [1005877]
  - [netdrv] igb: don't allow SR-IOV without MSI-X (Stefan Assmann) [1005877]
  - [netdrv] igb: Added rcu_lock to avoid race (Stefan Assmann) [1005877]
  - [netdrv] igb: Read register for latch_on without return value (Stefan Assmann) [1005877]
  - [netdrv] igb: Reset the link when EEE setting changed (Stefan Assmann) [1005877]
  - [netdrv] treewide: relase -> release (Stefan Assmann) [1005877]
  - [scsi] iterate over devices individually for /proc/scsi/scsi (David Milburn) [966170]
  - [scsi] zfcp: fix lock imbalance by reworking request queue locking (Mikulas Patocka) [803592]
  - [kernel] pidns: fix two invalid task_active_pid_ns() usages (Aristeu Rozanski) [984597]
  - [netdrv] be2net: implement ethtool set/get_channel hooks (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_setup() to consolidate queue creation routines (Ivan Vecera) [975885]
  - [netdrv] be2net: Fix be_cmd_if_create() to use MBOX if MCCQ is not created (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_get_resources() code (Ivan Vecera) [975885]
  - [netdrv] be2net: don't limit max MAC and VLAN counts (Ivan Vecera) [975885]
  - [netdrv] be2net: Fixup profile management routines (Ivan Vecera) [975885]
  - [netdrv] be2net: use EQ_CREATEv2 for SH-R (Ivan Vecera) [975885]
  - [netdrv] be2net: delete primary MAC address while unloading (Ivan Vecera) [874733]
  - [netdrv] be2net: use SET/GET_MAC_LIST for SH-R (Ivan Vecera) [874733]
  - [netdrv] be2net: refactor MAC-addr setup code (Ivan Vecera) [874733]
  - [netdrv] be2net: fix pmac_id for BE3 VFs (Ivan Vecera) [874733]
  - [netdrv] be2net: allow VFs to program MAC and VLAN filters (Ivan Vecera) [874733]
  - [netdrv] be2net: fix MAC address modification for VF (Ivan Vecera) [874733]
  - [netdrv] be2net: don't use dev_err when AER enabling fails (Ivan Vecera) [986513]
  - [netdrv] be2net: Clear any capability flags that driver is not interested in (Ivan Vecera) [998856]
  - [net] ethtool: fix RHEL backport of ETHTOOL_RESET (Jiri Benc) [1008678]
  - [net] gact: Fix potential panic in tcf_gact() (Jiri Benc) [1003781]
  - [net] tcp: fix FIONREAD/SIOCINQ (Francesco Fusco) [1001479]
  - [net] vxlan: Avoid creating fdb entry with NULL destination (Amerigo Wang) [923915]
  - [net] bridge: sync the definition of struct br_mdb_entry with upstream (Amerigo Wang) [1010251]
  - [fs] proc/ns: Fix ABI of proc_inode (Thomas Graf) [1005224]
  - [fs] nfs: Fix writeback performance issue on cache invalidation (Scott Mayhew) [1010038]
  - [fs] xfs: switch stacks for bmap btree modifications (Dave Chinner) [918359]
  - [fs] GFS2: Dont flag consistency error if first mounter is a spectator (Robert S Peterson) [997929]
  - [x86] Mark Intel Haswell-EP as supported (Prarit Bhargava) [948339]
  - [s390] tx: allow program interruption filtering in user space (Hendrik Brueckner) [1006523]
  - [tty] hvc_iucv: Disconnect IUCV connection when lowering DTR (Hendrik Brueckner) [1007570]
  - [tty] hvc_console: Add DTR/RTS callback to handle HUPCL control (Hendrik Brueckner) [1007570]
  - [netdrv] bonding: fix bond_arp_rcv setting and arp validate desync state (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix store_arp_validate race with mode change (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix set mode race conditions (Nikolay Aleksandrov) [1003697]
  - [bluetooth] rfcomm: Fix info leak in RFCOMMGETDEVLIST ioctl() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [bluetooth] rfcomm: Fix info leak via getsockname() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [mm] mlock: operate on any regions with protection != PROT_NONE (Larry Woodman) [982460]
  - [mm] mlock: avoid dirtying pages and triggering writeback (Larry Woodman) [982460]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Tim Powers <timp@redhat.com>
changelog:
  - patched to build with gcc-2.96
  - use gcc instead of c++ for CXX, otherwise you expose an ICE in gcc when
    using g++ on two files, one being a C++ source, and the other a C source.
    Using gcc does the correct thing.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - explicitly list the modules which are built when the package compiles, so
    that module build failures (for whatever reason) get caught


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.9-1
changelog:
  - include patch based on patch from Ulf Härnhammar to fix unsafe use of
    sscanf when reading http directory listings (CAN-2003-0963)
  - include patch based on patch from Ulf Härnhammar to fix compile warnings
    modified based on input from Solar Designer


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-1
changelog:
  - update to 2.6.10, which folds in the previous patches
  - configure with --with-debug so that we get useful debug info


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-3
changelog:
  - add patch to avoid DoS when connecting to HTTP servers (or "HTTP" "servers")
    which don't provide status headers, or provide empty lines instead of status
    headers


author: Jason Vas Dias <jvdias@redhat.com> - 3.3.2-1
changelog:
  - *** PLEASE COULD ANYONE MODIFYING lftp TEST IT BEFORE SUBMITTING! ***
    (and preferably contact the lftp package maintainer (me) first - thank you!)
    bug 171096 : 'mget files in lftp causes abort' (core dump actually)
    resulted from not doing so .
    See http://lftp.yar.ru :
  	Recent events:2005-10-17: 
  	lftp-3.3.2 released. Fixed a coredump caused by double-free.


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-1
changelog:
  - Upgrade to version 3.3.5
  - fix bug bz172376 : host lookups should use any address found after timeout


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-4
changelog:
  - fix bug 176315: openssl libraries not being picked up - gnutls was instead
  - improvements to bug 172376 fix


author: Maros Barabas <mbarabas@redhat.com> - 3.5.10-3
changelog:
  - Correct mistake removing devel package & calling chkconfig
  - Resolves #235436
  - Removing automake autoconf
  - Resolves #225984


author: Martin Nagy <mnagy@redhat.com> - 3.6.1-1
changelog:
  - upgrade to upstream version 3.6.1
  - remove rpath and make some spec file changes for review (#225984)
  - remove old patches
  - fix core dumping when html tag has its argument empty
  - use own libtool


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (%ifarch rather than %ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - rebase to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-3
changelog:
  - fix #533874 - RFE: libblkid should allow the developer to ask for 
    scanning of slow devices (eg. cdroms)


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to 2.17.1 (bugfix release, #567555)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog
  - spec file fixes:
    fix floppyutil URL in specfile
    add missing liceces to License field
    fix mixed-use-of-spaces-and-tabs
  - fix #565888 - uuidd initscript lsb compliance
  - remove util-linux-ng-2.17-mount-mtabfake.patch (merged upstream)


author: Karel Zak <kzak@redhat.com> 2.17.1-3
changelog:
  - fix #572121 - RHEL6: reset tiny flag in libblkid
  - fix #572122 - RHEL6: blkid (and related) should be a bit more robust


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - upgrade to the bugfix release 2.17.2 (#575722)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - remove: util-linux-ng-2.17-blkid-alignment-offset.patch
            util-linux-ng-2.17-blkid-minix.patch
            util-linux-ng-2.17-blkid-tinyflag.patch
  - fix #572937 - RHEL6: use microsecond resolution for blkid cache entries


author: Karel Zak <kzak@redhat.com> 2.17.2-2
changelog:
  - fix #588248 - RHEL6: don't probe for RAIDs on CD-ROMs
  - fix #586368 - RHEL6: mdraid assembles incorrectly
  - fix #586942 - Add utempter support to "script"
  - fix #588298 - RHEL6: improve fdisk(8) move command.


author: Karel Zak <kzak@redhat.com> 2.17.2-3
changelog:
  - fix #592958 - whole disk raid members to not be identified
  - fix #594689 - partx infinite loop
  - fix #589955 - add command-line interface for libblkid topology support


author: Karel Zak <kzak@redhat.com> 2.17.2-4
changelog:
  - fix #604875 - memory usage in wipefs(8)
  - fix #591133 - udev /dev/disk/by-uuid not populated
  - fix #602657 - fdisk -l does not show correctly partitions names for FCoE volumes
  - fix #591617 - lscpu does not use cpu masks properly


author: Karel Zak <kzak@redhat.com> 2.17.2-5
changelog:
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #612668 - backport fsfreeze from util-linux-ng 2.18
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work


author: Karel Zak <kzak@redhat.com> 2.17.2-8
changelog:
  - fix #619139 - fsck returns zero instead of error code 
  - fix #621312 - losetup --help returns 1 (fail) for successful command execution
  - fix #651035 - misleading reference to samba-client in mount man page, cifs options
  - fix #612325 - RHEL6.0 Beta-1: Add mkfs.ext4 to mkfs man page
  - fix #650879 - RHEL6: /usr/bin/column segmentation fault
  - fix #626374 - fdisk incorrectly checks alignment for non-512-byte *logical* sectors
  - fix #663731 - sfdisk -d and fdisk -l print /dev/dm-<N>
  - fix #650953 - wipefs(8) does not erase LUKS
  - fix #656453 - libblkid incorrectly revalidated cache entries
  - fix #623012 - lscpu return error after offline cpu
  - fix #616393 - tmpfs mount fails with 'user' option
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #624521 - fsck seems to run quasi-serially
  - fix #657082 - Add lsblk (list block devices) utility
  - fix #625064 - fuse-sshfs mounts cannot be unmounted as user
  - fix #615389 - Output of "mount" is missing mapping displays for loop-mounts
  - fix #616325 - Include findmnt in util-linux-ng package
  - fix #665376 - incorrectly documented the mount "atime" option
  - fix #670770 - lscpu does not identify 32bit capability on AMD
  - fic #671357 - mount.8 man page update for ext{3,4} options


author: Karel Zak <kzak@redhat.com> 2.17.2-11
changelog:
  - fix #678306 - introduce safe variant of uuid_generate_time(), fix locking of counter file
  - fix #678378 - util-linux-ng code review


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
changelog:
  - Resolves: rhbz#645449 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Related: rhbz#644072 - Rebase SSSD to 1.5
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  - Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Related:  rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - Also add the updated ding-libs to the BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-4
changelog:
  - Resolves: rhbz#674172 - Group members are not sanitized in nested group
  - processing
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
changelog:
  - Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named
  -                         "default"
  - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate
  -                         password
  - Resolves: rhbz#674141 - Traceback call messages displayed while
  -                         "sss_obfuscate" command is executed as a non-root
  -                         user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
changelog:
  - Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login
  - Resolves: rhbz#675284 - "no matching rule" message logged on all successful
  -                         requests
  - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for
  -                         authentication


