# changelog

author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.3.el6uek]
changelog:
  - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t (Hou Tao)  [Orabug: 26354399]  
  - xfs: fix max_retries _show and _store functions (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: normalize "infinite" retries in error configs (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: don't reset b_retries to 0 on every failure (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: fix xfs_error_get_cfg for negative errnos (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: add "fail at unmount" error handling configuration (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration handlers for specific errors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration of error failure speed (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce table-based init for error behaviors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configurable error support to metadata buffers (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce metadata IO error class (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: configurable error behavior via sysfs (Carlos Maiolino)  [Orabug: 26354399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.4.el6uek]
changelog:
  - block: defer timeouts to a workqueue (Christoph Hellwig)  [Orabug: 25654233]  
  - mlx4: add diagnostic counters via sysfs (Chris Gray)  [Orabug: 25743434]  
  - x86/ras/therm_throt: Do not log a fake MCE for thermal events (Borislav Petkov)  [Orabug: 26355098]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26350965]  
  - macsec: dynamically allocate space for sglist (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366009]  {CVE-2017-7645}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.5.el6uek]
changelog:
  - Signature verification support in kexec_file_load (Alexey Petrenko)  [Orabug: 26426837]  
  - IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay)  [Orabug: 26245885]  
  - aacraid: Update scsi_host_template to use tagged commands (Dave Carroll)  [Orabug: 26291288]  
  - IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker)  [Orabug: 26308324]  
  - aacraid: initialize scsi shared tag map (Joe Jin)  [Orabug: 26308827]  
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26351414]  
  - bnxt_en: Fix netpoll handling. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix xmit_more with BQL. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Implement xmit_more. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add additional chip ID definitions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Support for Short Firmware Message (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan)  [Orabug: 26402533]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26366387]  
  - dma-mapping: add interfaces for mapping pages with attributes (Shannon Nelson)  [Orabug: 26402533]  
  - bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter)  [Orabug: 26402533]  
  - bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Fix VF attributes reporting. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool mac loopback self test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic ethtool -t selftest support. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add suspend/resume callbacks. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool set_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool get_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add pci shutdown method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic WoL infrastructure. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Update firmware interface spec to 1.7.6.2. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix DMA unmapping of the RX buffers in XDP mode during shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Correct the order of arguments to netdev_err() in bnxt_set_tpa() (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Fix NULL pointer dereference in reopen failure path (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Ignore 0 value in autoneg supported speed from firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Check if firmware LLDP agent is running. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_ulp_stop() during tx timeout. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Perform function reset earlier during probe. (Michael Chan)  [Orabug: 26402533]  
  - x86/tsc: Enumerate SKL cpu_khz and tsc_khz via CPUID (Len Brown)  [Orabug: 26387040]  
  - x86/tsc: Save an indentation level in recalibrate_cpu_khz() (Borislav Petkov)  [Orabug: 26387040]  
  - x86/tsc_msr: Remove irqoff around MSR-based TSC enumeration (Len Brown)  [Orabug: 26387040]  
  - perf/x86: Fix time_shift in perf_event_mmap_page (Adrian Hunter)  [Orabug: 26387040]  
  - perf/x86: Improve accuracy of perf/sched clock (Adrian Hunter)  [Orabug: 26387040]  
  - bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal (Paolo Abeni)  [Orabug: 26397292]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406403]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.6.el6uek]
changelog:
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26367820]  
  - net: properly release sk_frag.page (Eric Dumazet)  [Orabug: 26354016]  
  - NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan)  [Orabug: 26361950]  
  - btrfs: introduce device delete by devid (Anand Jain)  [Orabug: 26362382]  
  - btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain)  [Orabug: 26362382]  
  - btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: clean up and optimize __check_raid_min_device() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper function __check_raid_min_devices() (Anand Jain)  [Orabug: 26362382]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403937]  {CVE-2017-1000363} 
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404000]  {CVE-2017-9077}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.7.el6uek]
changelog:
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: use different workqueue for base_conn" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: prioritize the base connection establishment" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch)  [Orabug: 26385993]  
  - blk-mq: Provide freeze queue timeout (Keith Busch)  [Orabug: 26385993]  
  - nvme: Complete all stuck requests (Keith Busch)  [Orabug: 26385993]  
  - nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme: Delete created IO queues on reset (Keith Busch)  [Orabug: 26385993]  
  - nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme/pci: No special case for queue busy on IO (Keith Busch)  [Orabug: 26385993]  
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26408570]  
  - SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust)  [Orabug: 26221921]  
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - xfs: Timely free truncated dirty pages (Jan Kara)  [Orabug: 26452561]  
  - xfs: skip dirty pages in ->releasepage() (Brian Foster)  [Orabug: 26452561]  
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Kirtikar Kashyap)  [Orabug: 26476721]  
  - Revert "NFSv4: Fix callback server shutdown" (Kirtikar Kashyap)  [Orabug: 26476721]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.8.el6uek]
changelog:
  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin)  [Orabug: 26621191]  
  - mm: introduce kv[mz]alloc helpers (Kyle Fortin)  [Orabug: 26621191]  
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26621179]  {CVE-2016-9604} {CVE-2016-9604} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26621176]  {CVE-2016-10200} 
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26621171]  {CVE-2016-6213} {CVE-2016-6213} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26621163]  {CVE-2017-9242}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.6.1.el6uek]
changelog:
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)   
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26339147]  
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: use different workqueue for base_conn" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: prioritize the base connection establishment" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch)  [Orabug: 26385993]  
  - blk-mq: Provide freeze queue timeout (Keith Busch)  [Orabug: 26385993]  
  - nvme: Complete all stuck requests (Keith Busch)  [Orabug: 26385993]  
  - nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme: Delete created IO queues on reset (Keith Busch)  [Orabug: 26385993]  
  - nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme/pci: No special case for queue busy on IO (Keith Busch)  [Orabug: 26385993]  
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26408570]  
  - SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust)  [Orabug: 26221921]  
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - xfs: Timely free truncated dirty pages (Jan Kara)  [Orabug: 26452561]  
  - xfs: skip dirty pages in ->releasepage() (Brian Foster)  [Orabug: 26452561]  
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Kirtikar Kashyap)  [Orabug: 26476721]  
  - Revert "NFSv4: Fix callback server shutdown" (Kirtikar Kashyap)  [Orabug: 26476721]  
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26367820]  
  - net: properly release sk_frag.page (Eric Dumazet)  [Orabug: 26354016]  
  - NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan)  [Orabug: 26361950]  
  - btrfs: introduce device delete by devid (Anand Jain)  [Orabug: 26362382]  
  - btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain)  [Orabug: 26362382]  
  - btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: clean up and optimize __check_raid_min_device() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper function __check_raid_min_devices() (Anand Jain)  [Orabug: 26362382]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403937]  {CVE-2017-1000363} 
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404000]  {CVE-2017-9077} 
  - Signature verification support in kexec_file_load (Alexey Petrenko)  [Orabug: 26426837]  
  - IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay)  [Orabug: 26245885]  
  - aacraid: Update scsi_host_template to use tagged commands (Dave Carroll)  [Orabug: 26291288]  
  - IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker)  [Orabug: 26308324]  
  - aacraid: initialize scsi shared tag map (Joe Jin)  [Orabug: 26308827]  
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26351414]  
  - bnxt_en: Fix netpoll handling. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix xmit_more with BQL. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Implement xmit_more. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add additional chip ID definitions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Support for Short Firmware Message (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan)  [Orabug: 26402533]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26366387]  
  - dma-mapping: add interfaces for mapping pages with attributes (Shannon Nelson)  [Orabug: 26402533]  
  - bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter)  [Orabug: 26402533]  
  - bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Fix VF attributes reporting. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool mac loopback self test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic ethtool -t selftest support. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add suspend/resume callbacks. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool set_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool get_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add pci shutdown method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic WoL infrastructure. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Update firmware interface spec to 1.7.6.2. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix DMA unmapping of the RX buffers in XDP mode during shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Correct the order of arguments to netdev_err() in bnxt_set_tpa() (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Fix NULL pointer dereference in reopen failure path (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Ignore 0 value in autoneg supported speed from firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Check if firmware LLDP agent is running. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_ulp_stop() during tx timeout. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Perform function reset earlier during probe. (Michael Chan)  [Orabug: 26402533]  
  - x86/tsc: Enumerate SKL cpu_khz and tsc_khz via CPUID (Len Brown)  [Orabug: 26387040]  
  - x86/tsc: Save an indentation level in recalibrate_cpu_khz() (Borislav Petkov)  [Orabug: 26387040]  
  - x86/tsc_msr: Remove irqoff around MSR-based TSC enumeration (Len Brown)  [Orabug: 26387040]  
  - perf/x86: Fix time_shift in perf_event_mmap_page (Adrian Hunter)  [Orabug: 26387040]  
  - perf/x86: Improve accuracy of perf/sched clock (Adrian Hunter)  [Orabug: 26387040]  
  - bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal (Paolo Abeni)  [Orabug: 26397292]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406403]  
  - block: defer timeouts to a workqueue (Christoph Hellwig)  [Orabug: 25654233]  
  - mlx4: add diagnostic counters via sysfs (Chris Gray)  [Orabug: 25743434]  
  - x86/ras/therm_throt: Do not log a fake MCE for thermal events (Borislav Petkov)  [Orabug: 26355098]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26350965]  
  - macsec: dynamically allocate space for sglist (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366009]  {CVE-2017-7645} 
  - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t (Hou Tao)  [Orabug: 26354399]  
  - xfs: fix max_retries _show and _store functions (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: normalize "infinite" retries in error configs (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: don't reset b_retries to 0 on every failure (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: fix xfs_error_get_cfg for negative errnos (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: add "fail at unmount" error handling configuration (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration handlers for specific errors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration of error failure speed (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce table-based init for error behaviors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configurable error support to metadata buffers (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce metadata IO error class (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: configurable error behavior via sysfs (Carlos Maiolino)  [Orabug: 26354399]  
  - mm: fix new crash in unmapped_area_topdown() (Hugh Dickins)  [Orabug: 26337733]  {CVE-2017-1000364} 
  - mm: larger stack guard gap, between vmas (Hugh Dickins)  [Orabug: 26337733]  {CVE-2017-1000364} 
  - Fix Express lane queue creation. (James Smart)  [Orabug: 26241742]  
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26298950]  
  - IB/mlx4: Fix CM REQ retries in paravirt mode (Håkon Bugge)  [Orabug: 26304710]  
  - vfio/pci: Fix unsigned comparison overflow (Alex Williamson)   
  - blkback/blktap: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26321947]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.1.el6uek]
changelog:
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26867321]  
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26867321]  
  - i40e: use cpumask_copy instead of direct assignment (Jacob Keller)  [Orabug: 26849253]  
  - blk-mq: add missing blk_mq_put_ctx (Ankur Arora)  [Orabug: 26752456]  
  - blk-mq: avoid re-initialize request which is failed in direct dispatch (Shaohua Li)  [Orabug: 26752456]  
  - xen-blkfront: fix mq start/stop race (Junxiao Bi)  [Orabug: 26752391] [Orabug: 26739166]  
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796417]  {CVE-2017-1000251} 
  - Correct dma mapping attributes code (Jack Vogel)  [Orabug: 26790422]  
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 26681154]  {CVE-2017-1000111} 
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26650875]  {CVE-2017-9075} 
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26643636]  {CVE-2017-11473} 
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26643591]  {CVE-2016-10044} 
  - mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang)  [Orabug: 26643550]  {CVE-2017-11176} 
  - NFSv4.1: Use seqid returned by EXCHANGE_ID after state migration (Chuck Lever)  [Orabug: 26631540]  
  - KEYS: fix dereferencing NULL payload with nonzero length (Eric Biggers)  [Orabug: 26591993]  
  - rds: Make sure updates to c_send_gen can be observed (Håkon Bugge)  [Orabug: 26524573]  
  - NFSv4.1: Handle EXCHGID4_FLAG_CONFIRMED_R during NFSv4.1 migration (Chuck Lever)  [Orabug: 26485614]  
  - bnxt_en: Add bnxt_get_num_stats() to centrally get the number of ethtool stats. (Michael Chan)  [Orabug: 26790005]  
  - bnxt_en: Implement ndo_bridge_{get|set}link methods. (Michael Chan)  [Orabug: 26790005]  
  - bnxt_en: Retrieve the hardware bridge mode from the firmware. (Michael Chan)  [Orabug: 26790005]  
  - bnxt_en: Update firmware interface spec to 1.8.0. (Michael Chan)  [Orabug: 26790005]  
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403964]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403964]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403964]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403964]  {CVE-2017-9074} 
  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin)  [Orabug: 26473214]  
  - mm: introduce kv[mz]alloc helpers (Kyle Fortin)  [Orabug: 26473214]  
  - MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev)  [Orabug: 26481610] [Orabug: 26368162]  {CVE-2017-7477} {CVE-2017-7477} 
  - xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26520659]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540275]  {CVE-2017-2671} 
  - ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren)  [Orabug: 26554427]  
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26554427]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26554427]  
  - Revert "add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang" (Ashish Samant)  [Orabug: 26554427]  
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26572911]  {CVE-2017-8797} 
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26572911]  {CVE-2017-8797} 
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26643591]  {CVE-2016-10044} 
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26643591]  {CVE-2016-10044} 
  - KVM: nVMX: fix nested EPT detection (Ladi Prosek)  [Orabug: 26662943]  
  - KVM: nVMX: introduce nested_vmx_load_cr3 and call it on vmentry (Ladi Prosek)  [Orabug: 26662943]  
  - KVM: nVMX: propagate errors from prepare_vmcs02 (Ladi Prosek)  [Orabug: 26662943]  
  - KVM: nVMX: fix CR3 load if L2 uses PAE paging and EPT (Ladi Prosek)  [Orabug: 26662943]  
  - kvm: x86: reduce collisions in mmu_page_hash (David Matlack)  [Orabug: 26639596]  
  - i40e/i40evf: check for stopped admin queue (Mitch Williams)  [Orabug: 26645623]  
  - xen: fix bio vec merging (Roger Pau Monne)  [Orabug: 26645540]  {CVE-2017-12134} 
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638904]  {CVE-2017-1000365} {CVE-2017-1000365} 
  - dentry name snapshots (Al Viro)  [Orabug: 26630807]  {CVE-2017-7533} 
  - MSI: Don't assign MSI IRQ vector twice (Ashok Vairavan)  [Orabug: 26039010]  
  - blk-mq: don't redistribute hardware queues on a CPU hotplug event (Christoph Hellwig)  [Orabug: 26621020]  
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585986]  {CVE-2016-9604} {CVE-2016-9604} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586038]  {CVE-2016-10200} 
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26585938]  {CVE-2016-6213} {CVE-2016-6213} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578187]  {CVE-2017-9242}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.2.el6uek]
changelog:
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26673877]  {CVE-2017-10661} 
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26376434]  {CVE-2017-7482} {CVE-2017-7482} 
  - mm: Tighten x86 /dev/mem with zeroing reads (Kees Cook)  [Orabug: 25917914]  {CVE-2017-7889} 
  - xen/blkfront: always allocate grants first from per-queue persistent grants (Dongli Zhang)  [Orabug: 26397233]  
  - netfilter: nf_tables: fix oob access (Florian Westphal)  [Orabug: 25960439]  
  - NFSv4.1: Don't deadlock the state manager on the SEQUENCE status flags (Trond Myklebust)  [Orabug: 26650422]  
  - NFSv4.1: Defer bumping the slot sequence number until we free the slot (Trond Myklebust)  [Orabug: 26650422]  
  - NFSv4: Leases are renewed in sequence_done when we have sessions (Trond Myklebust)  [Orabug: 26650422]  
  - NFSv4.1: nfs41_sequence_done should handle sequence flag errors (Trond Myklebust)  [Orabug: 26650422]  
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)  [Orabug: 26653968]  
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717172]  
  - fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio (Ashish Samant)  [Orabug: 26752446]  
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26797273]  
  - fs: __generic_file_splice_read retry lookup on AOP_TRUNCATED_PAGE (Abhi Das)  [Orabug: 26797304]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26846946]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847818]  
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26999112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.3.el6uek]
changelog:
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037818]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.4.el6uek]
changelog:
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062526]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062526]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062526]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062526]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27098332]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27098332]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27098332]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27098332]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27098332]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27098332]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27098332]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.5.el6uek]
changelog:
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27345402]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27345388]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27345388]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27345388]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27345388]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27345388]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27345388]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27345388]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.6.el6uek]
changelog:
  - x86/ibrs: Remove 'ibrs_dump' and remove the pr_debug (Konrad Rzeszutek Wilk)  [Orabug: 27351275]  
  - kABI: Revert kABI: Make the boot_cpu_data look normal (Konrad Rzeszutek Wilk)   {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.7.el6uek]
changelog:
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365568]  {CVE-2017-5715} 
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27364707]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27364720]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)   
  - Make use of ibrs_inuse consistent. (Jun Nakajima)   
  - x86/kvm: Set IBRS on VMEXIT if guest disabled it. (Konrad Rzeszutek Wilk)   
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27358615]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27358615]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27358615]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27358615]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27358615]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27358615]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27358615]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27358615]  {CVE-2017-5754}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.8.el6uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27378087] [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27378074]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27378063]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27378035]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27345388]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27345388]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.7.9.el6uek]
changelog:
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 26848749]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 26848749]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 26848749]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 26848749]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 26848749]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 26848749]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 26848749]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.8.1.el6uek]
changelog:
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)   
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27673499]  
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27547729]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27672521]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27672521]  
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27630399]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27630379]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27630364]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27630345]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27630345]  {CVE-2017-5715} 
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27630338]  
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27630331]  {CVE-2017-5715} 
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27630325]  
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27630312]  
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27630299]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27630299]  
  - x86/spectre_v2: Only use IBRS when ibrs_inuse tells us to (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Disable IBRS if spectre_v2=off (Konrad Rzeszutek Wilk)   
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 27630289]  
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27630283]  
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27630273]  
  - x86/entry: RESTORE_IBRS needs to be done under kernel CR3 (Ankur Arora)  [Orabug: 27630254]  
  - Fix typo IBRS_ATT, which should be IBRS_ALL (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Add spectre_v2_heuristics= (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Do not disable IBPB when disabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/scattered: Fix the order. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Favor IBRS on Skylake over retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL (Darren Kenny)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Now that we expose 'stbibp' make sure it is correct. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/bugs: Drop one "mitigation" from dmesg (Borislav Petkov)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/nospec: Fix header guards names (Borislav Petkov)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't spam the console with these: (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/msr: Add definitions for new speculation control MSRs (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/cpufeatures: Add AMD feature bits for Speculation Control (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Print what options are available. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Add VMEXIT_FILL_RSB instead of RETPOLINE (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: If IBRS is enabled disable "Filling RSB on context switch" (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't allow {ibrs,ipbp,lfence}_enabled to be toggled if retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Fix retpoline_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Update sysctl values if toggled only by set_{ibrs,ibpb}_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - retpoline/module: Taint kernel for missing retpoline in module (Andi Kleen)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Fill RSB on context switch for affected CPUs (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Optimize inline assembler for vmexit_fill_RSB (Andi Kleen)  [Orabug: 27630250]  {CVE-2017-5715} 
  - kprobes/x86: Disable optimizing on the function jumps to indirect thunk (Masami Hiramatsu)  [Orabug: 27630250]  {CVE-2017-5715} 
  - kprobes/x86: Blacklist indirect thunk functions for kprobes (Masami Hiramatsu)  [Orabug: 27630250]  {CVE-2017-5715} 
  - retpoline: Introduce start/end markers of indirect thunk (Masami Hiramatsu)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/mce: Make machine check speculation protected (Thomas Gleixner)  [Orabug: 27630250]  {CVE-2017-5715} 
  - kbuild: modversions for EXPORT_SYMBOL() for asm (Nicholas Piggin)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Tom Lendacky)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Remove compile time warning (Thomas Gleixner)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Fill return stack buffer on vmexit (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/irq32: Convert assembler indirect jumps (Andi Kleen)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/checksum32: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/xen: Convert Xen hypercall indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/hyperv: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/ftrace: Convert ftrace assembler indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/entry: Convert entry assembler indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline/crypto: Convert crypto assembler indirect jumps (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Add disable_ibrs_and_friends (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out if STUFF_RSB macro needs to be used. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out when to use IBRS. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Add IBRS option. (Konrad Rzeszutek Wilk)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/spectre: Add boot time option to select Spectre v2 mitigation (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/retpoline: Add initial retpoline support (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - kconfig.h: use __is_defined() to check if MODULE is defined (Masahiro Yamada)  [Orabug: 27630250]  {CVE-2017-5715} 
  - EXPORT_SYMBOL() for asm (Al Viro)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/asm: Make asm/alternative.h safe from assembly (Andy Lutomirski)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/kbuild: enable modversions for symbols exported from asm (Adam Borowski)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/asm: Use register variable to get stack pointer value (Andrey Ryabinin)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier (Andy Lutomirski)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/alternatives: Add missing '
  ' at end of ALTERNATIVE inline asm (David Woodhouse)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/alternatives: Fix optimize_nops() checking (Borislav Petkov)  [Orabug: 27630250]  {CVE-2017-5715} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27629973]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27629973]  
  - x86/spec: Fix spectre_v1 bug and mitigation indicators (John Haxby)  [Orabug: 27630236]  
  - x86: Fix compile issues if CONFIG_XEN not defined (Konrad Rzeszutek Wilk)   
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   
  - x86/IBRS/IBPB: Remove procfs interface to ibrs/ibpb_enable (Boris Ostrovsky)  [Orabug: 27630222]  
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)   
  - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)  [Orabug: 27630203]  
  - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky)  [Orabug: 27630203]  
  - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky)  [Orabug: 27630203]  
  - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky)  [Orabug: 27630198]  
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   
  - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)   
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   
  - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky)  [Orabug: 27630193]  
  - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)   
  - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)   
  - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)  [Orabug: 27451922]  
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27445637]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27445637]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27445637]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27445637]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27445637]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27445637]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27445637]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27445637]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.8.2.el6uek]
changelog:
  - config: sort out retpoline config options (Brian Maly)  [Orabug: 27509502]  
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27630312]  
  - kernel: on OL6 only, simulate the gcc 4.4 kABI for __stack_chk_fail() (Todd Vierling)  [Orabug: 27509502]  
  - uek-rpm: configs: Don't set HAVE_FENTRY on OL6 builds. (Todd Vierling)  [Orabug: 27509502]  
  - Revert "x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI" (Brian Maly)  [Orabug: 27630312]  
  - Revert "Makefile: Build with -Werror=date-time if the compiler supports it" (Gayatri Vasudevan)  [Orabug: 27724742]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.8.3.el6uek]
changelog:
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924178]  
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718304]  
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 27925101]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.8.4.el6uek]
changelog:
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27971820]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.8.5.el6uek]
changelog:
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718304]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718304]