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678410 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#678593 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678777 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#677318 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups
  - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Related: rhbz#680440 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683431 - sssd consumes 100% CPU
  - Related: rhbz#680440  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Resolves: rhbz#683860 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#689886 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690131 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the
  -                         gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#699530 - Users with a local group as their primary GID are
  -                         denied access by the simple access provider
  - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a
  -                         member of any group
  - Resolves: rhbz#703624 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-36
changelog:
  - Resolves: rhbz#698723 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Resolves: rhbz#707513 - Unable to authenticate users when username
  -                         contains "\0"


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man
  -                         page


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#709342 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are
  -                         being logged multiple times when the provider comes
  -                         back online
  - Resolves: rhbz#707997 - The IPA provider does not work with IPv6
  - Resolves: rhbz#677327 - [RFE] Support overriding attribute value
  - Resolves: rhbz#692090 - SSSD is not populating nested groups in
  -                         Active Directory


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-41
changelog:
  - Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#713438 - sssd shuts down if inotify crashes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-42
changelog:
  - Resolves: rhbz#711416 - During the change password operation the ccache is
  -                         not replaced by a new one if the old one isn't
  -                         active anymore
  - Resolves: rhbz#715609 - Certificate validation fails with message
  -                         "Connection error: TLS: hostname does not match CN
  -                         in peer certificate"
  - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Honor TTL values when resolving hostnames


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-53
changelog:
  - Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host
                            groups
  - Resolves: rhbz#740501 - SSSD not functional after "self" reboot
  - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be
                            case-insensitive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-55
changelog:
  - Resolves: rhbz#738621 - Lookup fails for non-primary usernames with
                            multi-valued uid
  - Resolves: rhbz#738629 - Group lookups doesn't return it's member for
                            sometime when the member has multi-valued uid
  - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber
                            to integer
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-56
changelog:
  - Resolves: rhbz#742278 - Rework the example config
  - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was
                            initialized
  - Resolves: rhbz#742526 - SSSD's man pages are missing information
  - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-67
changelog:
  - Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758157 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-2.beta2
changelog:
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3
  - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
                            a dependancy
  - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers
  - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and
                            netgroup search base correctly
  - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb
                            AS requests
  - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision
  - Resolves: rhbz#785904 - [RFE] SSSD should have --version option
  - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider
  - Resolves: rhbz#785898 - Enable midway cache refresh by default
  - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for
                            a non-existing netgroup
  - Resolves: rhbz#785884 - Honour TTL when resolving host names
  - Resolves: rhbz#785883 - check DNS records before updates
  - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead
                            of guessing
  - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line
  - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config
                            file too much
  - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server
                            has been reinitialized
  - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc
  - Resolves: rhbz#773660 - Kerberos errors should go to syslog
  - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native
                            IPA netgroups code
  - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF
                            source host group in an hbacrule
  - Resolves: rhbz#771702 - sssd_pam crashes during change password operation
                            against a IPA server
  - Resolves: rhbz#771361 - case_sensitive function not working as intended for
                            ldap
  - Resolves: rhbz#768935 - Crash when applying settings
  - Resolves: rhbz#766941 - The full dyndns update message should be logged into
                            debug logs
  - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory
                            value
  - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab
                            principal name
  - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files
  - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug
                            levels on the fly
  - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional
  - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal
                            netgroup representation
  - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option
  - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control
  - Resolves: rhbz#753876 - [RFE] Add support for the services map
  - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after
                            group name change in MSAD
  - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle
                            for some (configurable) time
  - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD
  - Related:  rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#742052 - id -G group resolution takes extremely long
  - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange
  - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases
  - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or
                            insensitive
  - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users
  - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control
                            disabled for openldap
  - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login
  - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 during auth when password for the user is
                            not set


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-3.beta2
changelog:
  - Handle filtering python Provides in a safer way
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD
  - Resolves: rhbz#788979 - sssd crashes during initgroups against a user
                            belonging to nested rfc2307bis group


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-5
changelog:
  - Resolves: rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#785871 - wrong build dependency on nscd
  - Resolves: rhbz#785873 - IPA host search base cannot be set
  - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group
                            lookups
  - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more
                            sparingly
  - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64
  - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user
                            entries
  - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or
                            memberNisNetgroup entries are deleted from a
                            netgroup
  - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load
  - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is
                            logged at each login
  - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-7
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Use a patch and install the script to python_sitelib
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-8
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Fix typo in the patch
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-9
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Remove old copy from the spec file
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-10
changelog:
  - Fix explicit requires to use openldap instead of openldap-libs
  - Related:  rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-11
changelog:
  - Do not auto-upgrade debug levels
  - Tool still available for manual use
  - Reverts:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#798881 - Install-time warnings
  - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also
                            the dns_discovery_domain
  - Resolves: rhbz#798655 - Password logins failing due to a process with high
                            UID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-12
changelog:
  - Resolves: rhbz#801407 - sssd_nss gets hung processing identical search
                            requests
  - Resolves: rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies
  - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials
  - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to
                            true
  - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work
  - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false
  - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam
                            can use
  - Resolves: rhbz#799971 - sssd_be crashes on shutdown
  - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested
                            group structure
  - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy
                            provider configured
  - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd
                            is configured as proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-15
changelog:
  - Update translations
  - Resolves: rhbz#802372 - Pick up latest translation files for SSSD
  - Resolves: rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Related:  rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-17
changelog:
  - Related:  rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica
                            using IP address
  - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with
                            case_sensitive=false
  - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set
  - Resolves: rhbz#805034 - accessing an undefined variable might cause crash
  - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-18
changelog:
  - Resolves: rhbz#804057 - Initial service lookups having name with uppercase
                            alphabets doesn't work
  - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names
                            doesn't work when case_sensitive=false
  - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple
                            realms in a single keytab
  - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false
  - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name
                            resolution times out
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-20
changelog:
  - Related: rhbz#805452  - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-21
changelog:
  - Resolves: rhbz#808458 - Authconfig crashes when sets krb realm
  - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is
                            running
  - Resolves: rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-22
changelog:
  - Fix typo in patch for SSH umask
  - Related:  rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-33
changelog:
  - Resolves: rhbz#840089 - Update the shadowLastChange attribute
                            with days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-1.rc1
changelog:
  - Rebase to 1.9.0 RC1
  - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4
  - Bump the selinux-policy version number to pull in required fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2
changelog:
  - Fix the "ca" translation of the sssd-simple manual page
  - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5
changelog:
  - Do not send SIGKILL to service right after sending SIGTERM
  - Resolves: #771975
  - Fix the initial sudo smart refresh
  - Resolves: #869013
  - Implement password authentication for users from trusted domains
  - Resolves: #869071
  - LDAP child crashed with a wrong keytab
  - Resolves: #869150
  - The sssd_nss process grows the memory consumption over time
  - Resolves: #869443


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-6
changelog:
  - Resolves: rhbz#871576 - sssd does not resolve group names from AD
  - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file
                            in the pam responder
  - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider
                            directive


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-7
changelog:
  - Resolves: rhbz#873032 - Move sss_cache to the main subpackage
  - Resolves: rhbz#829740 - Init script reports complete before sssd is actually
                            working
  - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in
                            ldap_uri
  - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly
  - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                            if the sssd is not running
  - Resolves: rhbz#872110 - User appears twice on looking up a nested group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-9
changelog:
  - Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an
                            option for the [sssd] section


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-10
changelog:
  - Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type
  - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                           if the sssd is not running


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-12
changelog:
  - Resolves: rhbz#870278 -  ipa client setup should configure host properly
                             in a trust is in place


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-16
changelog:
  - Resolves: rhbz#875738 - offline authentication failure always returns
                            System Error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-19
changelog:
  - Resolves: rhbz#877130 - LDAP provider fails to save empty groups
  - Related: rhbz#869466 - check the return value of waitpid()


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-20
changelog:
  - Resolves: rhbz#877126 - subdomains code does not save the proper
                            user/group name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-21
changelog:
  - Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire
                            ldap connections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-22
changelog:
  - Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart
                            after sbus failure


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-25
changelog:
  - Resolves: rhbz#878262 - ipa password auth failing for user principal
                            name when shorter than IPA Realm name
  - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately
                            from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-26
changelog:
  - Resolves: rhbz#874673 - user id lookup fails using proxy provider
  - Fix a possibly uninitialized variable in the LDAP provider
  - Related: rhbz#877130


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-27
changelog:
  - Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken
                            configurations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-28
changelog:
  - Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code
                            skips a built-in group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-31
changelog:
  - Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an
                            empty hostent during the DNS update
  - Do not version libsss_sudo, it's not supposed to be linked against, but
    dlopened (Related: rhbz#761573)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-32
changelog:
  - Resolves: rhbz#875677 - password expiry warning message doesn't appear
                            during auth
  - Fix potential NULL dereference when skipping built-in AD groups
    (Related: rhbz#874616)
  - Add missing parameter to DEBUG message (Related: rhbz#829742)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-34
changelog:
  - Resolves: rhbz#877974 - updating top-level group does not reflect ghost
                            members correctly
  - Resolves: rhbz#880159 - delete operation is not implemented for ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-35
changelog:
  - Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup
                            midpoint refresh to be always set to 10 seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-36
changelog:
  - Resolves: rhbz#883336 - sssd crashes during start if id_provider is
                            not mentioned


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-37
changelog:
  - Resolves: rhbz#884480 - user is not removed from group membership during
                            initgroups
  - Fix incorrect synchronization in mmap cache (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-38
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider
  - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client
    libraries (Related: #870060)
  - Move sss_ssh_knownhosts documentation to the correct section
    (Related: #870060)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-39
changelog:
  - Resolves: rhbz#882221 - Offline sudo denies access with expired
                            entry_cache_timeout
  - Fix several bugs found by Coverity and clang:
  - Check the return value of diff_gid_lists (Related: #869071)
  - Move misplaced sysdb assignment (Related: #827606)
  - Remove dead assignment (Related: #827606)
  - Fix copy-n-paste error in the memberof plugin (Related: #877974)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-40
changelog:
  - Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work
  - Fix the error handler in sss_mc_create_file (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-42
changelog:
  - Resolves: rhbz#885105 - sudo denies access with disabled
                            ldap_sudo_use_host_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-43
changelog:
  - Resolves: rhbz#880176 - memberUid required for primary groups to match
                            sudo rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-44
changelog:
  - Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory
                            cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-45
changelog:
  - Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd
                            failed. Timer expired


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-46
changelog:
  - Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same
                            hostname


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-47
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-48
changelog:
  - Resolves: rhbz#880956 - Primary server status is not always reset after
                            failover to backup server happened
  - Silence a compilation warning in the memberof plugin (Related: rhbz#877974)
  - Do not steal resolv result on error (Related: rhbz#882076)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-49
changelog:
  - Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule
                            another first full refresh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-50
changelog:
  - Resolves: rhbz#870045 - always reread the master map from LDAP
  - Resolves: rhbz#876531 - sss_cache does not work for automount maps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-52
changelog:
  - Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11
  - Include more debugging during the sysdb upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-53
changelog:
  - Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the
                            enumeration is taking too long


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-54
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed database
                            update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-57
changelog:
  - Resolves: rhbz#886091 - Disallow root SSH public key authentication
  - Add default section to switch statement (Related: rhbz#884666)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-58
changelog:
  - Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable
                            tickets from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-62
changelog:
  - Resolves: rhbz#886848 - user id lookup fails for case sensitive users
                            using proxy provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-64
changelog:
  - Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition
                            with OpenLDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-66
changelog:
  - Resolves: rhbz#874579 - sssd caching not working as expected for selinux
                            usermap contexts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-67
changelog:
  - Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD
                            Users for commands like id and getent


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-68
changelog:
  - Resolves: rhbz#887961 - AD provider: getgrgid removes nested group
                            memberships


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-71
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-72
changelog:
  - Resolves: rhbz#894997 - sssd_be crashes looking up members with groups
                            outside the nesting limit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-84
changelog:
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-85
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-86
changelog:
  - Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended
                            ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-88
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-90
changelog:
  - Resolves: #953165 - Enabling enumeration causes sssd_be process to
                        utilize 100% of the CPU


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-91
changelog:
  - Resolves: #967636 - SSSD frequently fails to return automount maps
                        from LDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-93
changelog:
  - Resolves: #987479 - libsss_sudo should depend on sudo package with
                        sssd support


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-94
changelog:
  - Call restorecon on memcache files to force the right context on upgrades
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-95
changelog:
  - Mention that enumeration should be discouraged
  - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-96
changelog:
  - Resolves: #988525 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-97
changelog:
  - Resolves: #986379 - sss_cache -N/-n should invalidate the hash table
                        in sssd_nss


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-98
changelog:
  - Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login
                        delays when client is under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-99
changelog:
  - Clarify the min_id/max_id limits further
  - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-101
changelog:
  - Resolves: #976273 - [RFE] Add a new override_homedir expansion for the
                        "original value"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-104
changelog:
  - Resolves: #971435 - Enhance sssd init script so that it would source
                        a configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-106
changelog:
  - Format patch to configure sysv script differently
  - RHEL-6 patch(1) apparently doesn't like the output of git format-patch
   -M -C and doesn't properly copy files on renames
  - Resolves: #971435 - Enhance sssd init script so that it would source a
    configuration.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-108
changelog:
  - Set correct state of SRV servers on resolving error
  - Resolves: #954275 - sssd fails connect to IPA server during boot when
                        spanning tree is enabled in network router.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-109
changelog:
  - Use permissive control when adding ghost users
  - Resolves: #928797 - cyclic group memberships may not work depending on
                        order of operations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-112
changelog:
  - Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors
                        when clearing cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-113
changelog:
  - Resolves: #916997 - getgrnam / getgrgid for large user groups
                        is too slow due to range retrieval functionality


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-114
changelog:
  - Resolves: #914433 - sssd pam write_selinux_login_file creating the temp
                        file for SELinux data failed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-115
changelog:
  - Apply a forgotten dependency for patch #254
  - Related: #916997 - getgrnam / getgrgid for large user groups
                       is too slow due to range retrieval functionality
  - Add two fixes for better handling of faulty SRV processing
  - Related: #954275 - sssd fails connect to IPA server during boot when
                       spanning tree is enabled in network router.
  - Remove enumerate=true from example in man page
  - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-117
changelog:
  - Resolves: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-119
changelog:
  - Resolves: #948830 - sssd do too many disk writes causing delay in
                        "getent netgroup allmachines-netgroup" nested netgroups.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.1
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1028046 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.2
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1032966 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.3
changelog:
  - Resolves: #1036168 - sssd can't retrieve auto.master when using the
                         "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.4
changelog:
  - Resolves: #1044905 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.2-49
changelog:
  - Add missing defattrs in specfile
  - Fix upstream tarball url in specfile
  - Cleanup unapplied patch
  - related: #543948


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.1-56
changelog:
  - Update to 3.5.1
  - Security update that resolves CVE-2010-0728
  - Remove cifs.upcall and mount.cifs entirely
  - related: #556558


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-89
changelog:
  - Fix printcap handling and cups spooler interaction
  - resolves: #709070
  - Fix spoolss form index mixup (wrong papersize)
  - resolves: #703393


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-91
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #709641


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-131
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845760
  - Fix printing regression with builtin forms.
  - resolves: #860967


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-136
changelog:
  - Fix loading the imap hash module.
  - resolves: #864045
  - Fix raw printing support.
  - related: #857942


author: - Alexander Bokovoy <abokovoy@redhat.com> - 3.6.8-137
changelog:
  - Use alternatives to configure winbind_krb5_locator.so.
  - Move wbinfo and ntlm_auth to the correct package so samba4 can
    correctly handle conflicts.
  - resolves: #864950


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-152
changelog:
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #961932
  - Fix the username map optimization.
  - resolves: #952268
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955683
  - Fix write operations as guest with security = share
  - resolves: #953025
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949613
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948623
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #927383


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-153
changelog:
  - Fix overwrite of errno in check_parent_exists().
  - resolves: #966489
  - Fix dir code using dirfd() without vectoring trough VFS calls.
  - resolves: #971283


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-0.pre20100121
changelog:
  - Push a prerelease version of 0.7.6 for testing in Beta1
  - Allow specifying -cpu model/flags for qemu
  - Resolves: rhbz#515213
  - Add async qemu machine protocol to libvirt based on JSON QEmu API
  - Resolves: rhbz#518701
  - Allow for static PCI address assignment to all devices
  - Resolves: rhbz#481924
  - expose qemu's -fda fat:floppy feature (525074)
  - configuration of virtual CPU topology (sockets, threads, cores) (538015)
  - rewrite file chown'ing code to use security driver framework (547545 )
  - cannot create a headless KVM virtual machine (548127)
  - Improve virsh schedular parameters documentation (548485)
  - Fail to delete a inactive pool using command "virsh pool-delete" (530985)
  - virsh man page updation for using container (lxc:///) (528709)
  - Command 'virsh vcpuinfo' returns libvirt error in RHEL6 with KVM (522829)
  - Expose information about host CPU flags in capabilities (518062)


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements
  - Resolves: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-2
changelog:
  - enable JSON interface, desactivated by default in 0.7.6
  - Resolves: rhbz#563189
  - make sure cgroups are installed and that cgconfig service is on
  - Resolves: rhbz#531263


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.6-3
changelog:
  - Fix balloon units handling in JSON mode (rhbz #566261)
  - Invoke qmp_capabilities at monitor startup (rhbz #563189)


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support (rhbz#553348)
  - async job handling (rhbz #515278)
  - virtio channel (rhbz#515281)
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - Improve libvirt error reporting for failed migrations (rhbz#528793)
  - qemu driver support CPU hotplug (rhbz#533138)
  - wrong (octal) device number for attaching USB devices (rhbz#549840)
  - cannot save domain into root_squashing nfs export (rhbz#558763)
  - assorted bug fixes and lots of cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100312
changelog:
  - preview for 0.7.8 rebase
  - Extra non upstream basic patch for spice and XQL
  - Resolves: rhbz#515264
  - Resolves: rhbz#515265
  - connected virsh dies with a SIGPIPE after libvirtd restart
  - Resolves: rhbz#526656
  - error when running logrotate on s/390x arch
  - Resolves: rhbz#547514


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100322
changelog:
  - preview #2 for 0.7.8 rebase
  - migration max downtime API
  - Resolves: rhbz#561935
  - allow suspend during migration
  - Resolves: rhbz#561934
  - support vhost net mode at qemu startup for net devices
  - Resolves: rhbz#540391
  - read-only device access support for qemu
  - Resolves: rhbz#556769
  - LSB compliance of libvirtd init script
  - Resolves: rhbz#538701
  - No domain vcpu information output when using JSON monitor
  - Resolves: rhbz#572051
  - "qemudDomainSetMaxMemory" does not work and should be removed
  - Resolves: rhbz#572146
  - after setvcpus, any virsh command will be hung
  - Resolves: rhbz#572193
  - virsh interactive terminal crash or hung
  - Resolves: rhbz#572376
  - virsh hangs after core dump
  - Resolves: rhbz#572544
  - Fix very slow file allocation on ext3


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100330
changelog:
  - preview #3 for 0.7.8 rebase
  - kvm hpet support
  - Resolves: rhbz#576973
  - hook scripts support
  - Resolves: rhbz#569965
  - Need to add time keeping abstraction
  - Resolves: rhbz#557285
  - notification of guest reboot
  - Resolves: rhbz#527572
  - Ability to preserve RTC clock adjustments across guest reboots
  - Resolves: rhbz#515273
  - Notifications of guest stopping due to disk I/O errors
  - Resolves: rhbz#515270
  - VNC ticketing support (524623) spice still needed
  - VNC client disconnect/connect events (515268) spice still needed


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-0.pre20100407
changelog:
  - preview #4 for 0.8.0 rebase
  - snapshot API
  - domain with disk on root-squashing nfs and security driver mismatch
  - Resolves: rhbz#578630
  - Fail to read xml when restore domain
  - Resolves: rhbz#577719
  - loop "virsh cd" in virsh interactive terminal generate unknown error
  - Resolves: rhbz#572380
  - support setting qemu's -drive werror=stop/enospc with configuration
  - Resolves: rhbz#526231


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - official 0.8.0 upstream release
  - Resolves: rhbz#558761
  - new patch set of patches for RHEL-6 SPICE and addons
  - Enable QMP/ JSON mode in the QEMU monitor
  - Resolves: rhbz#563189
  - Support configuration of SPICE as a graphics protocol
  - Resolves: rhbz#515265
  - vnc (and spice) ticketing
  - Resolves: rhbz#524623
  - enable spice tls encryption in domainXML, and which channels are encrypted
  - Resolves: rhbz#573382
  - notification of VNC/SPICE client disconnect/connect events
  - Resolves: rhbz#515268