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 2.0.0-188.0.3.el6
changelog:
  - Make sure "--allow-missing" is effective by adding to MKDUMPRD_ARGS in
    kdump.sysconfig, kdump.sysconfig.i386, and kdump.sysconfig.x86_64 [orabug 12590865]


author: Fredrick He <fredrick.he@oracle.com> - 2.0.0-188.0.1.el6_1.2
changelog:
  - Make sure "--allow-missing" is effective by adding to MKDUMPRD_ARGS in
    kdump.sysconfig, kdump.sysconfig.i386, and kdump.sysconfig.x86_64


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.0-209.0.1.el6
changelog:
  - Make sure "--allow-missing" is effective by adding to MKDUMPRD_ARGS in
    kdump.sysconfig, kdump.sysconfig.i386, and kdump.sysconfig.x86_64 [12590865] [11678808]


author: Shu Li <shu.li@oracle.com> - 2.0.0-209.0.2.el6_2.5
changelog:
  - add initramfs.conf [orabug: 13706747]
  - Make sure "--allow-missing" is effective by adding to MKDUMPRD_ARGS in kdump.init
    kdump.sysconfig, kdump.sysconfig.i386, and kdump.sysconfig.x86_64 [12590865] [11678808]


author: Maxim Uvarov <maxim.uvarov@oracle.com> - 2.0.3-3.0.1.el6
changelog:
  - use mkdumprd;
  - update scripts and settings;
  - use stable kexec-tools-2.0.3 and makedumpfile-1.4.3;
  - add kdump.init check if it's 2.6.18, then we add --args-linux  argument to kexec tools. (This is required for old kernels.).;
  - added both nr_cpus=1 and maxcpus=1;
  - added mce=off for x86_64.


author: Vaughan Cao <vaughan.cao@oracle.com> 2.0.3-3.0.6.el6
changelog:
  - export DM_DISABLE_UDEV=1 to tell device mapper and lvm that there is no udev support in kdump initrd, and modify lvm.conf as well. [Orabug: 16561795]


author: Brian Maly <brian.maly@oracle.com> 2.0.3-3.0.12
changelog:
  - kexec-tools: non-default routes are ignored by kdump - merge conflicts [Orabug: 19638396] (Baoquan He) {ELBA-2014-1192}


author: Brian Maly <brian.maly@oracle.com> 2.0.7-1.0.1
changelog:
  - Rebase to makedumpfile version 1.5.7 [Orabug: 18990432]
  - Rebase to kexec-tools version 2.0.7 [Orabug: 17848027]
  - Add nfsv3 support for mkdumprd [Orabug: 18152290]
  - Fix dump vmcore on ext3 partitions [Orabug: 18187563]
  - Fix ssh key gen logic [Orabug: 18250359]
  - Log reason for failure if kdump fails to start [Orabug: 17966787]
  - Fix vmcore-dmesg [Orabug: 18177052] [Orabug: 18420754]
  - Make vmcore-dmesg work with new structured logging format and create vmcore-dmesg.txt [Orabug: 20557744]
  - Support the -X option for makedumpfile [Orabug: 19885260]
  - Fix makedumpfile stall on systems with 6TB memory [Orabug: 20364744]
  - sadump: Support more than 16TB physical memory space [Orabug 20898729] (Baoquan He) {ELEA-2015-0811}


author: Vaughan Cao <vaughan.cao@oracle.com> 2.0.7-1.0.2
changelog:
  - mkdumprd: Delete the dead code for blacklist and update man page, update default blacklist [Orabug: 21071452]
  - kdump.sysconfig.x86_64: Add acpi_no_memhotplug to kdump kernel [Orabug: 21071452]
  - Convert leftover "getent hosts" to "getent ahostsv4" [Orabug: 21071452]
  - starting kdump service after network, local fs and remote fs. [Orabug: 21071452]


author: Brian Maly <brian.maly@oracle.com> 2.0.7-1.0.3
changelog:
  - Fix stall on failure in kdump init script [Orabug: 21111440]
  - kexec-tools: fix fail to find mem hole failure on i386  [Orabug: 21111440]


author: Kevin Lyons <kevin.x.lyons@oracle.com> 2.0.7-1.0.8
changelog:
  - Forward port fix in ELBA-2016-0473
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589 (Baoquan He)
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 (Baoquan He)


author: Brian Maly <brian.maly@oracle.com> 2.0.7-1.0.9
changelog:
  - Add support for NVME devices [Orabug: 23066567] [Orabug: 20970971]
  - Fix dm node control device creation
  - Consolidate ELBA-2016-0473 into mkdumprd patch


author: Manjunath Patil <manjunath.b.patil@oracle.com> 2.0.7-1.0.11
changelog:
  - conditionally restart kdump service with udev rules
  - serialize multiple kdump start commands
  - orabug: 23279106 23262291 23262278


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Karsten Hopp <karsten@redhat.com> 0.6.0-2
changelog:
  - add endian info for s390, s390x
  - kipiplugin_acquireimages.so is not available as kdegraphics is compiled
    without sane support on s390x


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.11.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (mark the -common subpackage as noarch)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.12.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.13.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues the proper way using cmake)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.14.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix strange cmake syntax)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-2
changelog:
  - BR: webkitpart-devel
  - use %find_lang --all-names --with-kde
  - Requires: kdebase4%{_?isa} >= %version


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-4
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-5
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (sanitize .desktop files)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-1
changelog:
  - build a split-out krb5-appl package by pruning out all of the non-appl
    parts and resetting the versioning to match the upstream version for the
    newly-split package


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#773538, RT#7079)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Matthias Clasen <mclasen@redhatcom> - 0.8-4
changelog:
  - Don't show bubbles before the icon is there
  - Use the same invisible char as the rest of the world


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-34
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-42z1
changelog:
  - Fix CVE-2015-8629 and CVE-2015-8631
  - Also fix a spec trigger issue that prevents building
  - Resolves: #1306973