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.0-2
changelog:
  - Refresh SPICE patches to fix test failures
  - Related: rhbz#515265, rhbz#524623, rhbz#573382
  - Enable test suite during build, disabling tests that don't work in mock
  - Related: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-3
changelog:
  - Build ESX support in
  - Resolves: rhbz#581966
  - a batch of network filter fixes, IBM request and upstream fixes
  - Resolves: rhbz#579993
  - couple of patchs to fix device handling with QMP
  - Related: rhbz#563189
  - fix python binding for snapshotting
  - spec file fixes for nwfiler build and RHEL-5 virt-v2v specific rebuild


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-4
changelog:
  - Fix libvirtd startup when avahi failed to look up local host name
  - CPU selection fixes
  - Resolves: rhbz#581627
  - fix migration poll value
  - Resolves: rhbz#584928
  - crash dump job caused libvirt hang
  - Resolves: rhbz#580853
  - Fix initial VCPU pinning in qemu driver
  - Resolves: rhbz#578434
  - fix cpu hotplug command names


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-2
changelog:
  - Don't wipe generated iface target in active domains (588046)
  - Fix LXC domain lookup and error handling (586361)
  - Fix a protocol breakage introduced in libvirt-0.8.0
  - Add support for nic hotplug in QEMU/KVM (589978)
  - Seemless migration of spice graphics clients (589989)
  - fix build with ESX support
  - Resolves: rhbz#581966
  - fix multilib problem (587231)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-3
changelog:
  - missing python bindings due to older XML api
  - Resolves: rhbz#589453
  - Fix two possible crashes in JSON event dispatch
  - Resolves: rhbz#586353
  - Fix handling of disk backing stores with cgroups
  - Resolves: rhbz#581476
  - virsh schedinfo --set error handling on unknow parameters
  - Resolves: rhbz#586632
  - Apply extra patches for nwfilter
  - Resolves: rhbz#588554
  - Fix hang during concurrent guest migrations
  - Resolves: rhbz#582278


author: Dave Allan <dallan@redhat.com> - 0.8.1-5
changelog:
  - Don't reset user/group/security label for any files on shared filesystems
  - Resolves: rhbz#578889
  - Make saved state labelling ignore the dynamic_ownership parameter
  - Resolves: rhbz#588562
  - Fix & protect against NULL pointer dereference in monitor code
  - Resolves: rhbz#591076
  - Fix virFileResolveLink return value
  - Resolves: rhbz#591363
  - Add support for SSE4.1 and SSE4.2 CPU features
  - Resolves: rhbz#592977


author: Dave Allan <dallan@redhat.com> - 0.8.1-6
changelog:
  - Support seamless migration of SPICE graphics clients (refresh)
  - Resolves: rhbz#591551
  - Fix swapping of PCI vendor & product names in udev backend
  - Resolves: rhbz#578419
  - Fix cgroup setup code to cope with root squashing NFS
  - Resolves: rhbz#593193
  - Fix startup error reporting race
  - Resolves: rhbz#591272


author: Dave Allan <dallan@redhat.com> - 0.8.1-7
changelog:
  - Fix sign extension error in libvirt's parsing of qemu options
  - Resolves: rhbz#592070
  - Graceful shutdown/suspend of libvirt guests on host shutdown
  - Resolves: rhbz#566647
  - Fix pci device hotplug
  - Resolves: rhbz#572867
  - Support 802.1Qbg and bh
  - Resolves: rhbz#532760, rhbz#570949, rhbz#590110, rhbz#570923


author: Dave Allan <dallan@redhat.com> - 0.8.1-8
changelog:
  - Ensure virtio serial has stable addressing
  - Resolves: rhbz#586665
  - SELinux socket labelling on QEMU monitor socket for MLS
  - Resolves: rhbz#593739
  - Fix enumeration of partitions in disks with a trailing digit in path
  - Resolves: rhbz#593785
  - Enable probing of VPC disk format type
  - Resolves: rhbz#597981
  - Delete UNIX domain sockets upon daemon shutdown
  - Resolves: rhbz#598163
  - Fix Migration failure 'canonical hostname pointed to localhost'
  - Resolves: rhbz#589864
  - Fix up the python bindings for snapshotting
  - Resolves: rhbz#591839
  - Sanitize pool target paths
  - Resolves: rhbz#593565
  - Prevent host network conflicts
  - Resolves: rhbz#594494
  - Support 802.1Qbg and bh (vnlink/VEPA) (refresh)
  - Resolves: rhbz#590110


author: Dave Allan <dallan@redhat.com> - 0.8.1-9
changelog:
  - Touch libvirt-guests lockfile
  - Resolves: rhbz#566647
  - Add qemu.conf option for clearing capabilities
  - Resolves: rhbz#593903
  - Add support for launching guest in paused state
  - Resolves: rhbz#589465
  - Add virsh vol-pool command
  - Resolves: rhbz#602217
  - Add vol commands to virsh man page
  - Resolves: rhbz#600640
  - Remove bogus migrate error messages
  - Resolves: rhbz#601575


author: Dave Allan <dallan@redhat.com> - 0.8.1-10
changelog:
  - Add multiIQN XML output
  - Resolves: rhbz#587700
  - Fix udev node device parent-child device relationships
  - Resolves: rhbz#593995
  - Fix leaks in udev device add/remove
  - Resolves: rhbz#595490
  - Fix device destroy return value
  - Resolves: rhbz#597998
  - Update nodedev scsi_host data before use
  - Resolves: rhbz#600048
  - Display wireless devices in nodedev list
  - Resolves: rhbz#604811
  - Show pool and domain persistence
  - Resolves: rhbz#603696
  - Fix cleanup after failing to hotplug a PCI device
  - Resolves: rhbz#605168
  - Add '-nodefconfig' command line arg to QEMU
  - Resolves: rhbz#602778
  - Switch to private redhat namespace for QMP I/O error reason
  - Resolves: rhbz#586353
  - Improve error messages for missing drivers & unsupported functions
  - Resolves: rhbz#595609
  - macvtap: get interface index if not provided
  - Resolves: rhbz#605187
  - Fix leaks in remote code
  - Resolves: rhbz#603442
  - Add an optional switch --uuid to the virsh vol-pool command
  - Resolves: rhbz#604929
  - Change per-connection hashes to be indexed by UUIDs
  - Resolves: rhbz#603494
  - Run virsh from libvirt-guests script with /dev/null on stdin
  - Resolves: rhbz#606314
  - Increase dd block size to speed up domain save
  - Resolves: rhbz#601775
  - Fix reference counting bugs on qemu monitor
  - Resolves: rhbz#602660
  - Add missing action parameter in IO error callback
  - Resolves: rhbz#607157


author: Dave Allan <dallan@redhat.com> - 0.8.1-11
changelog:
  - Do not block during incoming migration
  - Resolves: rhbz#579440
  - Label serial devices
  - Resolves: rhbz#585249
  - parthelper: fix compilation without optimization
  - Related: rhbz#593785
  - Fix name/UUID uniqueness checking in storage/network
  - Resolves: rhbz#593951
  - Don't squash file permissions when migration fails
  - Resolves: rhbz#607922
  - Properly handle 'usbX' sysfs files
  - Resolves: rhbz#603867
  - add pool support to vol-key command & improve vol commands help
  - Resolves: rhbz#598365
  - document attach-disk better
  - Resolves: rhbz#601143
  - Config iptables to allow tftp port if network <tftp> element exists
  - Resolves: rhbz#607294
  - Fix failure to generate python bindings when libvirt.h.in is updated
  - Related: rhbz#589465
  - Allow all interface names
  - Resolves: rhbz#593907
  - Fix nodedevice refcounting
  - Resolves: rhbz#608753
  - Move nwfilter functions inside extern C and fix a locking bug
  - Resolves: rhbz#597391
  - Fix failure to restore qemu domains with selinux enforcing
  - Resolves: rhbz#590975
  - Check for presence of qemu -nodefconfig option before using it
  - Resolves: rhbz#608859


author: Dave Allan <dallan@redhat.com> - 0.8.1-12
changelog:
  - Don't invoke destroy callback from qemuMonitorOpen() failure paths
  - Resolves: rhbz#609060
  - virFileResolveLink: guarantee an absolute path
  - Resolves: rhbz#608092
  - SPICE patches have translatable strings without format args
  - Resolves: rhbz#608917
  - No way to pass disk format type to pool-define-as nor pool-create-as
  - Resolves: rhbz#597790
  - Fix enforcement of direction of traffic for rules describing incoming traffic
  - Resolves: rhbz#606889
  - Clarify virsh help pool-create-as text
  - Resolves: rhbz#609044


author: Dave Allan <dallan@redhat.com> - 0.8.1-14
changelog:
  - Support virtio disk hotplug in JSON mode
  - Resolves: rhbz#573946
  - Fix QEMU monitor JSON crash
  - Resolves: rhbz#604585
  - CVE-2010-2237 CVE-2010-2238 CVE-2010-2239
  - Resolves: rhbz#607817
  - CVE-2010-2242 Apply a source port mapping to virtual network masquerading
  - Resolves: rhbz#608049
  - Fix hang if QEMU exits (almost) immediately
  - Resolves: rhbz#610056
  - Support new CPU models provided by qemu-kvm
  - Resolves: rhbz#605830
  - Fix comparison of two host CPUs
  - Resolves: rhbz#611401
  - Don't mess with the CPU returned by arch driver
  - Resolves: rhbz#613014
  - Fail when CPU type cannot be detected from XML
  - Resolves: rhbz#613760
  - Use -nodefconfig when probing for CPU models
  - Resolves: rhbz#613764
  - cpuCompare: Fix crash on unexpected CPU XML
  - Resolves: rhbz#613765
  - Properly report failure to create raw storage volume files
  - Related: rhbz#547543
  - Fix IOErrorReasonCallback python bindings
  - Related: rhbz#586353
  - Parthelper: canonicalize block device paths
  - Related: rhbz#593785


author: Dave Allan <dallan@redhat.com> - 0.8.1-16
changelog:
  - Make PCI device ordering consistent with older releases
  - Resolves: rhbz#592026
  - Fix libvirtd hang during concurrent bi-directional migration
  - Resolves: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-17
changelog:
  - Set a stable & high MAC addr for guest TAP devices
  - Resolves: rhbz#616517
  - Fix bogus commit of -16 patches
  - Related: rhbz#592026
  - Related: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j2
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-28.el6
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#561935)
  - Make SASL work over UNIX domain sockets (rhbz#641687)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#643407)
  - Fix save/restore on root_squashed NFS (rhbz#643884)
  - Fix race on multiple migration (rhbz#638285)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Support forcing a CDROM eject (rhbz#626305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-29.el6
changelog:
  - spec file cleanups (rhbz#649523)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#659310)
  - Fix funny error in clock-variable (rhbz#660194)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Ensure device is deleted from guest after unplug (rhbz#644015)
  - Distinguish between QEMU domain shutdown and crash (rhbz#656845)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-1.el6
changelog:
  - Rebased to upstream 0.8.7 (rhbz#653985)
  - The following bugs got fixed by the rebase:
      rhbz#586124, rhbz#595350, rhbz#611793, rhbz#611822, rhbz#617439,
      rhbz#620363, rhbz#626873, rhbz#627143, rhbz#628772, rhbz#639595,
      rhbz#639603, rhbz#656795, rhbz#658657, rhbz#659855, rhbz#660706,
      rhbz#664406, rhbz#665446


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-2.el6
changelog:
  - Fix spec file which was not fully rebased to 0.8.7 (rhbz#653985, rhbz#660706)
  - Skip IB700 watchdog device when assigning PCI slots (rhbz#667091)
  - Improve error reporting when parsing dhcp info (rhbz#653300)
  - Don't chown saved image back to root if dynamic_ownership=0 (rhbz#661720)
  - Fix core dumps if unix_sock_group is set (rhbz#623166)
  - Add support for Westmere CPU model (rhbz#656248)
  - Add XML config switch to enable/disable vhost-net support (rhbz#643050)
  - Enable tuning of qemu network tap device "sndbuf" size (rhbz#665293)
  - Support for explicit boot device ordering (rhbz#646895)
  - Avoid qemu holding migration fd indefinitely (rhbz#620363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-3.el6
changelog:
  - Report error if invalid type specified for character device (rhbz#638968)
  - Improve log for domain related APIs (rhbz#640202)
  - Reject SDL graphic if it's not supported by qemu (rhbz#633326)
  - Don't lose track of events when callbacks are slow (rhbz#624252)
  - Fail if per-device boot is used but deviceboot is not supported (rhbz#670399)
  - Avoid sending STOPPED event twice (rhbz#666158)
  - Fix issues introduced by dependency patches for rhbz#646895


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-4.el6
changelog:
  - Fix event-handling data race (rhbz#671567)
  - Add support for VNC over a unix domain socket (rhbz#651415)
  - Support intel 'ich6' model (rhbz#648486)
  - Do not use virtio-serial port 0 for generic ports (rhbz#670394)
  - Set SELinux context label of pipes used for qemu migration (rhbz#667756)
  - Support customizable x509 certificate paths for client (rhbz#629510)
  - Round up capacity for LVM volume creation (rhbz#670529)
  - Show error prompt when trying to managed save a shutoff domain (rhbz#672449)
  - Report more proper error for unsupported graphics (rhbz#671319)
  - Expand the man page text for virsh setmaxmem (rhbz#622534)
  - Fix event-handling allocation crash (rhbz#671564)
  - Require --mac to avoid detach-interface ambiguity (rhbz#671050)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-5.el6
changelog:
  - Docs for customizable x509 certificate paths for client (rhbz#629510)
  - Fix tests for VNC over a unix domain socket (rhbz#651415)
  - Fix problems with peer-to-peer migration (rhbz#673434)
  - Fix tunneled migration broken since 0.8.7-2 (rhbz#672199)
  - Update docs for cpu_shares setting (rhbz#641187)
  - Fix possible hang if SASL is used (rhbz#672226)
  - Cancel migration in progress when virsh gets Ctrl-C (rhbz#635353)
  - Enhance virsh migrate command (rhbz#619039)
  - Support for specifying AIO mode for qemu disks (rhbz#591703)
  - Don't leave domain paused after restore (rhbz#670278)
  - Fix possible deadlock/crash in qemu driver (rhbz#673588)
  - Add shortcut for qemu HMP pass through (rhbz#628940)
  - Fix error message when attach device fails (rhbz#675030)
  - Support for booting from assigned PCI devices (rhbz#646895)
  - Improve handling of unlimited value for memory tunables (rhbz#669069)
  - Add smartcard support (rhbz#641834)
  - Remove some RHEL-specific patches which are no longer required (rhbz#653985)
  - Support for disabling/enabling KSM per domain (rhbz#635419)
  - Add --all flag to virsh freecell command (rhbz#653530)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-6.el6
changelog:
  - Fix typo in parsing of spice 'auth' data (rhbz#676374)
  - Fix attach-interface regression (rhbz#676686)
  - Block I/O tunables via blkio cgroups controller (rhbz#632492)
  - Support SCSI RAID type & lower log level for unknown types (rhbz#675771)
  - Only initialize/cleanup libpciaccess once (rhbz#675698)
  - Imprint all logs with version + package build information (rhbz#673226)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-7.el6
changelog:
  - Properly escape special characters in domain names (rhbz#676908)
  - Fix enum type declaration (rhbz#628940)
  - Fix cleanup on VM state after failed QEMU startup (rhbz#673588)
  - Fix XML generation for smartcards (rhbz#677308)
  - Ignore failure of "qemu -M ?" on older qemu (rhbz#676563)
  - Fix typo in setting up SPICE passwords (rhbz#677709)
  - Avoid NULL dereference in virDomainMemoryStats (rhbz#677484)
  - Avoid NULL dereference on error in qemu driver (rhbz#677493)
  - Fix error message when saving a shutoff domain (rhbz#677547)
  - Create enough volumes for mpath pool (rhbz#677231)
  - Allow to delete device mapper disk partition (rhbz#611443)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-8.el6
changelog:
  - Fix --all flag of virsh freecell to really show all cells (rhbz#653530)
  - Add txmode attribute to interface XML for virtio backend (rhbz#629662)
  - Give each virtual network bridge its own fixed MAC address (rhbz#609463)
  - Fix virsh snapshot-list with --quiet option (rhbz#678833)
  - Delay IFF_UP'ing 802.1Qbh interface until migration final stage (rhbz#678826)
  - Fix several memory bugs (rhbz#679164)
  - Fix virt-pki-validate when CERTTOOL is missing (rhbz#679153)
  - Fix memory corruption in virFileAbsPath (rhbz#680281)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.1-1.el6
changelog:
  - Rebased to upstream 0.9.1 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#587276, rhbz#591058, rhbz#592170, rhbz#598792, rhbz#673814,
      rhbz#677228, rhbz#681458, rhbz#682237, rhbz#692745, rhbz#693932,
      rhbz#694382, rhbz#695653, rhbz#698071, rhbz#698197, rhbz#698208,
      rhbz#698490, rhbz#701305


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.2-1.el6
changelog:
  - Rebased to upstream 0.9.2 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#569567, rhbz#691830, rhbz#607526, rhbz#609650, rhbz#632495,
      rhbz#640603, rhbz#658713, rhbz#669549, rhbz#677229, rhbz#678548,
      rhbz#640603, rhbz#682237, rhbz#683005, rhbz#684848, rhbz#688859,
      rhbz#690695, rhbz#692355, rhbz#693203, rhbz#694516, rhbz#697650,
      rhbz#698133, rhbz#702044, rhbz#704124, rhbz#704144, rhbz#705405,
      rhbz#706869, rhbz#706883, rhbz#706966, rhbz#707173, rhbz#707257,
      rhbz#707298, rhbz#709576, rhbz#709776, rhbz#710150, rhbz#711151


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-1.el6
changelog:
  - Rebased to upstream 0.9.3 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#591974, rhbz#632499, rhbz#641087, rhbz#664629, rhbz#679668,
      rhbz#682121, rhbz#693648, rhbz#693650, rhbz#693661, rhbz#698340,
      rhbz#698825, rhbz#698861, rhbz#701394, rhbz#707439, rhbz#707530,
      rhbz#715355, rhbz#716826, rhbz#717203, rhbz#718143, rhbz#712050,
      rhbz#715184


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-2.el6
changelog:
  - Fix mistaken order of server cert/key parameters in constructor (rhbz#719838)
  - qemu: Don't chown files on NFS share if dynamic_ownership is off (rhbz#716478)
  - util: Don't try to fchown files opened as non-root (rhbz#707257)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-4.el6
changelog:
  - storage: Avoid memory leak on metadata fetching (rhbz#707155)
  - graphics: Add support for action_if_connected in qemu (rhbz#707212)
  - qemu: Save domain status ASAP after creating qemu process (rhbz#707894)
  - bios: Add support for SGA (rhbz#711598)
  - pci: Initialize state values on reattach (rhbz#713697)
  - Keep consistence between code and doc on log level and usage (rhbz#716888)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-8.el6
changelog:
  - libvirt crash when running domains and vdsm is restarted (rhbz#723811)
  - connect to hypervisor with unconfigured tls/tcp connection pbm (rhbz#723442)
  - virsh list produced segmentation fault when libvirtd is not up (rhbz#723843)
  - clientcert.pem validation failure cause libvirtd crash (rhbz#723881)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc1.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 1 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#603039, rhbz#632499, rhbz#632760, rhbz#643947, rhbz#678027,
      rhbz#697742, rhbz#697841, rhbz#704836, rhbz#707530, rhbz#720350,
      rhbz#720889, rhbz#721335, rhbz#722862


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc2.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 2 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#667624, rhbz#669586, rhbz#682084, rhbz#707155, rhbz#707212,
      rhbz#725322, rhbz#725935, rhbz#725950


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-1.el6
changelog:
  - Rebased to upstream 0.9.4 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#634653, rhbz#707212, rhbz#722806, rhbz#723862, rhbz#726304,
      rhbz#726398, rhbz#727047, rhbz#727094