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #593458)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)
    (#595828)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596937), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.1
changelog:
  - incorporate candidate patch to fix uninitialized pointer crash in the KDC
    (CVE-2010-1322, #636336)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.2
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #644825, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #644825, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.3
changelog:
  - pull up crypto changes made between 1.8.2 and 1.8.3 to fix upstream #6751,
    assumed to already be there for the next fix
  - incorporate candidate patch to fix various issues from MITKRB5-SA-2010-007
    (CVE-2010-1323, CVE-2010-1324, CVE-2010-4020, #651962)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-13
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-26
changelog:
  - backport patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761523)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761523)
  - backport patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761523)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-27
changelog:
  - reintroduce patch to accept keytab entries with vno==0 as matches when
    we're searching for an entry with a specific name/kvno (#782211)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-28
changelog:
  - when processing etype-info and etype-info2 preauth hints, remember them all,
    and if we fail to generate enc_timestamp preauth data due to a
    key-table-entry-not-found error with a given set of hints, move on to try the
    next one until we run out of hints (#748528)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-29
changelog:
  - backport fixes to GSSAPI to obtain creds for all available mechanisms when we
    don't specify a mechanism when acquiring credentials, and to not try to use
    the default credential when accepting an initiator token for a mechanism for
    which we have no verifier creds (#799161, RT#6894)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-30
changelog:
  - move removal of krb5-user.info from %postun to %preun, and use the name
    of the compressed file (#801033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, #671102, CVE-2011-0283, #669423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - switch to revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.1
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#714866)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.2
changelog:
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (#740084)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1454804


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.9.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (create a noarch doc subpackage)


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.10.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (sanitize .desktop file)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.13-1
changelog:
  - link with build-id to fix rawhide build
  - upgrade to 1.13 (GCC4 build-fix and string fixes) (#449542)
  - add -plugindir patch so listplugin and friends will work by default
    (Anthony Green #324741)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Michal Schmidt <mschmidt@redhat.com> - 0.3-4
changelog:
  - Package the translation table too and modify latencytop.c to look for it in
    the correct directory.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: kwizart < kwizart at gmail.com > - 1.18-0.1.beta2
changelog:
  - Update to 1.18beta2
   fix bug #487508: CVE-2009-0723 LittleCms integer overflow
   fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
   fix bug #487509: CVE-2009-0581 LittleCms memory leak


author: kwizart < kwizart at gmail.com > - 1.18-1
changelog:
  - Update to 1.18 (final)
  - Remove upstreamed patches
  - Disable autoreconf - patch libtool to prevent rpath issue


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Tomas Hozza <thozza@redhat.com> - 4.0.9-3
changelog:
  - Fix lftp to try also other addresses if connecting to first fails (#732863)
  - Fix lftp hang when using ascii mode with sftp (#842322)
  - Fix lftp to overwrite filename when auto-rename and clobber are enabled (#619777)
  - Add description of xfer:auto-rename into man page (#674875)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Adam Jackson <ajax@redhat.com> 1.0.4-4
changelog:
  - xau-1.0.4-local.patch: When looking for an auth cookie on local transport,
    don't bother checking hostname, it can't possibly help.


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-2
changelog:
  - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
  - libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
    if the server has an older extension version than the client.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-3
changelog:
  - libXext-1.1-event_vec-smash.patch: drop, this patch is wrong and has been
    reverted upstream. (#614888)


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.5-5
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)


author: parag <paragn@fedoraproject.org> - 2.1.12-4
changelog:
  - Merge-Review #226074
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length NEWS file


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3-3
changelog:
  - libXi-1.3-right-event-number.patch: initialise extension with the 
    number of events supported by the server. (#615834)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226080
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS file


author: parag <paragn@fedoraproject.org> - 1.0.0-10
changelog:
  - Merge-Review #226082
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed xorg-x11-deprecated-libs xorg-x11-deprecated-libs-devel as Obsoletes


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: parag <paragn@fedoraproject.org> 3.5.7-2
changelog:
  - Merge-Review #226081
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: parag <paragn@fedoraproject.org> 0.9.4-2
changelog:
  - Merge-Review #226084
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: parag <paragn@fedoraproject.org> - 1.0.4-4
changelog:
  - Merge-Review #226090
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS NEWS file


author: parag <paragn@fedoraproject.org> - 1.0.3-2
changelog:
  - Merge-Review #226091
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS file


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226093
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193508)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192729)
  - Remove package ownership of mandir/libdir/etc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Julian Sikorski <belegdol[at]gmail[dot]com> - 0.8.8-1
changelog:
  - Updated to 0.8.8 (bz 316731)
  - Cleaned up the SPEC
  - Added PulseAudio support
  - Made build parallel
  - Killed rpaths
  - Changed the kludges to use sed


author: Nalin Dahyabhai <nalin@redhat.com> 2002e-17
changelog:
  - account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
    sets the locations at compile-time (more of #165967)


author: Jonathan Kamens <jik@kamens.brookline.ma.us> 2004g-1
changelog:
  - Upstream version 2004g (#176974)
  - Remove obsolete doc file "WARNING"
  - Remove security patch included in new upstream version
  - Custom flock code no longer necessary; included in upstream


author: Alon Levy <alevy@redhat.com> - 0.1.0-4
changelog:
  - address review issues:
   - Group for main and devel and tools
   - Requires for devel and tools
  - fix changelog for previous entry (day was wrong, and macro quoting)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Alon Levy <alevy@redhat.com> - 0.15.0-rc0
changelog:
  - upstream update, it is now qemu based, so build process changed, and version to match.
   - no non-rc release yet of qemu with required patches, hence using rc0. There are still
     some patches carried here that hopefully will get into 0.15.0 or 0.16.0 in the latest.
   - upstream updated to 0.15.0-rc0
   - resolves rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.14.90-2
changelog:
  - fix permissions of h files to not change because of rebase.
   - change NVR to match libcacard.so
     - will change when qemu-0.15.0 is released.
   - Copied correct README
   - Resolves: rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.15.0
changelog:
  - not a rebase - no changes in libcacard subdirectory
     between 0.15.0-rc0 and 0.15.0 in the upstream package.
    - but allows the fedora and RHEL package to remain in sync
      on a released version.
   - dropped zlib dep which was only required for configure phase
     via added patch 0001-drop-zlib-check.patch
   - added three patches that only cleanup the build process
     0010-Fix-spelling-in-comments-and-debug-messages-recieve-.patch
     0011-Improvements-to-libtool-support.patch
     0012-Silence-make-if-nothing-is-to-do-for-libcacard.patch
   - Final two patches resolve the bug 727916:
     0013-libcacard-cac-fix-typo-in-cac_delete_pki_applet_priv.patch
     0014-libcacard-vscclient-fix-error-paths-for-socket-creat.patch
   - Resolves: rhbz#727916


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Adrian Reber <adrian@lisas.de> - 0.80-5
changelog:
  - fixed #462125 (Multilib conflict) - really, really, really
    (also remove architecture information from man pages)


author: Adrian Reber <adrian@lisas.de> - 0.81-1
changelog:
  - updated to 0.81
  - license changed to GPLv3+
  - fixed #477288 (libcdio-devel multilib conflict)
  - applied patch to fix endless loop in mock


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.36-6.1
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-15
changelog:
  - Fix [Bug 512108:issue 11] ibus-chewing crash the application
    by move cursor_orig to chewingio.c global.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-16
changelog:
  - Fix chewing Google issue 352: 
    zuin_count in chewing_zuin_String( ChewingContext *ctx, int *zuin_count ) 
    does not count correctly.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-17
changelog:
  - Add zh_TW summary and description
  - Split out python binding into a subpackage.
  - Fix for package wrangler.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-21
changelog:
  - Revised phrase choice from rear logic.
    Thus update phraseChoiceRearward.patch as phraseChoiceRearward.2.patch
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-23
changelog:
  - Fix Hsu and Dvorak Hsu input (ibus google issue 755, 
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-27
changelog:
  - Fix Dvorak Hsu 4th tone key (ibus google issue 755 comment 12, 
    chewing google issue 10)
  - Resolves: #555192


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1
changelog:
  - Update to latest upstream release while rebuilding against latest
    libibverbs
  - Related: bz750609


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Bump and rebuild against new libibverbs, update our sources while we
    are at it
  - Related: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.3.5-1
changelog:
  - Update to latest upstream release
  - Move modprobe setup to rdma package
  - Resolves: bz1165842
  - Related: bz1163527


author: Tom Lane <tgl@redhat.com> 0.8.2-1
changelog:
  - Update to version 0.8.2.
  - Update License tag to match code.
  - Remove static library and .la file, per packaging guidelines.


author: Tom Lane <tgl@redhat.com> 0.8.1a-2
changelog:
  - Enable building of sqlite driver
  Resolves: #184568
  - Rebuild needed anyway for Postgres library update


author: Tom Lane <tgl@redhat.com> 0.8.2-1.1
changelog:
  - Update to version 0.8.2-1.
  - Update License tag to match code.
  - Remove static libraries and .la files, per packaging guidelines.
  - Fix up packaging of documentation.


author: Tom Lane <tgl@redhat.com> 0.8.2-1.2
changelog:
  - Correct License tag for sqlite subpackage; it's currently not same license
    as the rest of the code.


author: Tom Lane <tgl@redhat.com> 0.8.3-2
changelog:
  - Fix mistaken external reference in libdbdsqlite3.so.  (I'm applying this
    as a patch, rather than updating to upstream's 0.8.3-1, because that isn't
    acceptable as an RPM Version tag.)
  Resolves: #460734


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.2
changelog:
  - Remove the bundled firewire-{cdev,constants}.h fires and add the -juju patch to build against
    the system firewire-cdev.h instead.
    Related: rhbz555835


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.4
changelog:
  - Fix the install command for the example programs:
    grab_color_image grab_gray_image grab_partial_image ladybug grab_partial_pvn
    Resolves: rhbz593778


author: Dave Airlie <airlied@redhat.com> 2.4.20-1
changelog:
  - pull in upstream .20 release - contains pretty much same patches
  - fix includes harder to make mesa build


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-1
changelog:
  - New upstream release
  - PIC patch from Mike Frysinger <vapier@gentoo.org> (#146596)
  - Re-enable asm on i386


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-2
changelog:
  - Update License field (Matthias Saou)
  - Remove useless zero epoch (Matthias Saou)
  - Add pkgconfig devel sub-package req (Matthias Saou)
  - Minor spec formatting changes and clean-ups


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-3
changelog:
  - A few more fixes from Matthias Saou:
   - List man pages in %files consistently w/o gz extension
   - Add BR: popt-devel for f8+, its now split fromm rpm-devel


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-15
changelog:
  - Replaced patch from 1.0.4-13 by patch from
    http://www.openwall.com/lists/oss-security/2010/03/17/3
    (CVE-2010-1192 CVE-2010-1194)
  - Removed unquoted version macro from changelog


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839915


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839916


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Debarshi Ray <rishi@fedoraproject.org> 2.20.1.1-4
changelog:
  - Use 'Requires: libglade2 >= 2.6.3-2' to prevent unowned
    %{_libdir}/libglade and %{_libdir}/libglade/2.0.


author: Marek Kasik <mkasik@redhat.com> - 0.2.3-7.2
changelog:
  - rpmlint related changes:
  -   Remove explicit dependencies
  -   Change Groups
  -   Add ChangeLog file to "-devel" docs
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.2.3-9
changelog:
  - Add as, bn_IN, kn, ko, ml, ta, te, ru and or translations
  - Modify de, es, fr, gu, hi, it, ja, mr, pa, pt_BR, zh_CN
           and zh_TW translations
  - Patch by Ankit Patel
  - Resolves: #616313


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-1.2
changelog:
  - Access oVirt API through /ovirt-engine/api rather than /api, this fixes
    foreign menu when accessing a VM from .vv files
    Resolves: rhbz#1297810


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-3
changelog:
  - Fix bug when setting the CA used for https REST communication
    Resolves: rhbz#1325762
  - Fix parsing of state of storage domain nodes
    Resolves: rhbz#1318672
  - Silence one redundant warning happening during storage domain parsing
    Related: rhbz#1201846


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Jindrich Novy <jnovy@redhat.com> 2.4.6-1
changelog:
  - update to 2.4.6
  - new IDs for Kodak V803, M1063, Canon PowerShot A650IS, SD990 (aka IXUS 980IS),
    SD880IS, A480, Canon EOS 50D, Fuji FinePix S1000fd
  - many Canon related fixes


author: David Zeuthen <davidz@redhat.com> 2.4.6-3
changelog:
  - Add patch from http://sourceforge.net/tracker/?func=detail&aid=2801117&group_id=8874&atid=308874
    and generate generic udev rules for device identification (ID_GPHOTO2* properties)


author: Todd Zullinger <tmz@pobox.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Make doc subpackage noarch (on Fedora >= 10)
  - Drop --with-hal-callouts-dir from configure, the upstream default works now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.11
changelog:
  - For RHBZ#600148:
    * In guestfs_mkfs_b, map block size to cluster size for VFAT and NTFS
    * Remove power-of-2 test from API tests.  Not supported by backported
      code.


author: Matthew Booth <mbooth@redhat.com> - 1:1.2.7-1.21
changelog:
  - Rely on upstream augeas lens for modules.conf (RHBZ#616753)
  - Use link-local addresses for host<->guest communication (RHBZ#613562)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.24
changelog:
  - Remove runtime requires xfsprogs and /lib64/libhandle.so.1 (RHBZ#630986).
    Note that we have removed support completely from the appliance.  Even
    installing xfsprogs separately will not provide support in this
    build of libguestfs.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-2
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019737


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-3
changelog:
  - Fix .new method in Ruby bindings.
    resolves: rhbz#1072062
  - Properly use timeout --foreground when running tests
    resolves: rhbz#1025269
  - Fix cancellation on errors in tar-in
    resolves: rhbz#1091805
  - Check whether something has been mounted to / when using mount-local* APIs
    resolves: rhbz#1057510


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-4
changelog:
  - Don't inhibit partition detection if LDM not available
    resolves: rhbz#1079182
  - Deprecate blockdev_setbsz and make it do nothing
    resolves: rhbz#624335
  - Disable fstrim API
    resolves: rhbz#982979
  - Backport virt-sysprep from libguestfs 1.24, with few backports from
    greater versions too
    resolves: rhbz#1037166
  - virt-sparsify: don't overwrite block or char devices if used as output files
    resolves: rhbz#1056558
  - fix few typos in the documentation
    resolves: rhbz#1099332


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-1
changelog:
  - Rebase to libguestfs 1.16.31.
  - Backport mount-local feature.
    resolves: rhbz#830135
  - Include copy-patches.sh shell script.
  - Simplify .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-3
changelog:
  - Add dependency on fuse.
    resolves: rhbz#836501
  - Clarify the error message from resize2fs-M.
    resolves: rhbz#801640
  - Increase limit on size of Windows registry for inspection (RHBZ#852396).
  - Change virt-sparsify to work with old 'file' command (RHBZ#853763).
  - Enable tests by adding an LD_PRELOAD workaround for RHBZ#563103.
  - Tidy up comments in the check section.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-4
changelog:
  - Fix inspection of Windows guests (RHBZ#858126).
  - Fix list-devices when different drive interfaces are used (RHBZ#858128).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-2
changelog:
  - Rebase to libguestfs 1.16.32 which includes a fix for inspection
    of Windows guests.
    resolves: rhbz#858126
  - Skip test-mdadm.sh.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-3
changelog:
  - Set permissions of .guestfish files in home directories to 0600
    resolves: rhbz#843068
  - Ignore /etc/release if /etc/redhat-release exists
    resolves: rhbz#872454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.34-1
changelog:
  - Rebase to latest stable-1.16 branch version libguestfs 1.16.34.
  - Include missing patch which adds <locale.h> to fuse/guestmount.c
    resolves: rhbz#883338
  - Fix link to engineering git repo.
  - Add workaround for bug in yum: RHBZ#883463.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-1
changelog:
  - Rebase to libguestfs 1.20.11.
    resolves: rhbz#958183
  - Remove buildnet: builds now detect network automatically.
  - The rhel-6.x branches containing the patches used in RHEL are
    now stored on a public git repository
    (https://github.com/libguestfs/libguestfs/branches).
  - Compare spec file to Fedora 18 and fix where necessary.
  - Backport new APIs part-get-gpt-type and part-set-gpt-type
    resolves: rhbz#965495
  - Fix DoS (abort) due to a double free flaw when inspecting certain guest
    files / images (CVE-2013-2124)
    resolves: rhbz#968337
  - libguestfs-devel should depend on an explicit version of
    libguestfs-tools-c, in order that the latest package is pulled in.
  - Rebuild against Augeas >= 1.0.0-5
    resolves: rhbz#971207
  - Backport Windows inspection changes
    resolves: rhbz#971090
  - Add back state test commands to guestfish
    resolves: rhbz#971664
  - Work around problem with ntfsresize command in RHEL 6
    resolves: rhbz#971326
  - Fix txz-out API
    resolves: rhbz#972413
  - Move virt-sysprep to the libguestfs-tools-c package since it's no longer
    a shell script
    resolves: rhbz#975572
  - Fix hostname inspection because of faulty Augeas path expression
    resolves: rhbz#975377
  - Calculate appliance root correctly when iface drives are added
    resolves: rhbz#975760
  - Add notes about resizing Windows disk images to virt-resize documentation
    resolves: rhbz#975753
  - Remove dependency on lsscsi, not available in 6Client
    resolves: rhbz#973425
  - Fix yum cache copy so it works if there are multiple repos
    resolves: rhbz#980502
  - Fix hivex-commit API to fail with relative paths
    resolves: rhbz#980372
  - Better documentation for filesystem-available API
    resolves: rhbz#980358
  - Fix double free when kernel link fails during launch
    resolves: rhbz#983690
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988863
  - Fix cap-get-file so it returns empty string instead of error on no cap
    resolves: rhbz#989352
  - Better documentation for acl-set-file
    resolves: rhbz#985269
  - Fix bogus waitpid error when using guestfish --remote
    resolves: rhbz#996825
  - Disable 9p support
    resolves: rhbz#997884
  - Document that guestfish --remote doesn't work with certain other arguments
    resolves: rhbz#996039
  - Enable kvmclock in the appliance to reduce clock instability
    resolves: rhbz#998108
  - Fix 'sh' command before mount causes daemon to segfault
    resolves: rhbz#1000122
  - Various fixes to tar-out 'excludes' (RHBZ#1001875)
  - Document use of glob + rsync-out (RHBZ#1001876)
  - Document mke2fs blockscount (RHBZ#1002032)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-12
changelog:
  - Fix lvm-set-filter to work with newer lvm2 versions.
    resolves: rhbz#1168751
  - Fix handling of structs in the Java bindings.
    resolves: rhbz#1074005
  - Fix scrub-file so it can work on symlinks.
    resolves: rhbz#1091859
  - Show also aliases in the output of `guestfish -h`.
    resolves: rhbz#1100530
  - Fix typo in the man page of virt-edit.
    resolves: rhbz#1151739
  - virt-ls: always output the checksum field in CSV mode.
    resolves: rhbz#1151901
  - virt-ls: avoid double slashes in directory output.
    resolves: rhbz#1151911
  - Fix newline character in error output.
    resolves: rhbz#1153974
  - Fix virt-sysprep firstboot scripts to not be run more than once.
    resolves: rhbz#1159651
  - Fix logging of virt-sysprep firstboot scripts.
    resolves: rhbz#1160203
  - Fix description of 'set_append' and 'get_append' APIs.
    resolves: rhbz#1164734


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-13
changelog:
  - guestfish: fix Tab completion with some filesystems (e.g. xfs).
    resolves: rhbz#1153846
  - Improve drive caching by selecting the caching mode.
    resolves: rhbz#1038977
  - Generate user-cancel automatically, so there is also documentation for it.
    resolves: rhbz#1100533
  - virt-sysprep: make sure to trigger autorelabel by default when removing
    users.
    resolves: rhbz#1153855
  - virt-sysprep: recommend usage of --selinux-relabel with SELinux guests.
    related: rhbz#1153855
  - virt-sparsify: allow block devices as output.
    resolves: rhbz#1122557


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-14
changelog:
  - Raise augeas (Build)Requires to >= 1.0.0-8.el6, which fixes
    rhbz#1160261, so virt-sysprep can remove users from /etc/shadow;
    also remove note about that lack.
    resolves: rhbz#1138630
  - Make sure that libguesfs (the library itself), and virt-sparsify in
    particular, can handle filenames with ':'.
    resolves: rhbz#1128942


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-16
changelog:
  - Fix the old inspection code to handle some features of RHEL 7 images:
    handle /bin as symlink to /usr/bin, grub2 in boot partition, and
    recognize xfs as filesystem (reading UUID and label for it).
    resolves: rhbz#1216305
  - Fix reading of icon in RHEL 7 guests.
    resolves: rhbz#1216298
  - virt-sysprep: don't delete /var/spool/at/.SEQ
    resolves: rhbz#1229305
  - virt-sparsify: read all the output of `qemu-img --help`
    resolves: rhbz#1218934
  - Fix getting long labels for NTFS and btrfs filesystems; also correct the
    documented maximum length of btrfs labels.
    resolves: rhbz#1164729


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-17
changelog:
  - Mention ext2/3/4 in set-label error messages for ext labels.
    resolves: rhbz#1294956
  - Fix handling of symlinks in ll and llz, and when editing files in guestfish
    and virt-edit.
    resolves: rhbz#1293276


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-19
changelog:
  - libguestfs-java: bump the java Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1319086


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-8
changelog:
  - Backport patches up to upstream 1.8.1. (RHBZ#613593)
  - Fixes:
     * guestfish: fails to tilde expand '~' when $HOME unset (RHBZ#617440)
     * libguestfs: unknown filesystem /dev/fd0 (RHBZ#666577)
     * libguestfs: unknown filesystem label SWAP-sda2 (RHBZ#666578)
     * libguestfs: unknown filesystem /dev/hd{x} (cdrom) (RHBZ#666579)
     * virt-filesystems fails on guest with corrupt filesystem label (RHBZ#668115)
     * emphasize "libguestfs-winsupport" in error output (RHBZ#627468)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-10
changelog:
  - Remove external hexedit script and make guestfish users set $HEXEDITOR.
    This is because requiring emacs pulls in all of X (RHBZ#641494).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-12
changelog:
  - Fix typo in virt-make-fs manual page.
    resolves: rhbz#673721
  - Add a grep-friendly string to LIBGUESTFS_TRACE output.
    resolves: rhbz#673477


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-18
changelog:
  - python: Convert any iterable argument to a list.
    resolves: rhbz#693306
  - Renumber the RHEL 6.1-specific patches from 0500+.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-23
changelog:
  - Use git to manage patches.
  - Include all minor bugfixes from upstream stable-1.8 branch up to
    libguestfs 1.8.11.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Matthias Clasen <mclasen@redhat.com> 2.26.1-3
changelog:
  - Fix multilib parallel-installability (#477672)
  - Remove some old optimizations that are now no-ops


author: Akira TAGOH <tagoh@redhat.com> - 0.3.0-1
changelog:
  - New upstream release.
    - Have a workaround to avoid the race condition issue. (#452849)
    - Fix a freeze issue with ibus. (#465431)


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1
changelog:
  - Update to latest upstream version
  - Remove requirement on libibcommon since that library is no longer needed
  - Fix a problem with man page listing


author: Roland Dreier <rdreier@cisco.com> - 1.1.2-1
changelog:
  - New upstream release
  - Update description to mention RDMA and iWARP, not just InfiniBand
  - Add "Requires" tag for libibverbs base package to -devel


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream release (includes FDR link speed capability)
  - Related: bz751220, bz750609


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Fix a coverity found issue
  - Resolves: bz1119105


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Ville Skyttä <ville.skytta at iki.fi> - 0.15.1b-1
changelog:
  - Don't ship static libraries.
  - Embed *.pc in specfile to keep it in sync with the build.
  - Build with dependency tracking disabled.


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-4
changelog:
  - Update the Source and URL fields to point to correct locations.
    Resolves: rhbz#553782 -  Invalid URLs in spec file


author: Tim Waugh <twaugh@redhat.com> 0.2.11-6
changelog:
  - Package review fixes (bug #226031):
    - Drop prereq on ldconfig.
    - Removed trailing dot in devel package summary.
    - Fixed devel package requirement on main package.
    - Use SMP make flags.
    - Removed static libraries and la files.
    - Fixed source URL.
    - Make sure timestamps are preserved on install.
    - Ship AUTHORS and NEWS.


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Doug Ledford <dledford@redhat.com> - 1.1-10
changelog:
  - Update to the OFED 1.3 version of libipathverbs-1.1.tar.gz (there is a 300k
    size difference between the libipathverbs-1.1.tar.gz in the OFED release
    and the file by the same name at openfabrics.org/downloads/...which is
    just insane, they should have different release numbers, but they don't,
    so for anyone to duplicate what I have here, you will need to get the
    libipathverbs-1.1.tar.gz file out of the libipathverbs-1.1-1.ofed1.3 src
    rpm out of the OFED-1.3.tar.gz download at the openfabrics site)
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Update to git repo archive from upstream
  - Add truescale-serdes.cmds and related code from git archive
  - Resolves: bz1024903


author: Doug Ledford <dledford@redhat.com> - 1.3-3
changelog:
  - Add missing files to dracut install command, including bash
    as the truescale-serdes.cmds will not work with dash and
    can not be reasonably ported to dash.
  - Related: bz1024903


author: Tom Lane <tgl@redhat.com> - 6b-38
changelog:
  - Initial review of package by new (old?) maintainer; marginal specfile cleanup
  - Restore libjpeg.a to distribution, in a separate -static subpackage
  Resolves: #186060, #215537
  - Fix non-security-significant buffer overrun in wrjpgcom, per Lubomir Kundrak
  Resolves: #226965
  - Apply patch4 that was added by previous maintainer, but never applied
  Resolves: #244778
  Related: #238936
  - Fix inter-RPM dependencies to include release
  Resolves: #238780


author: Tom Lane <tgl@redhat.com> - 6b-40
changelog:
  - Rip out the long-obsolete version of libtool that shipped with libjpeg 6b,
    and instead use the build system's libtool.  This obsoletes most of the
    patches we were carrying.
  - Fix configure script to #define the various HAVE_FOO macros as 1, not empty,
    for better compatibility with most other autoconf-using packages.  (This
    requires importing the original IJG configure.in, which was not shipped
    in libjpeg-6b for reasons that no longer seem very good.)
  Resolves: #427616


author: Tom Lane <tgl@redhat.com> - 6b-44
changelog:
  - Fix libtool hacking so it also works with libtool 2.2.  (For the
    moment the specfile still also works with libtool 1.5, but that can
    go away eventually.)


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fixed License to be LGPL
  - Add COPYING license file to docs
  - Fixed Group
  - Fixed buildroot
  - Added {} braces around % macros
  - Removed .la and .a files 
  - Own {_includedir}/libmb directory
  - Add dist tag to release
  - Add smpflags  flag to make
  - Remove use of boken makeinstall macro


author: Roland Dreier <rdreier@cisco.com> - 1.0-2
changelog:
  - Spec file cleanups, based on Fedora review: don't mark
    libmlx4.driver as a config file, since it is not user modifiable,
    and change the name of the -devel-static package to plain -devel,
    since it would be empty without the static library.


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Add pseudo provides of libibverbs-driver
  - Update buildrequires for libibverbs API change


author: Doug Ledford <dledford@redhat.com> - 1.0.1-3
changelog:
  - Tweak the provides and obsoletes a little bit to make sure we only pull in
    the -static package to replace past -devel-static packages, and not past
    -devel packages.