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-2.el6
changelog:
  - daemon: Unlink unix socket paths on shutdown (rhbz#725702)
  - rpc:Fix sasl session relocking intead of unlocking it (rhbz#729198)
  - network: Eliminate lag in updating dnsmasq hosts files (rhbz#727982)
  - Don't mount /dev for application containers (rhbz#728835)
  - support connected parameter in set_password (rhbz#707212)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-3.el6
changelog:
  - Fix large files support (rhbz#728992)
  - qemu: Avoid overwriting errors from virGetHostname (rhbz#729567)
  - qemu: Fix -chardev udp if parameters are omitted (rhbz#689761)
  - managedsave: Prohibit use on transient domains (rhbz#729714)
  - nwfilter: Tolerate disappearing interfaces while instantiating filter (rhbz#729945)
  - docs: Describe new virtual switch configuration in network XML docs (rhbz#643947)
  - storage: Directory shouldn't be listed as type 'file' (rhbz#727088)
  - virsh: Add dir type for listing volumes with vol-list (rhbz#727088)
  - qemu: Avoid crash on process attach (rhbz#730615)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-4.el6
changelog:
  - Bugfix: Check stdoutWatch before removing the handler. (rhbz#730600)
  - daemon: Fix regression of libvirtd reloading support (rhbz#730428)
  - libvirtd.init.in: Stop/restart() - wrong return value in case of failure (rhbz#730510)
  - Add API for duplicating a socket/client file descriptor (rhbz#720269)
  - Add backlog parameter to virNetSocketListen (rhbz#720269)
  - Support changing UNIX socket owner in virNetSocketNewListenUNIX (rhbz#720269)
  - qemu: Refactor do{Tunnel, Native}Migrate functions (rhbz#720269)
  - qemu: Use virNetSocket for tunneled migration (rhbz#720269)
  - qemu: Use fd: protocol for migration (rhbz#720269)
  - qemu: Support event_idx parameter for virtio disk and net devices (rhbz#725448)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-5.el6
changelog:
  - patch problem for seamless SPICE migration (rhbz#730753)
  - macvtap: Fix getPhysfn to get the PF of a direct attach network interface (rhbz#732082)
  - SSL spice session can't be kept during migration (rhbz#729874)
  - Storage driver should flush host cache after cloning volumes (rhbz#689416)
  - Documentation for CFS bandwidth limiting cgroup (rhbz#692769)
  - libvirt error message should show the uri content but not (null) (rhbz#730244)
  - libvirtd.conf error causes libvirtd to exit silently (rhbz#728654)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-6.el6
changelog:
  - daemon: Move TLS initialization to virInitialize (rhbz#732893)
  - Fix command test wrt gnutls initialize & fix debugging (rhbz#732893)
  - qemu: Init reattaching related members pciDevice before reattach (rhbz#728203)
  - qemu: error if qemu monitor command not found for BlockJob (rhbz#727502)
  - virsh: error if specified bandwidth is invalid for blockjob (rhbz#727502)
  - util: Only fchown newly created files in virFileOpenAs (rhbz#534010)
  - screenshot: Implement multiple screen support (rhbz#710489)
  - security: Rename SetSocketLabel APIs to SetDaemonSocketLabel (rhbz#731243)
  - security: Introduce SetSocketLabel (rhbz#731243)
  - qemu: Correctly label migration TCP socket (rhbz#731243)
  - snapshot: Don't leak resources on qemu snapshot failure (rhbz#733499)
  - Fix memory leak while scanning snapshots (rhbz#674537)
  - qemu: Minor formatting cleanup (rhbz#674537)
  - Swap virDomain and virDomainSnapshot declaration (rhbz#674537)
  - snapshot: Only pass snapshot to qemu command line when reverting (rhbz#674537)
  - snapshot: Track current snapshot across restarts (rhbz#674537)
  - send-key: Fix scan keycode map (rhbz#733597)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-7.el6
changelog:
  - qemu: Properly label outgoing pipe for tunneled migration (rhbz#733998)
  - snapshot: Forbid snapshot on autodestroy domain (rhbz#733806)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-8.el6
changelog:
  - qemu: Fix a regression of domain save (rhbz#735011)
  - virsh: Improve send-key documentation (rhbz#699847)
  - start: Allow discarding managed save (rhbz#730750)
  - virsh: Support 'virsh start --force-boot' on older servers (rhbz#730750)
  - maint: Fix comment typos (rhbz#730750)
  - qemu: Refactor file opening (rhbz#730750)
  - qemu: Detect incomplete save files (rhbz#730750)
  - virsh: Avoid memory leak on cmdVolCreateAs (rhbz#735008)
  - snapshot: Fix corner case on OOM during creation (rhbz#674537)
  - Ensure stream is aborted when exiting console (rhbz#731673)
  - following for (rhbz#731583, rhbz#731579, rhbz#731584, rhbz#731673):
  - Ensure client streams are closed when marking a client for close
  - Fix race condition in abort of stream
  - Tweak debugging message in RPC client code
  - Don't attempt to read from a stream if it is closed
  - Ensure async packets never get marked for sync replies
  - Ignore unused streams in virStreamAbort
  - rpc: Don't close connection if program is unknown
  - rpc: Fix a typo in debugging log in virNetServerProgramSendStreamData
  - stream: Remove redundant reference to client while sending stream data
  - Fix memory leak dispatching domain events
  - Avoid use-after-free on streams, due to message callbacks
  - Fix tracking of RPC messages wrt streams
  - Fix parted sector size assumption (rhbz#735441)
  - Fix incorrect path length check in sanlock lockspace setup (rhbz#735443)
  - Fix sanlock socket security labelling (rhbz#735442)
  - Remove bogus virSecurityManagerSetProcessFDLabel method (rhbz#735442)
  - security: Fix build (rhbz#735442)
  - Fix keymap used to talk with QEMU (rhbz#632499)
  - virsh: Fix snapshot-create-as to handle arbitrary names (rhbz#735495)
  - virsh: Add virsh snapshot-current --name (rhbz#735495)
  - virsh: Add snapshot-parent (rhbz#735495)
  - virsh: Don't reject undefine on active domain (rhbz#735495)
  - virsh: Fix logic bug (rhbz#735495)
  - virsh: Fix dead store (rhbz#735495)
  - virsh: Tweak misleading wording (rhbz#735495)
  - virsh: Concatenate qemu-monitor-command arguments (rhbz#735495)
  - maint: Treat more libxml2 functions as free-like (rhbz#735495)
  - xml: Add another convenience function (rhbz#735495)
  - maint: Simplify lots of libxml2 clients (rhbz#735495)
  - virsh: Add list --managed-save (rhbz#735495)
  - virsh: Prefer unsigned flags (rhbz#735495)
  - snapshot: Add snapshot-list --parent to virsh (rhbz#735495)
  - qemu: Allow to undefine a running domain (rhbz#735498)
  - test: Allow to undefine a running domain (rhbz#735498)
  - build: Fix typo in recent test patch (rhbz#735498)
  - test: Rewrite test to match change in behavior (rhbz#735498)
  - virsh: Properly interleave shared stdout and stderr (rhbz#735498)
  - snapshot: Better events when starting paused (rhbz#733762)
  - snapshot: Fine-tune ability to start paused (rhbz#733762)
  - snapshot: Expose --running and --paused in virsh (rhbz#733762)
  - snapshot: Fine-tune qemu saved images starting paused (rhbz#733762)
  - snapshot: Improve reverting to qemu paused snapshots (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Speed up snapshot location (rhbz#733529)
  - snapshot: Avoid crash when deleting qemu snapshots (rhbz#733529)
  - snapshot: Track current domain across deletion of children (rhbz#733529)
  - snapshot: Simplify acting on just children (rhbz#733529)
  - snapshot: Allow deletion of just snapshot metadata (rhbz#735457)
  - snapshot: Let qemu discard only snapshot metadata (rhbz#735457)
  - snapshot: Identify which snapshots have metadata (rhbz#735457)
  - snapshot: Reflect new dumpxml and list options in virsh (rhbz#735457)
  - snapshot: Identify qemu snapshot roots (rhbz#735457)
  - snapshot: Allow recreation of metadata (rhbz#735457)
  - snapshot: Refactor virsh snapshot creation (rhbz#735457)
  - snapshot: Improve virsh snapshot-create, add snapshot-edit (rhbz#735457)
  - snapshot: Add qemu snapshot creation without metadata (rhbz#735457)
  - snapshot: Add qemu snapshot redefine support (rhbz#735457)
  - vbox, xenapi: Add virDomainUndefineFlags (rhbz#735457)
  - snapshot: Prevent stranding snapshot data on domain destruction (rhbz#735457)
  - snapshot: Teach virsh about new undefine flags (rhbz#735457)
  - snapshot: Refactor some qemu code (rhbz#735457)
  - snapshot: Cache qemu-img location (rhbz#735457)
  - snapshot: Support new undefine flags in qemu (rhbz#735457)
  - snapshot: Prevent migration from stranding snapshot data (rhbz#735457)
  - snapshot: Refactor domain xml output (rhbz#735553)
  - snapshot: Allow full domain xml in snapshot (rhbz#735553)
  - snapshot: Correctly escape generated xml (rhbz#735553)
  - snapshot: Update rng to support full domain in xml (rhbz#735553)
  - snapshot: Store qemu domain details in xml (rhbz#735553)
  - schedinfo: Update man page about virsh schedinfo command (unknown)
  - snapshot: Additions to domain xml for disks (rhbz#638510)
  - snapshot: Reject transient disks where code is not ready (rhbz#638510)
  - snapshot: Introduce new deletion flag (rhbz#638510)
  - snapshot: Expose new delete flag in virsh (rhbz#638510)
  - snapshot: Allow halting after snapshot (rhbz#638510)
  - snapshot: Expose halt-after-creation in virsh (rhbz#638510)
  - snapshot: Support extra state in snapshots (unknown)
  - snapshot: Add <disks> to snapshot xml (rhbz#638510)
  - snapshot: Also support disks by path (rhbz#638510)
  - snapshot: Add virsh domblklist command (rhbz#638510)
  - snapshot: Add flag for requesting disk snapshot (rhbz#638510)
  - snapshot: Wire up disk-only flag to snapshot-create (rhbz#638510)
  - snapshot: Reject unimplemented disk snapshot features (rhbz#638510)
  - snapshot: Make it possible to audit external snapshot (rhbz#638510)
  - snapshot: Wire up new qemu monitor command (rhbz#638510)
  - snapshot: Wire up live qemu disk snapshots (rhbz#638510)
  - snapshot: Use SELinux and lock manager with external snapshots (rhbz#638510)
  - daemon: Create priority workers pool (rhbz#692663)
  - qemu: Introduce job queue size limit (rhbz#692663)
  - qemu: Deal with stucked qemu on daemon startup (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-10.el6
changelog:
  - virterror: Fix error message for VIR_ERR_INVALID_ARG (rhbz#689388)
  - remote: Refuse connecting to remote socket (rhbz#689388)
  - Threadpool: Initialize new dynamic workers (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-11.el6
changelog:
  - blockinfo: Fix qemu regression in handling disk name (rhbz#736603)
  - doc: Fix incorrect option in send-key (rhbz#736297)
  - virsh: Fix typo in opts_send_key (rhbz#736297)
  - rpc: Avoid memory leak on virNetTLSContextValidCertificate (rhbz#735650)
  - tests: Avoid memory leak on testTLSSessionInit (rhbz#735650)
  - qemu: Fix seamless SPICE migration with older qemu (rhbz#730753)
  - snapshot: Fix regression with system checkpoints (rhbz#736682)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-12.el6
changelog:
  - selinux: Detect virt_use_nfs boolean set (rhbz#589922)
  - virnetsocket: Pass KRB5CCNAME env variable (rhbz#737176)
  - snapshot: Fix double free of qemuImgBinary (rhbz#737010)
  - qemu_api: Modify apibuild.py to generate docs for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile for subdir docs (rhbz#736040)
  - qemu_api: Add comments for API virDomainQemuMonitorCommand (rhbz#736040)
  - qemu_api: Add override XML and C files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Py binding generator to generate files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile to generate libvirtmod_qemu lib (rhbz#736040)
  - qemu_api: Update libvirt spec file (rhbz#736040)
  - Remove two references to files not generated (rhbz#736040)
  - qemu_api: Doc improvements (rhbz#736040)
  - python: Fix libvirt.py generation to include virterror info (rhbz#736040)
  - snapshot: New APIs for inspecting snapshot object (rhbz#735457)
  - snapshot: Use new API for less work (rhbz#735457)
  - snapshot: ABI stability must include memory sizing (rhbz#735553)
  - spec: Require augeas for sanlock (rhbz#738314)
  - sanlock: Add missing test command in virt-sanlock-cleanup.in (rhbz#738534)
  - snapshot: Tweak snapshot-create-as diskspec docs (rhbz#738411)
  - qemu: Hold conn open for all threads started by qemuProcessReconnectAll (rhbz#738778)
  - rpc: Convert unknown procedures to VIR_ERR_NO_SUPPORT (rhbz#738439)
  - Prevent crash from dlclose() of libvirt.so (rhbz#739167)
  - doc: Add statment about permissions needed to do a core dump (rhbz#738146)
  - snapshot: Affect persistent xml after disk snapshot (rhbz#738676)
  - snapshot: Allow disk snapshots of qcow2 disks (rhbz#738676)
  - qemu: Prevent disk corruption on domain shutdown (rhbz#734773)
  - qemu: Introduce shutdown reason for paused state (rhbz#734773)
  - qemu: Fix shutoff reason when domain crashes (rhbz#739641)
  - qemu: Properly detect crash of a rebooted domain (rhbz#739641)
  - qemu: Avoid memory leak (rhbz#739704)
  - remote: Avoid memory leak (rhbz#739704)
  - util: Avoid memory leak (rhbz#739704)
  - Fix memory leak parsing 'relabel' attribute in domain security XML (rhbz#739704)
  - Don't leak memory if a cgroup is mounted multiple times (rhbz#739704)
  - network: Eliminate potential memory leak on parse failure (rhbz#739704)
  - virsh: doc: Fix supported driver types for attach-disk command (rhbz#738970)
  - Do not log invalid operations in libvirtd logs (rhbz#590807)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-13.el6
changelog:
  - Fix crash on events due to allocation errors (rhbz#737881)
  - remote: Fix crash on OOM (rhbz#737881)
  - Fix persistent migration config save (rhbz#738148)
  - qemu: Transfer inactive XML among cookie (rhbz#738148)
  - storage: Ensure the device path exists before refreshing disk pool (rhbz#611442)
  - Store max migration bandwidth in qemuDomainObjPrivate struct (rhbz#740099)
  - Save migration speed in qemuDomainMigrateSetMaxSpeed (rhbz#740099)
  - Set qemu migration speed unlimited when migrating to file (rhbz#740099)
  - Use max bandwidth from qemuDomainObjPrivate struct when migrating (rhbz#740099)
  - build: Silence warning on 32-bit build (rhbz#740099)
  - conf: Assign newDef of active domain as persistent conf if it is NULL (rhbz#728428)
  - qemu: Avoid dereferencing a NULL pointer (rhbz#739704)
  - sanlock: Fix memory leak (rhbz#739704)
  - virsh: Fix regression in argv parsing (rhbz#740168)
  - snapshot: Fix logic bug in qemu undefine (rhbz#735457)
  - snapshot: Prepare to remove transient snapshot metadata (rhbz#735457)
  - snapshot: Remove snapshot metadata on transient exit (rhbz#735457)
  - snapshot: Also delete empty directory (rhbz#735457)
  - virsh: Do not ignore the specified flags for cmdSaveImageDefine (rhbz#740508)
  - selinux: Correctly report warning if virt_use_nfs not set (rhbz#589922)
  - qemu: Properly hot-unplug drives (rhbz#696596)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-14.el6
changelog:
  - Fix synchronous reading of stream data (rhbz#741337)
  - qemu: Add ability to set PCI device "rombar" on or off (rhbz#738095)
  - virsh: Better document --copy-storage migrate options (rhbz#677220)
  - virsh: Enhance documentation of commands starting jobs (rhbz#705237)
  - qemu: Always remove domain object if MigratePrepare fails (rhbz#741251)
  - security: Properly chown/label bidirectional and unidirectional fifos (rhbz#740478)
  - qemu: Check domain status details when reconnecting monitor (rhbz#617890)
  - qemu: Finish domain shutdown on reconnect (rhbz#617890)
  - qemu: Avoid loop of fake reboots (rhbz#617890)
  - qemu: Preserve fakeReboot flag in domain status (rhbz#617890)
  - snapshot: Fix man page typos (rhbz#740686)
  - docs: Document virsh nodedev-* commands (rhbz#740686)
  - docs: Document node device XML (rhbz#740686)
  - qemu: Add return value check (rhbz#739704)
  - qemu: Check for ejected media during startup and migration (rhbz#725673)
  - virsh: Update man page for cpu_shares parameter (rhbz#639591)
  - virsh: Describe attach-interface parameter target (rhbz#698899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-20.el6
changelog:
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747516)
  - storage: Plug iscsi memory leak (rhbz#747516)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-1.el6
changelog:
  - Rebase to upstream 0.9.10 (rhbz#752433)
  - Add support for sVirt in the LXC driver
  - block rebase: add new API virDomainBlockRebase
  - API: Add api to set and get domain metadata
  - virDomainGetDiskErrors public API
  - conf: add rawio attribute to disk element of domain XML
  - Add new public API virDomainGetCPUStats()
  - Introduce virDomainPMSuspendForDuration API
  - resize: add virStorageVolResize() API
  - Add a virt-host-validate command to sanity check HV config
  - Add new virDomainShutdownFlags API
  - QEMU guest agent support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-2.el6
changelog:
  - qemu: Set capabilities based on supported monitor commands (rhbz#766958)
  - qemu: Implement DomainPMSuspendForDuration (rhbz#766958)
  - snapshot: Fix snapshot deletion use-after-free (rhbz#790744)
  - storage: Allow runtime detection of scrub (rhbz#725013)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#783968)
  - qemu: Prevent crash of libvirtd without guest agent (rhbz#790745)
  - python: Expose virDomain{G,S}etInterfaceParameters APIs in python binding (rhbz#770971)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-3.el6
changelog:
  - storage: Allow runtime detection of scrub missing build dep (rhbz#725013)
  - daemon: Plug memory leak (rhbz#795978)
  - daemon: Fix logic bug with virAsprintf (rhbz#795978)
  - util: Fix virFileAccessibleAs return path from parent (rhbz#795093)
  - Add support for unsafe migration (rhbz#751631)
  - virsh: Add --unsafe option to migrate command (rhbz#751631)
  - Introduce virStorageFileIsClusterFS (rhbz#751631)
  - qemu: Forbid migration with cache != none (rhbz#751631)
  - qemu: Nicer error message on failed graceful destroy (rhbz#795656)
  - Error out when using SPICE TLS with spice_tls=0 (rhbz#790436)
  - Revert "spec: Mark directories in /var/run as ghosts" (rhbz#788985)
  - Fixed URI parsing (rhbz#785164)
  - virsh: Fix informational message in iface-bridge command (rhbz#797066)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-4.el6
changelog:
  - Improve error reporting when virsh console is run without a TTY (rhbz#729940)
  - pidfile: Make checking binary path in virPidFileRead optional (rhbz#729940)
  - Add flags for virDomainOpenConsole (rhbz#729940)
  - virsh: Add support for VIR_DOMAIN_CONSOLE_* flags (rhbz#729940)
  - fdstream: Emit stream abort callback even if poll() doesnt. (rhbz#729940)
  - fdstream: Add internal callback on stream close (rhbz#729940)
  - util: Add helpers for safe domain console operations (rhbz#729940)
  - qemu: Add ability to abort existing console while creating new one (rhbz#729940)
  - Fixed service handling in specfile (rhbz#786770)
  - qemu: Don't emit tls-port spice option if port is -1 (rhbz#798220)
  - docs: Comments wiping supported algorithms (rhbz#725013)
  - libvirt-guests: Add documentation and clean up to use virsh's improved list (rhbz#693758)
  - libvirt-guests: Don't try to do a managed-save of transient guests (rhbz#693758)
  - virsh: Enhance list command to ease creation of shell scripts (rhbz#693758)
  - libvirt-guests: Check if URI is reachable before launching commands (rhbz#720691)
  - hooks: Add support for capturing hook output (rhbz#795127)
  - qemu: Add pre-migration hook (rhbz#795127)
  - Support for cpu64-rhel* qemu cpu models (rhbz#768450)
  - util: Add netlink event handling to virnetlink.c (rhbz#693842)
  - Add de-association handling to macvlan code (rhbz#693842)
  - qemu: Add ibmvscsi controller model (rhbz#782034)
  - qemu: Add virtio-scsi controller model (rhbz#782034)
  - conf: Add helper function to look up disk controller model (rhbz#782034)
  - conf: Introduce new attribute for device address format (rhbz#782034)
  - qemu: New cap flag to indicate if channel is supported by scsi-disk (rhbz#782034)
  - qemu: Build command line for the new address format (rhbz#782034)
  - tests: Add tests for virtio-scsi and ibmvscsi controllers (rhbz#782034)
  - virsh: Two new helper functions for disk device changes (rhbz#713932)