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release (1.0.1 -> 1.0.2)
  - Remove 5 patches rolled into upstream release
  - Drop ifnarch ia64 use around valgrind as we don't build on ia64 any more
  - Fix broken libmlx4-modprobe.conf
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file
  - Related: bz950915


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Bump and rebuild against latest libibverbs and latest valgrind-devel
  - Update to latest upstream release for various fixes and improvements
  - Resolves: bz1142162, bz1116096


author: Roland Dreier <rdreier@cisco.com> - 1.0.4-1
changelog:
  - New upstream release
  - Depend on libibverbs 1.1, and package new library file names.
  - Spec file cleanups: remove unused ver macro, improve BuildRoot, move
    static libraries into devel-static package, and don't use makeinstall
    any more (all suggested by Doug Ledford <dledford@redhat.com>).


author: Doug Ledford <dledford@redhat.com> - 1.0.5-5
changelog:
  - Rename devel-static package to just -static, it only has a single static
    lib in it and no actual devel files (like headers, those are part of
    libibverbs-devel instead).  Obsolete the various other named packages we
    want this to supercede
  - Enable valgrind annotations on all arches except ia64
  - Update to latest code, including update for libibverbs API change
  - Bump release to 5 so it is higher than the current rhel5 libmthca release
  - Add various patches from the upstream git repo that haven't been rolled into
    a new release tarball yet


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version (1.0.5 -> 1.0.6)
  - Remove ifnarch ia64 around valgrind support since we don't build on ia64
    any more
  - Remove 4 patches that have been rolled into upstream release
  - Related: bz725016


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-5
changelog:
  - fix doxygen-induced multilib conflicts (#480378)
  - add %check section (disabled by default, pending cppunit detection issues)


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Doug Ledford <dledford@redhat.com> - 1.1.3-1
changelog:
  - Update to latest upstream release
  - Rebuild against latest libibverbs (native FDR/IBoE enabled)
  - Related: bz750609


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Paul P. Komkoff Jr <i@stingr.net> - 0.0.33-0.1.svn7211
changelog:
  - grab latest upstream changes and fixes, along with new version number
  - do not mess with bundled nfnetlink.h, use <linux/netfilter/nfnetlink.h>


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Colin Walters <walters@redhat.com> - 0.3.14-1
changelog:
  - New upstream version
  - Drop upstreamed liboil-0.3.13-better-altivec-detect.patch
  - Drop upstreamed clobber-ecx.patch


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.23-3
changelog:
  - update to nmu1
  - apply patch to fix imprecise definition of DL format
  - apply patch so that when no config is present, libpaper will fallback through
    LC_PAPER before giving up and using Letter


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721305


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Carl Byington <carl@five-ten-sg.com> - 0.6.37-1
changelog:
  - add pst_attach_to_mem() back into the shared library interface.
  - fix memory leak caught by valgrind.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.38-1
changelog:
  - add python interface to the shared library.
  - bump soname to version 4 for many changes to the interface.
  - better decoding of recurrence data in appointments.
  - remove readpstlog since debug log files are now plain text.
  - add readpst -j option for parallel jobs for each folder.
  - make nested mime multipart/alternative to hold the text/html parts.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.41-1
changelog:
  - fix ax_python detection - should not use locate command
  - checking for fedora versions is not needed


author: Carl Byington <carl@five-ten-sg.com> - 0.6.43-1
changelog:
  - decode more of the pst format, some minor bug fixes
  - add support for code pages 1200 and 1201.
  - add readpst -t option to select output item types, which can
    now be used to process folders containing mixed item types.
  - fix segfault with embedded appointments
  - add readpst -u option for Thunderbird mode .size and .type files
  - better detection of embedded rfc822 message attachments


author: Carl Byington <carl@five-ten-sg.com> - 0.6.44-1
changelog:
  - patch from Lee Ayres to add file name extensions in separate mode.
  - allow mixed items types in a folder in separate mode.


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-3
changelog:
  - Address some compiler warnings
  - Reduce nesting depth in new_handle dispatches
  - Fix segfault in handle_arm_request


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-5
changelog:
  - Fix up iso stop command so starting/stopping/starting iso reception works
  - Plug firewire handle leak


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-6
changelog:
  - Set errno = ENOSYS for all unimplemented functions
  - Make dvgrab and friends work w/o requiring r/w on the local fw node (#441073)


author: Roland Dreier <rdreier@cisco.com> - 1.0.6-2
changelog:
  - Spec file cleanups from Fedora review: add BuildRequires for
    libibverbs, and move the static library to -static.


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0.8.0-18
changelog:
  - Specify full path to libedit backing library.
  - Default to libedit backing library.
  - Satisfy termcap requirements with ncurses.
  - Resolves: rhbz#231209


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Tianyue Lan <tianyue.lan@oracle.com> - 3.4.5.2-16.1.0.1.el6_3
changelog:
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  - Build with --with-vendor="Oracle America, Inc."


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: Jacob Wang <jacob.wang@oracle.com> - 1:4.2.8.2-11.0.1
changelog:
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile (jingdong.lu@oracle.com)
  - Build with --with-vendor="Oracle America, Inc." (jingdong.lu@oracle.com)


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11.1
changelog:
  - Resolves: rhbz#1285818 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-15
changelog:
  - fix the kbase searching rhbz#743198
  - updated translation Related: #731037
  - Resolves: #743198 #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.9-19
changelog:
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport pkg


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-21.el6_6.1
changelog:
  - switch dump directory owner from "abrt:user" to "user:abrt" (rhbz#1212093)
  - harden against directory traversal, crafted symbolic links (rhbz#1212093)
  - avoid race-conditions in dump dir opening (rhbz#1212093)
  - Resolves: #1211966


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jingdong Lu <jingdong.lu@oracle.com> 2.0.9-24.0.1
changelog:
  - Add Fix-for-bug-21110293.patch [bug 21110293]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport pkg


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-1
changelog:
  - new upstream release
  - fixed typos in man
  - fixed handling of anaconda-tb file
  - generate valid xml file
  - Resolves: #759377, #758366, #746727


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Paul Wouters <pwouters@redhat.com> - 3.15-9
changelog:
  - Resolves: rhbz#1781903 ipsec newhostkey fails with ipsec rsasigkey: key pair generation failed: -8187


author: EL Errata <el-errata_ww@oracle.com> - 3.15-9.0.1
changelog:
  - Rebuild to fix file permissions [Orabug: 28451433]
  - add libreswan-oracle.patch to detect Oracle Linux distro


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-7
changelog:
  - Don't generate the gtk-doc docs, and use the ones in the tarball
    to avoid having different files in different builds, fixes
    multilib problems (#342361)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-13
changelog:
  - Backport patch that allows SexyIconEntry to support images using icon-name.
  - Drop requires on hunspell-en dictionary. (#517804)


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Denis Leroy <denis@poolshark.org> - 2.2.4.1-1
changelog:
  - Update to upstream 2.2.4.1
  - Added devhelp book and necessary BRs
  - Split documentation into new subpackage
  - Moved documentation to gtk-doc dir


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Kamil Dudka <kdudka@redhat.com> - 1.4.2-3.el6_10.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)

  - use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)


author: Kevin Lyons <kevin.x.lyons@oracle.com> 1.4.2-3.0.1.el6_10.1
changelog:
  - [Orabug: 29909723] Added patch CVE-2019-3862. (qing.lin@oracle.com)
    Added Additional length checks to prevent out-of-bounds (CVE-2019-3862)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.2.11-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a bunch of patches from Debian, which build a .so instead of a .a
    and fix a bunch of memory leaks.
  - Reinstate a proper devel package as we now build a .so


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Petr Hracek <phracek@redhat.com> - 3.9.4-10
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299919


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Roozbeh Pournader <roozbeh@gmail.com> - 20080409-1
changelog:
  - Update to upstream 20080409: Unicode 5.1 support
  - Change package versioning scheme
  - Update summary and description
  - Add DistTag
  - Remove copy of GPL from RPM: the only file it applies to is not shipped


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-3
changelog:
  - Imported from Fedora
  - Resolves: rhbz#726463 - Add libunistring as a separate component/package
                            into RHEL


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Hans de Goede <hdegoede@redhat.com> 0.5.99-1
changelog:
  - New upstream release 0.5.99
  - This fixes the crashes some people have been experiencing with 0.5.98
    (#503345)


author: Daniel Veillard <veillard@redhat.com> - 0.5.11-1.el6
changelog:
  - Rebase to 0.5.11 for RHEL-6.1
  - needed to bump libcmpiutil requirement to 0.5.4 due to incompatibilities
  - Resolves: rhbz#633336
  - Resolves: rhbz#633331


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1.10.el6
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1046280)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Daniel Veillard <veillard@redhat.com> - 0.6.0-1.el6
changelog:
  - Rebase to libvirt-cim 0.6.0 rhbz#739154
  - Support libvirt domain events rhbz#739153
  - Network QoS support rhbz#633338
  - cpu cgroup support rhbz#739156


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.2
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1009117)
  - Update spec file to more closely match upstream
  - Uninstall open-pegasus-specific providers from sfcb.eml (rhbz#833633)
  - Don't install open-pegasus' specific providers (rhbz#859122)
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.10
changelog:
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#984578)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#984578)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#1003934)
  - Plug leak in virCgroupMoveTask (rhbz#984556)
  - Fix invalid read in virCgroupGetValueStr (rhbz#984561)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.13
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155563)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155563)
  - Make ABI stability issue easier to debug (rhbz#1155563)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-38
changelog:
  - remote: Don't leak priv->tls object on connection failure (rhbz#1099075)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1100173)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1100173)
  - fix leak in memoryStats with older python (rhbz#1099860)
  - hooks: let virCommand do the error reporting (rhbz#1105397)
  - SELinux: don't fail silently when no label is present (rhbz#1105954)
  - qemu: Add qemuDomainReleaseDeviceAddress to remove any address (rhbz#807023)
  - qemu: Separate disk device removal into a standalone function (rhbz#807023)
  - qemu: Separate controller removal into a standalone function (rhbz#807023)
  - qemu: Separate net device removal into a standalone function (rhbz#807023)
  - qemu: Separate host device removal into a standalone function (rhbz#807023)
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - examples: Handle VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - Clarify virDomainDetachDeviceFlags documentation (rhbz#807023)
  - Add virDomainDefFindDevice for looking up a device by its alias (rhbz#807023)
  - qemu: Add support for DEVICE_DELETED event (rhbz#807023)
  - qemu: Remove devices only after DEVICE_DELETED event (rhbz#807023)
  - qemu: Emit VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED events (rhbz#807023)
  - Add function to find a needle in a string array (rhbz#807023)
  - util: Non-existent string array does not contain any string (rhbz#807023)
  - conf: Make error reporting in virDomainDefFindDevice optional (rhbz#807023)
  - qemu: Introduce qemuMonitorGetDeviceAliases (rhbz#807023)
  - qemu: Unplug devices that disappeared when libvirtd was down (rhbz#807023)
  - qemu: Finish device removal in the original thread (rhbz#807023)
  - qemu: Process DEVICE_DELETED event in a separate thread (rhbz#807023)
  - qemu: Remove interface backend only after frontend is gone (rhbz#807023)
  - qemu: Remove disk backend only after frontend is gone (rhbz#807023)
  - qemu: Return in from qemuDomainRemove*Device (rhbz#807023)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-39
changelog:
  - Fix crash when saving a domain with type none dac label (rhbz#1108590)
  - Initialize threading & error layer in LXC controller (rhbz#1109120)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-40
changelog:
  - formatdomain.html.in: Document implementation limitation of QoS (rhbz#980350)
  - Fix error in qemuDomainSetNumaParamsLive (rhbz#857312)
  - cpu: Add new Broadwell CPU model (rhbz#1100381)
  - docs: publish correct enum values (rhbz#1113316)
  - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1113828)
  - qemu: fix guestfwd chardev option back how it was (rhbz#1112066)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-41
changelog:
  - Add invariant TSC cpu flag (rhbz#996772)
  - Fix segfault when starting a domain with no cpu definition (rhbz#996772)
  - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1113828)
  - Bind connection close callback APIs to python binding (rhbz#1114619)
  - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1115039)
  - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1115039)
  - conf: Factor out setting of metadata to simplify code (rhbz#1115039)
  - util: Add helper to convert libxml2 nodes to a string (rhbz#1115039)
  - conf: Add support for requesting of XML metadata via the API (rhbz#1115039)
  - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1115039)
  - conf: Avoid false positive of uninitialized variable use (rhbz#1115039)
  - lib: Don't force the key argument when deleting metadata (rhbz#1115039)
  - test: Add <metadata> support into the test drivera (rhbz#1115039)
  - tests: Add metadata tests (rhbz#1115039)
  - conf: Don't corrupt metadata on OOM (rhbz#1115039)
  - Ignore additional fields in iscsiadm output (rhbz#1116741)
  - conf: net: Fix helper for applying new network definition (rhbz#1116754)
  - blockjob: wait for pivot to complete (rhbz#1119385)
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1117177)
  - virsh: Use inactive definition when removing disk from config (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1117177)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-42
changelog:
  - conf: Fix backport of metadata API code (rhbz#1115039)
  - conf: Always format seclabel's model (rhbz#1113860)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-43
changelog:
  - Fix blkdeviotune for shutoff domain (rhbz#1122819)
  - rpc: message related sizes enlarged (rhbz#1126393)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1126393)
  - Fix max stream packet size for old clients (rhbz#1126393)
  - Adjust legacy max payload size to account for header information (rhbz#1126393)
  - rpc: Correct the wrong payload size checking (rhbz#1126393)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46
changelog:
  - cpu: separate host-model and host-passthrough (rhbz#1138222)
  - Don't include non-migratable features in host-model (rhbz#1138222)
  - Don't add dhcp hosts to hostsfile twice (rhbz#1137011)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.2
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155564)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155564)
  - Make ABI stability issue easier to debug (rhbz#1155564)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.3
changelog:
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.4
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1203367)
  - util: more verbose error when failing to create macvtap device (rhbz#1203367)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.5
changelog:
  - Create directory for lease files if it's missing (rhbz#1208619)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1209891)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-47
changelog:
  - Revert "qemu: export disk snapshot support in capabilities" (rhbz#1149667)
  - qemu: allow restore with non-migratable XML input (rhbz#1141838)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1141838)
  - Make ABI stability issue easier to debug (rhbz#1141838)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)
  - sanlock: Avoid freeing uninitialized value (rhbz#1136788)
  - virsh: Print cephx and iscsi usage (rhbz#1156327)
  - Fix bug with loading bridge name for active domain during libvirtd start (rhbz#1146310)
  - conf: Fix even implicit labels (rhbz#1138500)
  - tests: Add test cases for previous commit (rhbz#1138500)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-48
changelog:
  - networkValidate: Disallow bandwidth in portgroups too (rhbz#1115292)
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#834196)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#834196)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#834196)
  - qemu: blkiotune: Avoid accessing non-existing disk configuration (rhbz#1131821)
  - qemu: Fix build error introduced in 653137eb957a278b556c6226424aad5395a (rhbz#1131821)
  - qemu: snapshot: Use better check when reverting external snapshots (rhbz#1124854)
  - virsh: domain: Use global constant for XML file size limit (rhbz#1134671)
  - selinux: Avoid label reservations for type = none (rhbz#1138488)
  - Clean up chardev sockets on QEMU shutdown (rhbz#1122367)
  - Don't include @LIBS@ in libvirt.pc.in file (rhbz#1134455)
  - qemu: save domain state to XML after reboot (rhbz#1169405)
  - virsh: Honour -q in domblklist, vcpupin and emulatorpin (rhbz#1135171)
  - virsh-domain: Flip logic in cmdSetvcpus (rhbz#1139114)
  - Fix possible memory leak in util/virxml.c (rhbz#1136729)
  - esx_vi: fix possible segfault (rhbz#1136729)
  - sasl: Fix authentication when using PLAIN mechanism (rhbz#1171521)
  - Fix leak in x86UpdateHostModel (rhbz#1144304)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-49
changelog:
  - nwfilter: utility function virNWFilterVarValueEqual (rhbz#1126487)
  - qemu: support live update of an interface's filter (rhbz#1126487)
  - qemu: Update fsfreeze status on domain state transitions (rhbz#1136251)
  - virsh: Fix semantics of --config for "update-device" command (rhbz#1129112)
  - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1125194)
  - qemu: Avoid double serial output with RHEL 6 qemu (rhbz#1162759)
  - storage: Check the partition name against provided name (rhbz#1138523)
  - qemu: Don't unconditionally delete file in qemuOpenFileAs (rhbz#1158036)
  - conf: Don't mangle vcpu placement randomly (rhbz#1170495)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-50
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1186142)
  - network: don't allow multiple portgroups with the same name in a network (rhbz#1115858)
  - build: fix build with latest rawhide kernel headers (rhbz#1198698)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-51
changelog:
  - sanlock: Don't spam logs with "target pid not found" (rhbz#1189414)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1202703)
  - util: more verbose error when failing to create macvtap device (rhbz#1186142)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-52
changelog:
  - qemu: Keep QEMU host drive prefix in BlkIoTune (rhbz#1203633)
  - qemu: Fix name comparison in qemuMonitorJSONBlockIoThrottleInfo() (rhbz#1203633)
  - virsh: fix typos in virsh man page (rhbz#1130835)
  - schemas: Allow all generic elements and attributes for all interfaces (rhbz#1206066)
  - RNG: Allow multiple parameters to be passed to an interface filter (rhbz#1206066)
  - qemu_domain: fix startup policy for disks (rhbz#1203542)
  - Create directory for lease files if it's missing (rhbz#1200991)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1198096)
  - cgroup: Add accessors for cpuset.memory_migrate (rhbz#1198497)
  - qemu: Fix possible crash (rhbz#1198497)
  - qemu: Migrate memory on numatune change (rhbz#1198497)
  - qemu: fix crash when removing <filterref> from interface with update-device (rhbz#1205042)
  - nwfilter: Fix rule priority problem (rhbz#1210183)
  - qemuProcessHook: Call qemuProcessInitNumaMemoryPolicy only when needed (rhbz#1198645)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-53
changelog:
  - RHEL: Avoid memory leak when virCgroupSetCpusetMemoryMigrate fails (rhbz#1198497)
  - qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1198096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54
changelog:
  - util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
  - util: set macvtap physdev online when macvtap is set online (rhbz#1113474)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54.el6_7.1
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1265970)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1265970)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1266039)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1266039)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1266039)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-55
changelog:
  - daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
  - Allow <source> for type=block to have no dev (rhbz#1220197)
  - qemu: event: Properly handle spice events (rhbz#1236581)
  - qemu: event: Clean up VNC monitor handling (rhbz#1236581)
  - qemu: split out cpuset.mems setting (rhbz#1263263)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
  - qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
  - storage: Track successful creation of LV for removal (rhbz#1232170)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-56
changelog:
  - qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
  - qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
  - RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
  - Update ESX driver to always use privateData (rhbz#1213348)
  - esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
  - conf: net: Correctly switch how to format address fields (rhbz#1299700)
  - qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
  - Build all binaries with PIE (rhbz#1242156)
  - Enable full RELRO mode (rhbz#1242156)
  - Don't duplicate compiler warning flags when linking (rhbz#1242156)
  - Simplify RELRO_LDFLAGS (rhbz#1242156)
  - Fix AM_LDFLAGS typo (rhbz#1242156)
  - Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
  - RHEL: Enable RELRO for python modules (rhbz#1242156)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-57
changelog:
  - vmx: Relax virtualHW.version check (rhbz#1300574)
  - qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
  - qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
  - network: Resolve some issues around vlan copying (rhbz#1300843)
  - network: fix connections count in case of allocate failure (rhbz#1300843)
  - network: consolidate connection count updates for device pool (rhbz#1300843)
  - network: consolidated info log for all network allocate/free operations (rhbz#1300843)
  - util: increase libnl buffer size (rhbz#1276478)
  - util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
  - util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: add missing newline (rhbz#1276478)
  - util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
  - util: report the MAC address that couldn't be set (rhbz#1276478)
  - util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
  - bitmap: add way to find next clear bit (rhbz#1276478)
  - Introduce virBitmapIsBitSet (rhbz#1276478)
  - util: Introduce flags field for macvtap creation (rhbz#1276478)
  - virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
  - util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-61
changelog:
  - virsh: Properly display block job type (rhbz#1326653)
  - spec: proper soft static allocation of qemu uid (rhbz#1351792)
  - Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
  - tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
  - configure: allow setting default TLS priority string (rhbz#1333415)
  - rpc: allow priority string to be passed to TLS context (rhbz#1333415)
  - libvirtd: add config option for TLS priority (rhbz#1333415)
  - remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
  - Pass config file object through to driver open methods (rhbz#1333415)
  - remote: allow TLS priority to be customized (rhbz#1333415)
  - qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62
changelog:
  - qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
  - migration: add support for migrateURI configuration (rhbz#1347389)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62.el6_9.1
changelog:
  - util: Implement virFileReadHeaderFD (CVE-2017-5715)
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-63
changelog:
  - qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-64
changelog:
  - cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
  - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-64.el6_10.1
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j4
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j12
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 0.8.7-18.0.1.el6
changelog:
  - Replace docs/et.png in tarball with blank image
  - display check part in specfile for the build failure in mock environment