  - virsh: Use vshFindDisk and vshPrepareDiskXML in cmdDetachDisk (rhbz#713932)
  - virsh: New command cmdChangeMedia (rhbz#713932)
  - qemu: Require json for block jobs (rhbz#799055)
  - qemu: Pass block pull backing file to monitor (rhbz#799055)
  - virsh: Expose partial pull (rhbz#799055)
  - libvirt-guests: Add parallel startup and shutdown of guests (rhbz#625362)
  - qemu: Shared or readonly disks are always safe wrt migration (rhbz#751631)
  - util: Eliminate crash in virNetDevMacVLanCreateWithVPortProfile (rhbz#693842)
  - rpc: Fix client crash on connection close (rhbz#800185)
  - conf: Add missing device types to virDomainDevice(Type|Def) (rhbz#691539)
  - conf: Relocate virDomainDeviceDef and virDomainHostdevDef (rhbz#691539)
  - conf: Reorder static functions in domain_conf.c (rhbz#691539)
  - qemu: Rename virDomainDeviceInfoPtr variables to avoid confusion (rhbz#691539)
  - conf: Add device pointer to args of virDomainDeviceInfoIterate callback (rhbz#691539)
  - conf: Make hostdev info a separate object (rhbz#691539)
  - conf: HostdevDef parse/format helper functions (rhbz#691539)
  - conf: Give each hostdevdef a parent pointer (rhbz#691539)
  - conf: Put subsys part of virDomainHostdevDef into its own struct (rhbz#691539)
  - conf: Hostdev utility functions (rhbz#691539)
  - qemu: Re-order functions in qemu_hotplug.c (rhbz#691539)
  - qemu: Refactor hotplug detach of hostdevs (rhbz#691539)
  - conf: Parse/format type='hostdev' network interfaces (rhbz#691539)
  - qemu: Support type='hostdev' network devices at domain start (rhbz#691539)
  - conf: Change virDomainNetRemove from static to global (rhbz#691539)
  - qemu: Use virDomainNetRemove instead of inline code (rhbz#691539)
  - qemu: Support type=hostdev network device live hotplug attach/detach (rhbz#691539)
  - util: Two new pci util functions (rhbz#691539)
  - util: Support functions for mac/portprofile associations on hostdev (rhbz#691539)
  - util: Changes to support portprofiles for hostdevs (rhbz#691539)
  - qemu: Install port profile and mac address on netdev hostdevs (rhbz#691539)
  - Fix build after commit e3ba4025 (rhbz#693842)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-5.el6
changelog:
  - Avoid global variable shadowed (rhbz#737726)
  - Add nodeGetCPUmap() for getting available CPU IDs in a cpumap. (rhbz#737726)
  - Qemu driver for virDomainGetCPUstats using cpuacct cgroup. (rhbz#737726)
  - Cpu-stats command shows cpu statistics information of a domain. (rhbz#737726)
  - Ensure max_id is initialized in linuxParseCPUmap() (rhbz#737726)
  - rpc: Allow truncated return for virDomainGetCPUStats (rhbz#737726)
  - qemu: Don't parse device twice in attach/detach (rhbz#770031)
  - sanlock: Fix condition left crippled while debugging (rhbz#785736)
  - sanlock: Use STREQ_NULLABLE instead of STREQ on strings that may be null (rhbz#785736)
  - qemu: Fix startupPolicy for snapshot-revert (rhbz#798938)
  - util: Don't overflow on errno in virFileAccessibleAs (rhbz#798938)
  - blockResize: Add flag for bytes (rhbz#796526)
  - docs: Use correct terminology for 1024 bytes (rhbz#796526)
  - api: Add overflow error (rhbz#796526)
  - util: New function for scaling numbers (rhbz#796526)
  - xml: Share 'unit' in RNG (rhbz#796526)
  - xml: Output memory unit for clarity (rhbz#796526)
  - storage: Support more scaling suffixes (rhbz#796526)
  - xml: Drop unenforced minimum memory limit from RNG (rhbz#796526)
  - xml: Use long long internally, to centralize overflow checks (rhbz#796526)
  - xml: Use better types for memory values (rhbz#796526)
  - xml: Allow scaled memory on input (rhbz#796526)
  - virsh: Add option aliases (rhbz#796526)
  - virsh: Use option aliases (rhbz#796526)
  - virsh: Add command aliases, and rename nodedev-detach (rhbz#796526)
  - virsh: Improve storage unit parsing (rhbz#796526)
  - virsh: Improve memory unit parsing (rhbz#796526)
  - qemuBuildCommandLine: Don't add tlsPort if none set (rhbz#801443)
  - Removed more AMD-specific features from cpu64-rhel* models (rhbz#768450)
  - qemu: Support disk filenames with comma (rhbz#801970)
  - cpustats: Collect VM user and sys times (miss python bindings) (rhbz#800366)
  - cpustats: Report user and sys times (rhbz#800366)
  - qemu: Fix (managed)save and snapshots with host mode CPU (rhbz#801160)
  - qemu: Make block io tuning smarter (rhbz#770683)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-6.el6
changelog:
  - cpu: Add new flag supported by qemu to the cpu definition (rhbz#767364)
  - Added support for AMD Bulldozer CPU (rhbz#767364)
  - graphics: Cleanup port policy (rhbz#801443)
  - qemu: Reverse condition in qemuDomainCheckDiskPresence (rhbz#798938)
  - cpu: Add cpu definition for Intel Sandy Bridge cpu type (rhbz#761005)
  - cpu: Disable tsc-deadline feature not supported in qemu on RHEL 6.3 (rhbz#761005)
  - qemu: Support numad (rhbz#769930)
  - numad: Fix typo and warning (rhbz#769930)
  - qemu: Use scsi-block for lun passthrough instead of scsi-disk (rhbz#782034)
  - util: Make virDomainLeaseDefFree global (rhbz#802851)
  - qemu: Don't 'remove' hostdev objects from domain if operation fails (rhbz#802851)
  - util: Eliminate device object leaks related to virDomain*Remove*() (rhbz#802851)
  - virsh: Fix invalid free (rhbz#803591)
  - qemu: Eliminate memory leak in qemuDomainUpdateDeviceConfig (rhbz#802854)
  - qemu: Support persistent hotplug of <hostdev> devices (rhbz#802856)
  - qemu: Fix segfault when detaching non-existent network device (rhbz#802644)
  - remote: Fix migration leaks (rhbz#798497)
  - virsh: Trim aliases from -h output (rhbz#796526)
  - Fix handling of blkio deviceWeight empty string (rhbz#804028)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-7.el6
changelog:
  - snapshot: Make quiesce a bit safer (rhbz#804210)
  - python: Avoid memory leaks on libvirt_virNodeGetMemoryStats (rhbz#770944)
  - qemu: Use unlimited speed when migrating to file (rhbz#740099)
  - qemu: Add support for domain cleanup callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#795305)
  - qemu: Add connection close callbacks (rhbz#795305)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#795305)
  - python: Avoid memory leaks on libvirt_virNodeGetCPUStats (rhbz#770943)
  - util: Consolidate duplicated error messages in virnetlink.c (rhbz#693842)
  - python: Add virDomainGetCPUStats python binding API (rhbz#800366)
  - snapshot: Add qemu capability for 'transaction' command (rhbz#782457)
  - snapshot: Add atomic create flag (rhbz#782457)
  - snapshot: Make offline qemu snapshots atomic (rhbz#782457)
  - snapshot: Rudimentary qemu support for atomic disk snapshot (rhbz#782457)
  - snapshot: Add support for qemu transaction command (rhbz#782457)
  - snapshot: Wire up qemu transaction command (rhbz#782457)
  - snapshot: Improve qemu handling of reused snapshot targets (rhbz#782457)
  - Clarify virsh freecell manpage entry (rhbz#698521)
  - Add support for event tray moved of removable disks (rhbz#575160)
  - docs: Add documentation for new attribute tray of disk target (rhbz#575160)
  - conf: Parse and for the tray attribute (rhbz#575160)
  - qemu: Do not start with source for removable disks if tray is open (rhbz#575160)
  - qemu: Prohibit setting tray status as open for block type disk (rhbz#575160)
  - qemu: Update tray status while tray moved event is emitted (rhbz#575160)
  - build: Fix incorrect enum declaration (rhbz#575160)
  - spec: Add missed dependancy for numad (rhbz#769930)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-9.el6
changelog:
  - qemu: Avoid entering monitor with locked driver (rhbz#803186)
  - snapshot: Don't pass NULL to QMP command creation (rhbz#807147)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-10.el6
changelog:
  - python: Add new helper functions for python to C conversion (rhbz#807751)
  - python: Make python APIs use these helper functions (rhbz#807751)
  - python: Improve conversion validation (rhbz#807751)
  - qemu_agent: Issue guest-sync prior to every command (rhbz#808527)
  - qemu: Fix memory leak in virDomainGetVcpus (rhbz#808979)
  - qemu: Reflect any memory rounding back to xml (rhbz#808522)
  - conf: Allow fuzz in XML with cur balloon > max (rhbz#808522)
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#803186)
  - virsh: Clarify escape sequence (rhbz#808652)
  - virsh: Plug memory leaks on failure path (rhbz#807555)
  - conf: Prevent crash of libvirtd without channel target name (rhbz#808371)
  - qemu: Don't leak temporary list of USB devices (rhbz#808459)
  - qemu: Delete USB devices used by domain on stop (rhbz#808459)
  - qemu: Build activeUsbHostdevs list on process reconnect (rhbz#808459)
  - qemu: Fix virtio+macvtap migration from 6.3 to older hosts (rhbz#806633)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-11.el6
changelog:
  - test: Fix segfault in networkxml2argvtest (rhbz#810100)
  - conf: Plug memory leaks on virDomainDiskDefParseXML (rhbz#575160)
  - qemu_ga: Don't overwrite errors on FSThaw (rhbz#808527)
  - Fix parallel build in docs/ directory (rhbz#810559)
  - qemu: Make migration fail when port profile association fails on the dst host (rhbz#811026)
  - Wire up <loader> to set the QEMU BIOS path (rhbz#811227)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-12.el6
changelog:
  - blockjob: Add qemu capabilities related to block pull jobs (rhbz#811683)
  - blockjob: Add API for async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Optimize JSON event handler lookup (rhbz#811683)
  - blockjob: Wire up qemu async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Allow for fast-finishing job (rhbz#811683)
  - virsh: Minor syntactic cleanups (rhbz#811683)
  - qemu: Use consistent error when qemu binary is too old (rhbz#811683)
  - blockjob: Add virsh blockpull --wait (rhbz#811683)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix mem leak in qemuProcessInitCpuAffinity (rhbz#810157)
  - numad: Convert node list to cpumap before setting affinity (rhbz#810157)
  - numad: Ignore cpuset if placement is auto (rhbz#810157)
  - conf: Do not parse cpuset only if the placement is auto (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