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.4
changelog:
  - stream: Avoid use-after-free (rhbz#749531)
  - storage: Avoid memory leak (rhbz#749531)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#749531)
  - qemu: Avoid memory leaks (rhbz#749531)
  - storage: Plug iscsi memory leak (rhbz#749531)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-20.el6
changelog:
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747516)
  - storage: Plug iscsi memory leak (rhbz#747516)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.1
changelog:
  - nwfilter: Avoid failure with noexec /tmp (rhbz#754182)
  - nwfilter: Simplify execution of ebiptables scripts (rhbz#754182)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.2
changelog:
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk type='lun' for bus='virtio' (rhbz#768469)
  - network: Don't add iptables rules for externally managed networks (rhbz#769674)
  - schema: Rewrite seclabel rng to match code (rhbz#770958)
  - seclabel: Refactor existing domain_conf usage (rhbz#770958)
  - seclabel: Move seclabel stuff earlier (rhbz#770958)
  - seclabel: Extend XML to allow per-disk label overrides (rhbz#770958)
  - seclabel: Allow a seclabel override on a disk src (rhbz#770958)
  - seclabel: Honor device override in selinux (rhbz#770958)
  - esx: Support vSphere 5.x (rhbz#759061)
  - conf: Introduce optional startupPolicy attribute for cdrom and floppy (rhbz#769853)
  - util: Create virFileAccessibleAs function (rhbz#769853)
  - qemu: Move device alias assigning before command line construction (rhbz#769853)
  - qemu: Implement startupPolicy (rhbz#769853)
  - startupPolicy: Emit event on disk source dropping (rhbz#769853)
  - util: Add virFileAccessibleAs to private symbols (rhbz#769853)
  - qemu: Fix race between async and query jobs (rhbz#770955)
  - Require avahi as an rpm dependancy (rhbz#770957)
  - qemu: Rework handling of shutdown event (rhbz#770959)
  - qemu: Don't release network actual device twice (rhbz#770961)
  - Remove a static limit on max domains in python bindings (rhbz#770966)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.4
changelog:
  - seclabel: Fix regression in libvirtd restart (rhbz#770958)
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk device='lun' for bus='virtio' & type='block' (rhbz#768469)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.5
changelog:
  - virCommand: Properly handle POLLHUP (rhbz#783453)
  - virCommandProcessIO(): Make poll() usage more robust (rhbz#783453)
  - qemu: Fix seamless spice migration (rhbz#787620)
  - build: Don't require avahi during install (rhbz#790779)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#787620)
  - qemu: Introduce inactive PCI device list (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.6
changelog:
  - fix a regression introduced in previous build when detaching devices
  - qemu: Honor the original properties of PCI device when detaching (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.7
changelog:
  - libvirtd: Create run dir when running at non-root user (rhbz#798177)
  - logging: Do not log timestamp through syslog (rhbz#798906)
  - logging: Add date to log timestamp (rhbz#798906)
  - Fix off-by-one printing month in logging code (rhbz#798906)
  - Add internal APIs for dealing with time (rhbz#798906)
  - Make logging async signal safe wrt time stamp generation (rhbz#798906)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.8
changelog:
  - qemu: Add support for domain cleanup callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#806206)
  - qemu: Add connection close callbacks (rhbz#806206)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#806206)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.9
changelog:
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#826639)
  - Avoid closing uninitialized fd (rhbz#827047)
  - Avoid fd leak (rhbz#827047)
  - command: Avoid double close bugs (rhbz#827047)
  - fdstream: Avoid double close bug (rhbz#827047)
  - command: Check for fork error before closing fd (rhbz#827047)
  - qemu: Avoid closing fd more than once (rhbz#827047)


author: Ian Main <imain@redhat.com> 0.2.22-1
changelog:
  - Fix init script to return 2 when invoked with no arguments and add try-restart
    to usage list.  Resolves: #570492


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-1
changelog:
  - Change package name from libvirt-qpid to libvirt-qmf
  - Convert to QMFv2 API
  - Make libvirt-qmf a matahari agent
    Resolves: #688200
    Related: #688194


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: Ian Main <imain@redhat.com> - 0.2.19-1
changelog:
  - Updates to work with API changes in new qpid release, move to upstream codebase. 
    Resolves: #592851


author: Ian Main <imain@redhat.com> - 0.2.21-1
changelog:
  - Misunderstanding of the 'index' keyword was making all objects have the same 
    id. Resolves: #596682


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Stepan Kasal <skasal@redhat.com> - 0.9.7-4
changelog:
  - repack the tarball, there are .jar files without any source
  - do not BR findutils, they are guaranteed in Fedora mock
  - fix obsolete, so that it covers only packages created before this
    spec was added to Fedora


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7
changelog:
  - Revert CVE-2011-0904 and CVE-2011-0905 patch because libvncserver is not
    vulnerable (bug #696767)


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157668)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157668)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157668)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157668)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157668)


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2-0.1.rc1
changelog:
  - New release candidate
  - Improvements to spelling suggestions, grammar checker etc.
  - Libvoikko now uses its own internal implementation of malaga.
  - This prevents symbol conflicts such as https://bugzilla.redhat.com/502546
  - BuildRequires malaga removed and glib2-devel added.
  - Require malaga-suomi-voikko >= 1.4, libvoikko 2.2 expects the newer
    dictionary format
  - Add a patch to make it compile on Fedora with -Werror


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2.2-1
changelog:
  - Version 2.2.2 fixes a crash found in version 2.2.1 that can occur when the
    APIs that use wchar_t strings as arguments are used.


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-5
changelog:
  - Mark data subpackage as noarch and make it a requirement for libwacom
  - Use generated udev rule file to list only known devices from libwacom
    database


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-8
changelog:
  - Update udev rule automatically from the libwacom database entries
  - Update database for Bamboo Pen and Touch styli


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-16
changelog:
  - I wrote it and still had to check the headers to see if I had
    cut and pasted "and later" into then


author: Ville Skyttä <ville.skytta at iki.fi> - 0.2.8.4-18
changelog:
  - Split libwmflite (WMF parser) into -lite subpackage (#432651).
  - Build with dependency tracking disabled.
  - Convert docs to UTF-8.


author: Ondrej Vasik <ovasik@redhat.com> - 4.6-2
changelog:
  - add build requires for dbus-devel, build with libdbus-1.so
    (#479144)
  - fix multilib issue with wvautoconf.h(#508418)


author: Ondrej Vasik <ovasik@redhat.com> - 4.6-6
changelog:
  - build correctly with newer glibc-headers and newer gcc
    (#558912)
  - add comments, fix few merge review issues


author: parag <paragn@fedoraproject.org> - 1.0.4-4
changelog:
  - Merge-Review #226077
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS README file


author: Rex Dieter <rdieter@fedoraproject.org> - 4.0-2
changelog:
  - %files: track files closer, esp lib sonames
  - %build: drop --disable-doxygen, add --disable-static, add %{?_smp_mflags}


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Tianyue Lan <tianyue.lan@oracle.com> - 2.7.6-12.0.1.el6_4.1
changelog:
  - Update doc/redhat.gif in tarball 
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: Tianyue Lan <tianyue.lan@oracle.com> - 2.7.6-14.0.1.el6
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-4.el6_2.1
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771913


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-8.el6_3.1
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843741)
  - Fix entities local buffers size problems (rhbz#843741)
  - Fix an error in previous commit (rhbz#843741)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843741)
  - Impose a reasonable limit on comment size (rhbz#843741)
  - Impose a reasonable limit on PI size (rhbz#843741)
  - Cleanups and new limit APIs for dictionaries (rhbz#843741)
  - Introduce some default parser limits (rhbz#843741)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843741)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843741)
  - More avoid quadratic behaviour (rhbz#843741)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843741)
  - More fixups on the push parser behaviour (rhbz#843741)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Sebastian Vahl <fedora@deadbabylon.de> 0.8-3
changelog:
  - require pkgconfig in devel subpkg
  - move api description to devel subpkg
  - keep timestamps in %install
  - avoid lib64 rpaths


author: Ondrej Vasik <ovasik@redhat.com> 0.9.21-14
changelog:
  - texconfig-sys rehash in postun, removal of texhash in post
    and postun(discussed with Jindrich Novy)


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.5.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - update phc2sys service description


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-1.20130625gitfa41be
changelog:
  - update to 20130625gitfa41be
    (#916787, #977258, #910966, #910974, #924041, #966787)
  - improve initial frequency estimation


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-2.20130719git48f4dc
changelog:
  - update to 20130719git48f4dc (#916787, #985531)
  - add man page link for ptp4l.conf
  - update kernel-headers build requirement
  - change default phc2sys options to use -s


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140318git2b099c
changelog:
  - update to 20140318git2b099c (#1067502, #1011022, #1019121, #1004996, #1016356)
  - fix PIE linking (#1094368)
  - include simulation test suite


author: Daniel Borkmann - 1.0.10-6
changelog:
  - Move spec system to apply patches via git-am(1), which makes it more
    convienient for future backports
  - Backport SCTP_GET_ASSOC_STATS support (#908390) and import its dependencies
  - Fix bugs (#855379), (#953383), (#912557) and import its dependencies


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-3.1
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#639414


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Nikola Pajkovsky <npajkovs@redhta.com> - 3.1.1-8
changelog:
  - Resolves: #575757 - Init script: missing force-reload action, script exits with wrong exit code
  - remove one of init scripts from /etc/init.d


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.1.1-10
changelog:
  - Resolves: #616760 - lm_sensors init script missing - regression from beta 1
  - revert "remove one of init scripts from /etc/init.d"


author: Michal Minar <miminar@redhat.com> - 3.1.1-11
changelog:
  - Resolves: #623587 - lm_sensors doesn't find/ load coretemp module automatically
  - Resolves: #768365 - sensors-detect reports error when run without user input
  - coretemp_detect function in sensors-detect updated


author: Michal Minar <miminar@redhat.com> - 3.1.1-16
changelog:
  - Related: #610000
  - fixed requirements among packages
  - spelling corrections of summaries and description


author: Michal Minar <miminar@redhat.com> - 3.1.1-17
changelog:
  - Related: #768365
  - Related: #623587
  - Solves spitting of "uninitialized values" messages occuring on ppc64
    architectures.
  - Added generic detection of Intel CPUs for coretemp module to sensors-detect.


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-3.el5
changelog:
  - fix log4cpp needs rebuild to increase version number to be greater than version
    used in RHEVH branch (502047)


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix
    "stack smashing detected" error on ia64 (513407)


author: Uri Lublin <uril@redhat.com> - 1.0-8.el6
changelog:
  Copy changes done by Tom "spot" Callaway <tcallawa@redhat.com> in Fedora-12:
    - Delete non-free (but freely distributable) snprintf.c under Artistic 1.0
    Copy changes done by Yuval Kashtan <ykashtan@redhat.com> in RHEL-5:
    -   Create a -docs subpackage to resolve a multilib conflict. (502679)
    -   Convert some files from iso-8859-1 to utf8 (makes rpmlint happy).
    -   ExclusiveArch:  x86_64 i386 (513407)
  Related: #549888


author: Uri Lublin <uril@redhat.com> - 1.0-10.el6
changelog:
  Fix rpmlint issues:
      - Added doc files to -devel subpackage
      - Made doc-file api/installdox non-executable
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-11.el6
changelog:
  Fix review comments:
      - removed installdox from -docs sub-package
      - fixed multi-lib/multi-arch issues
        - renamed log4cpp-config according to arch
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-12.el6
changelog:
  Fixed multi-lib/multi-arch issues:
      - Remove date from html-footer (doc/html/api/*)
      - Also in preparation of removing -doc subpackage
  Related: #555835


author: Vivek Lakshmanan <vivekl@redhat.com> 0:1.2.14-3jpp.1
changelog:
  - Upgrade to 1.2.14
  - Modify the categories for the .desktop files so they are only
    displayed under the development/programming menus
  - Resolves: bug 241447


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-10
changelog:
  - fix #604686 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-14
changelog:
  - fix #683622 - add support for ACLs
  - fix #736053 - check for brackets order in config file
  - fix #659705, #659713, #659720 - fixed mistakes in man-page


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-17
changelog:
  - fix #841520 - do not try to change owner of log if it is not needed
  - fix #848131 - fix bad umask value while creating temp file
  - fix #920030 - set SELinux context before compress files creation
  - fix #922169 - remove temp files on error
  - fix #847338 - do not overwrite create directive value by ACL setting
  - fix #847339 - fix race condition between fchmod and acl_set_fd


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-18
changelog:
  - fix #722209 - do not redirect output of logrotate to /dev/null, mark
    logrotate.conf as config
  - fix #1117189 - sort logs according to dateformat when removing the old one
  - fix #625034 - update logrotate.status atomically
  - fix #984965 - fix possible overflow in "create" directive parsing
  - fix #1012485 - use permissions 0700 for cron.daily script


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Karel Zak <kzak@redhat.com> 4.80-1
changelog:
  - upgrade to 4.80
    - lsof_4.78C-inode.patch - merged upstream
    - lsof_4.78C-selinux.patch - merged upstream
    - lsof_4.78C-threads.patch - rebased


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Dan Horák <dhorak@redhat.com> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)
  - Resolves: #589327, #589860


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - Patch from James M. Leddy, fixes interaction of -c and -o
  - Fix compilation by using -D_LARGEFILE64_SOURCE
  - related: #447404


author: Petr Machata <pmachata@redhat.com> - 0.5-15.45svn.1
changelog:
  - Bring over patches from RHEL 5
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Resolves: #528466


author: Petr Machata <pmachata@redhat.com> - 0.5-18.45svn
changelog:
  - Add patches for tracing multi-threaded processes
  - Resolves: #742340
  - Add a patch for tracing calls made from dlopened libraries
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-19.45svn
changelog:
  - Add a patch to fix two coverity citations
  - Resolves: #805198
  - Fix a bug in multi-threaded support (ltrace-0.5-pass-leader.patch)
  - Update man page (ltrace-0.5-dlopen-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-20.45svn
changelog:
  - Fix dlopen support when dynamic linker is not prelinked
    (ltrace-0.5-dlopen-double-bias.patch)
  - Fix unexpected breakpoint messages appearing after exec
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-22.45svn
changelog:
  - Bias shoud be applied to address read from .opd only if that address
    wasn't yet resolved by the dynamic linker
    (ltrace-0.5-dlopen-opd-bias.patch)
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-23.45svn
changelog:
  - Fix the case that a breakpoint is reported by SIGILL instead of
    SIGTRAP, and DECR_PC_AFTER_BREAK is non-zero, as is the case on
    s390 (ltrace-0.5-s390x-sigill.patch)
  - Fix detach from sleeping process (ltrace-0.5-sigint.patch)
  - Resolves: #738254
  - Fix attach test case, patch courtesy of
    Edjunior Barbosa Machado <emachado@br.ibm.com>
    (ltrace-0.5-fix-testcase-attach-process.patch)
  - Resolves: #811088
  - Fix tracing return from functions called using a plain branch
    instead of library call (ltrace-0.5-ppc64-linked-calls.patch)
  - Add a patch for single-stepping over a lwarx/ldarx instruction
    (ltrace-0.5-ppc64-atomic-skip.patch)
  - Resolves: #811184
  - Adjust the code to avoid some warnings (ltrace-0.5-warnings.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-25.45svn
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.5-account_execl.patch)


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-9
changelog:
  - Fix bz600027 (Fix cluster service creation/configuration UX issues)
  - Fix bz600040 (Add nodes to existing cluster does not work)
  - Fix bz600045 (Removing nodes from existing clusters fails)
  - Fix bz600055 ("cluster busy" dialog does not work)
  - Fix bz613868 (Remove fence_virsh from luci UI since this fence is not supported with RHEL HA/Cluster)
  - Fix bz614434 (adding an IP resource ends with an error 500)
  - Fix bz614439 (adding GFS2 resource type in RHEL6 cluster is "interesting")
  - Fix bz615096 (Traceback when unchecking "Prioritized" in Failover Domains)
  - Fix bz615468 (When creating a new failover domain, adding nodes has no effect)
  - Fix bz615872 (unicode error deleting a cluster)
  - Fix bz615889 (luci cannot start an imported cluster)
  - Fix bz615911 (luci shows many unsupported fence devices when adding a new fence device)
  - Fix bz615917 (adding per node fence instance results in error 500 if no fence devices are configured)
  - Fix bz615929 (luci generated cluster.conf with fence_scsi fails to validate)
  - Fix bz616094 (Deleting a fence device which is in use, causes a traceback on Nodes page)
  - Fix bz616228 (Clicking on cluster from manage clusters page results in traceback (500 error))
  - Fix bz616230 (Clicking on the join button doesn't work on nodes page)
  - Fix bz616244 (Clicking on the leave button doesn't work on nodes page.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-10
changelog:
  - Additional fixes for bz600027 (Fix cluster service creation/configuration UX issues)
  - Additional fixes for bz600055 ("cluster busy" dialog does not work)
  - Fix bz618424 (Can't remove nodes in node add dialog or create cluster dialog)
  - Fix bz616382 (luci db error removing a node from a cluster)
  - Fix bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-11
changelog:
  - Fix bz614433 (cannot configure ipport for fence agents)
  - Fix bz617575 (Unclear options when configuring a cluster)
  - Fix bz617591 (Some fields when adding an IP address are unclear)
  - Fix bz617602 (Fields in "Fence Daemon Properties" have no units)
  - Fix bz618577 (wrong message displayed when adding ip resource)
  - Fix bz619220 (Luci does extra queries which slows down page load)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-12
changelog:
  - Fix bz615926 (luci does not handle qdisk / cman config correctly)
  - Fix bz619220 (Luci does extra queries which slows down page load)
  - Fix bz619652 (luci sometimes prints a traceback when deleting multiple nodes at the same time)
  - Fix bz619641 (luci init script prints a python traceback when status is queried by a non-root user)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-13
changelog:
  - Remove extra debugging logging from the fix for bz619220
  - Fix bz614130 (implement tomcat6 resource agent)
  - Fix bz618578 (ip resource should have netmask field)


author: Lon Hohberger <lhh@redhat.com> - 0.22.2-14
changelog:
  - Randomize secret key in who.ini on each installation.
    Specfile patch from Jan Pokorny.
  - Resolves: rhbz#626415


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-10
changelog:
  - Fix possible exception path in the luci cluster model object related to bz624558 (replace broadcast option with udpu)
  - Correct duplication of the fence brocade menu item in the fence devices section related to bz681506 (readd urgently fence_brocade to the list of shipped fence_agents in luci)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-11
changelog:
  - Additional fix for bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-12
changelog:
  - Fix bz617587 (Luci doesn't display underlying errors)
  - Fix bz617586 (Implement progress dialog for long-running operations)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-13
changelog:
  - More fixes for bz617586 (Implement progress dialog for long-running operations)
  - More fixes for bz616239 (Need option to completely destroy cluster)
  - More fixes for bz557234 ([RFE] luci update to handle private network/hostnames for cluster create/config)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-25
changelog:
  - Fix bz733084 (Cleared options are not saved correctly in Virtual Machine services)
  - Additional fixes for bz522005


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-28
changelog:
  - Make sure cluster permission database objects are created properly
    after a cluster is destroyed, then recreated.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-29
changelog:
  - Add a note about the implications of creating, deleting, and editing
    service groups on the admin page.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-30
changelog:
  - Additional fix for bz639121 (Lightbox dialog state is not reset when the dialog is closed)
  - Additional fix for bz718355 (Logging feature in Luci not working as expected)
  - Additional fix for bz599074 ("Use same password for all nodes" doesn't work.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-31
changelog:
  - Additional fix for bz705884 (luci chokes on working cluster.conf line)
  - Fix to mitigate SELinux issues (bz737635)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-38
changelog:
  - luci: Make pop-up messages act like static status messages
    Resolves: rhbz#773491
  - luci: Fix uncaught exception
    luci: Fix for tracebacks when no nodes can be contacted
    Resolves: rhbz#878149
  - luci: Don't let anonymous users access the preferences page
    Resolves: rhbz#878960
  - luci: Fix garbled error messages
    Resolves: rhbz#880363
  - luci: Add support for fence device attributes
    Resolves: rhbz#883008
    Resolves: rhbz#917743


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-39
changelog:
  - luci: Make pop-up messages act like static status
    Resolves: rhbz#773491
  - luci: Add support for fence_scsi 'delay' attribute
    Resolves: rhbz#883008
  - Enable the ricci and modclusterd services when creating a
    Resolves: rhbz#886517
  - luci: Remove useless "remove this instance" button
    Resolves: rhbz#886576
  - luci: Add support for missing fence devices
    Resolves: rhbz#917747
  - luci: Ask for confirmation when removing a cluster
    Resolves: rhbz#917814
  - luci: Update Oracle agent configuration
    Resolves: rhbz#983693


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-41
changelog:
  - Default syslog facility is "local4" (not "daemon")
    Resolves: rhbz#896244
  - Fix cluster_version mismatch upon adding 2+ nodes
    Resolves: rhbz#978479
  - Fix luci not running after /etc/init.d/luci reports that it has started
    Resolves: rhbz#877999


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-42
changelog:
  - module_name parameter for fence_drac5 is optional, not required
    Resolves: rhbz#1001835
  - fence_ilo denoted as HP iLO / iLO2, but the latter has a separate entry
    Resolves: rhbz#1001836


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-43
changelog:
  - Fix short exposure of authentication details while generating configuration file
    Resolves: rhbz#1005385 (part 1)
  - Fix hidden untrusted path and "command" (callable association) injection
    Resolves: rhbz#1005385 (part 2)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-46
changelog:
  - Do not propagate "unfencing" verbatim to configuration
    Resolves: rhbz#883008
  - Add a guard to enforce code validity during compilation phase
    Related: rhbz#883008


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-48
changelog:
  - Postpone fix for luci not running after reportedly started due to missed corner-case
    Related: rhbz#877999


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-55
changelog:
  - Fine-tune update-downgrade-uninstall scriptlets as changed in rhbz#991575 fix
    and modify new suggested value in sysconfig file
    Related: rhbz#991575


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-56
changelog:
  - luci: Update the fence_kdump config forms
    Resolves: rhbz#918795
  - luci: Move sort arrows for resources
    Resolves: rhbz#919225
  - luci: Cope better with editing services containing VM
    Resolves: rhbz#1100817
  - luci: Add support for the bind-mount resource
    luci: Update fence_brocade
    luci: Add support for the reboot_on_pid_exhaustion
    luci: Remove mention of fenced skip_undefined
    luci: Add support for the postgres-8 startup_wait attr
    luci: Add the ssh_options attribute to applicable fence
    luci: Add support for the no_kill attribute of the VM
    luci: Add support for the use_findmnt attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-57
changelog:
  - Fix luci unable to handle node name ending with recognized filetype extension
    Resolves: rhbz#999324
  - Add a custom luci launcher allowing sane Python runtime + SELinux coexistence
    Resolves: rhbz#1026374
  - Fix privilege escalation through cluster with specially crafted configuration
    Resolves: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-59
changelog:
  - luci: Allow & in XML attribute values
    Resolves: rhbz#855112
  - luci: Fix positioning of sort arrows
    Resolves: rhbz#919225
  - luci: Allow nfsclient to be a child of nfsserver
    Resolves: rhbz#919243
  - luci: Remove bad default values for startup_wait and
    luci: Remove ssh_options fields from fence agents that do
    luci: Support newly added bind-mount "name" attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-61
changelog:
  - Resolve newly introduced issue with doubled Edit Fence Instance forms
    Related: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-62
changelog:
  - luci: Fix editing services that VM references
  - luci: Fix error in fence_lpar form
    luci: Fix issues with bind-mount resource name display
    Resolves: rhbz#1117398


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-65
changelog:
  - luci: Add a cancel button to the services add resource dialog
    Resolves: rhbz#886526
  - luci: Add support for miss_count_const
    Resolves: rhbz#917761
  - luci: Add support for rrp_problem_count_threshold
    Resolves: rhbz#917773
  - Luci: Indicate that shutdown_wait is ignored for postgres8 resources
    Resolves: rhbz#917781
  - luci: Add support for the fence_apc cmd_prompt attr
    Resolves: rhbz#1010400
  - luci: Don't let the add resource button disappear after adding a VM
    Resolves: rhbz#1100831


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-66
changelog:
  - luci: Add expand and collapse buttons for services
    Resolves: rhbz#919223
  - luci: Add a "stop" service action in expert mode
    Resolves: rhbz#1111249
  - luci: Don't lose nfsserver "nfspath" when not in expert mode
    Resolves: rhbz#1112297


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-68
changelog:
  - luci: Add expand/collapse buttons for each inline resource
    Resolves: rhbz#919223
  - luci: Preserve expert mode resource attributes when editing service groups
    Resolves: rhbz#1112297
  - luci: Warn when config can't be set or activated
    Resolves: rhbz#1136456
  - luci: Update fence_virt / fence_xvm labels
    Resolves: rhbz#1204910


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-1
changelog:
  -  o Features/Extensions/Additions:
  - Add DM_ABORT_ON_INTERNAL_ERRORS env var support to abort on internal errors.
  - Verify clvmd message validity before processing and log error if incorrect.
  - Add initial support thin pool lvconvert --repair.
  - Add support for poolmetadataspare LV, that will be used for pool recovery.
  - Improve activation order when creating thin pools in non-clustered VG.
  - Add lvm2-activation-net systemd unit to activate LVs on net-attached storage.
  - Automatically flag thin snapshots to be skipped during activation.
  - Add support for persistent flagging of LVs to be skipped during activation.
  - Make selected thinp settings customizable by a profile.
  - Support storing profile name in metadata for both VGs and LVs.
  - Add support for configuration profiles.
  - Add support for thin volumes in vgsplit.
  - Require 1.9 thin pool target version for online thin pool metadata resize.
  - Add lvresize support for online thin pool metadata volume resize.
  - Add detection for thin pool metadata resize kernel support.
  - Add vg->vg_ondisk / lv_ondisk() holding committed metadata.
  - Add detection of mounted fs also for vgchange deactivation.
  - Avoid a global lock in pvs when lvmetad is in use.
  - Detect maximum usable size for snapshot for lvresize.
  - Improve RAID kernel status retrieval to include sync_action/mismatch_cnt.
  - Add external origin support for lvcreate.
  - Support automatic config validation.
  - Add PV header extension: extension version, flags and bootloader areas.
  - Initial support for lvconvert of thin external origin.
  - Improve activation code for better support of stacked devices.
  - vgimport '--force' now allows import of VGs with missing PVs.
  - Allow removal or replacement of RAID LV components that are error segments.
  - Make 'vgreduce --removemissing' able to handle RAID LVs with missing PVs.
  - Add lvconvert support to swap thin pool metadata volume.
  - Allow vgcfgrestore of lvm2 metadata with thin volumes if --force is used.
  - Give precedence to EMC power2 devices with duplicate PVIDs.
  - Recognise Storage Class Memory (IBM S/390) devices in filter.
  - Recognise STEC skd devices in filter.
  - Recognise Violin Memory vtms devices in filter.
  - Support discards for non-power-of-2 thin pool chunks.
  - Automatically restore MISSING PVs with no MDAs.
  - Support allocation of pool metadata with lvconvert command.
  - Detect mounted fs also via reading /proc/self/mountinfo.
  -  o Command Interface/Options:
  - Support ARG_GROUPABLE with merge_synonym (for --raidwritemostly).
  - Add --ignoreactivationskip to lvcreate/vgchange/lvchange to ignore skip flag.
  - Add --setactivationskip to lvcreate/lvchange to set activation skip flag.
  - Add --type profilable to lvm dumpconfig to show profilable config settings.
  - Add --mergedconfig to lvm dumpconfig for merged --config/--profile/lvm.conf.
  - Support changing VG/LV profiles: vgchange/lvchange --profile/--detachprofile.
  - Add new --profile command line arg to select a configuration profile for use.
  - For creation of snapshot require size for at least 3 chunks.
  - Do not accept size parameters bigger then 16EiB.
  - Accept --yes in all commands so test scripts can be simpler.
  - Add lvcreate/lvchange --[raid]{min|max}recoveryrate for raid LVs.
  - Add lvchange --[raid]writemostly/writebehind support for RAID1
  - Add lvchange --[raid]syncaction for scrubbing of RAID LVs.
  - Add --validate option to lvm dumpconfig to validate current config on demand.
  - Add --ignoreadvanced and --ignoreunsupported switch to lvm dumpconfig.
  - Add --withcomments and --withversions switch to lvm dumpconfig.
  - Add --type {current|default|missing|new} and --atversion to lvm dumpconfig.
  - Add --bootloaderareasize to pvcreate and vgconvert to create bootloader area.
  - Do not take a free lv name argument for lvconvert --thinpool option.
  - Allow lvconvert --stripes/stripesize only with --mirrors/--repair/--thinpool.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Support use of option --yes for lvchange --persistent.
  - Fix clvmd support for option -d and properly use its argument.
  -  o Reporting:
  - Issue an error msg if lvconvert --type used incorrectly with other options.
  - Use LOG_DEBUG/ERR msg severity instead default for lvm2-activation-generator.
  - Add LV report fields: raid_mismatch_count/raid_sync_action/raid_write_behind.
  - Add LV reporting fields raid_min_recovery_rate, raid_max_recovery_rate.
  - Add sync_percent as alias for copy_percent LV reporting field.
  - Add lv_ prefix to modules reporting field.
  - Use units B or b (never E) with no decimal places when displaying sizes < 1k.
  - List thin-pool and thin modules for thin volumes.
  - Add 's(k)ip activation' bit to lvs -o lv_attr to indicate skip flag attached.
  - Improve error loging when user tries to interrupt commands.
  - Add vgs/lvs -o vg_profile/lv_profile to report profiles attached to VG/LV.
  - Report lvs volume type 'e' with higher priority.
  - Report lvs volume type 'o' also for external origin volumes.
  - Report lvs target type 't' only for thin pools and thin volumes.
  - Add "active" LV reporting field to show activation state.
  - Add "monitor" segment reporting field to show dmevent monitoring status.
  - Add explicit message about unsupported pvmove for thin/thinpool volumes.
  - Add pvs -o pv_ba_start,pv_ba_size to report bootloader area start and size.
  - Fix pvs -o pv_free reporting for PVs with zero PE count.
  - Report blank origin_size field if the LV doesn't have an origin instead of 0.
  - Report partial and in-sync RAID attribute based on kernel status
  - Log output also to syslog when abort_on_internal_error is set.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Report error for nonexisting devices in dmeventd communication.
  - Reduce some log_error messages to log_warn where we don't fail.
  -  o Configuration:
  - Add lvm.conf thin_repair/dump_executable and thin_repair_options.
  - Add activation/auto_set_activation_skip to control activation skip flagging.
  - Add default.profile configuration profile and install it on make install.
  - Add config/profile_dir to set working directory to load profiles from.
  - Use mirror_segtype_default if type not specified for linear->mirror upconvert.
  - Refine lvm.conf and man page documentation for autoactivation feature.
  - Override system's global_filter settings for vgimportclone.
  - Find newest timestamp of merged config files.
  - Add 'config' section to lvm.conf to set the way the LVM configuration is handled.
  - Add global/raid10_segtype_default to lvm.conf.
  - Accept activation/raid_region_size in preference to mirror_region_size config.
  - Add log/debug_classes to lvm.conf to control debug log messages.
  - Allow empty activation/{auto_activation|read_only|}_volume_list config option.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvm.conf thin pool allocation settings thin_pool_{chunk_size|discards|zero}.
  - Relax ignore_suspended_devices to read from mirrors that don't have a device marked failed.
  -  o Documentation:
  - Add man page entries for profile configuration and related options.
  - Document lvextend --use-policies option in man.
  - Improve lvcreate, lvconvert and lvm man pages.
  -  o API/interfaces:
  - liblvm/python API: Additions: PV create/removal/resize/listing
  - liblvm/python API: Additions: LV attr/origin/Thin pool/Thin LV creation
  - Fix exported symbols regex for non-GNU busybox sed.
  - Add LV snapshot support to liblvm and python-lvm.
  - Fix lvm2app to return all property sizes in bytes (not sectors).
  - Fix lvm2app and return lvseg discards property as string.
  - Remove python liblvm object. systemdir can only be changed using env var now.
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Add dm_get_status_snapshot() for parsing snapshot status.
  - Append discards and read-only fields to exported struct dm_status_thin_pool.
  - Validate passed params to dm_get_status_raid/thin/thin_pool().
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add dm_mountinfo_read() for parsing /proc/self/mountinfo.
  - Add dm_config_write_{node_out/one_node_out} for enhanced config output.
  - Add dm_config_value_is_bool to check for boolean value in supported formats.
  - Add DM_ARRAY_SIZE public macro.
  - Add DM_TO_STRING public macro.
  - Implement ref-counting for parents in python lib.
  -  o Fixes (general):
  - Create dmeventd timeout threads as "detached" so exit status is freed.
  - Fix inability to remove a VG's cluster flag if it contains a mirror.
  - Suppress arg: prefix in log_sys_error macro when arg is empty string.
  - Fix bug making lvchange unable to change recovery rate for RAID.
  - Prohibit conversion of thin pool to external origin.
  - When creating PV on existing LV don't forbid reserved LV names on LVs below.
  - When converting mirrors, default segtype should be the same unless specified.
  - Add pipe_open/close() to use instead of less efficient/secure popen().
  - Ignore previous LV seg with alloc contiguous & cling when num stripes varies.
  - Do not zero init 4KB of thin snapshot for non-zeroing thin pool (2.02.94).
  - Correct thin creation error paths.
  - Add whole log_lv and metadata_lv sub volumes when creating partial tree.
  - Properly use snapshot layer for origin which is also thin volume.
  - Avoid generating metadata backup when calling update_pool_lv().
  - Send thin messages also for active thin pool and inactive thin volume.
  - Avoid creation of multiple archives for one command.
  - Avoid flushing thin pool when just requesting transaction_id.
  - Fix use of too big chunks of memory when communication with lvmetad.
  - Also filter partitions on mpath components if multipath_component_detection=1.
  - Do not use persistent filter with lvmetad.
  - Move syslog code out of signal handle in dmeventd.
  - Fix lvresize --use-policies of VALID but 100% full snapshot.
  - Skip monitoring of snapshots that are already bigger then origin.
  - Refuse to init a snapshot merge in lvconvert if there's no kernel support.
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Fix premature DM version checking which caused useless mapper/control access.
  - Fix creation and removal of clustered snapshot.
  - Fix clvmd caching of metadata when suspending inactive volumes.
  - Fix lvmetad error path in lvmetad_vg_lookup() for null vgname.
  - Fix clvmd _cluster_request() return code in memory fail path.
  - Fix vgextend to not allow a PV with 0 MDAs to be used while already in a VG.
  - Fix PV alignment to incorporate alignment offset if the PV has zero MDAs.
  - Fix missing cleanup of flags when the LV is detached from pool.
  - Fix check for some forbidden discards conversion of thin pools.
  - Fix blkdeactivate to handle nested mountpoints and mangled mount paths.
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Unlock vg mutex in error path when lvmetad tries to lock_vg.
  - Detect key string duplication failure in config_make_nodes_v in libdaemon.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - When no --stripes argument is given when creating a RAID10 volume, default to 2 stripes.
  - Do not allow lvconvert --splitmirrors on RAID10 logical volumes.
  - Skip mlocking [vectors] on arm architecture.
  - Repair a mirrored log before the mirror itself when both fail.
  - Don't use lvmetad in lvm2-monitor.service ExecStop to avoid a systemd issue.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid trying to read a mirror that has a failed device in its mirrored log.
  - Fix 'dmsetup splitname -o' to not fail if used without '-c' switch (1.02.68).
  - Fix segfault for truncated string token in config file after the first '"'.
  - Fix config node lookup inside empty sections to not return the section itself.
  - Fix parsing of 64bit snapshot status in dmeventd snapshot plugin.
  - Always return success on dmeventd -V command call.
  -  o Fixes (segfaults/crashes/deadlocks/races):
  - Fix metadata area offset/size overflow if it's >= 4g and while using lvmetad.
  - Fix segfault if devices/global_filter is not specified correctly.
  - Fix segfault when reporting raid_syncaction for older kernels.
  - Fix vgcfgrestore crash when specified incorrect vg name.
  - Avoid crash-inducing race in lvmetad when VG disappears during rename.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.
  - Check for memory failure of dm_config_write_node() in lvmetad.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Prevent double free error after dmeventd call of _fill_device_data().
  -  o Fixes (resource leaks/memleaks):
  - Fix clogd descriptor leak when daemonizing.
  - Fix clvmd descriptor leak on restart.
  - Release memory allocated with _cached_info().
  - Release memory and unblock signals in lock_vol error path.
  - Fix memory resource leak in memlocking error path.
  - Fix memleak in dmeventd thin plugin in device list obtaining err path.
  - Fix socket leak on error path in lvmetad's handle_connect.
  - Fix memleak on error path for lvmetad's pv_found.
  - Fix memleak in device_is_usable mirror testing function.
  - Fix memory leak on error path for pvcreate with invalid uuid.
  - Fix resource leak in error path of dmeventd's umount of thin volume.
  - Close open dmeventd FIFO file descriptors on exec (FD_CLOEXEC).
  -  o Testing:
  - Fix test for active snapshot in cluster before resizing it.
  - Add python-lvm unit test case
  -  o Other:
  - Require confirmation for vgchange -c when no VGs listed explicitly.
  - Also skip /var and /var/log by default in blkdeactivate when unmounting.
  - Add support for bind mounts in blkdeactivate.
  - Add blkdeactivate -v/--verbose for debug output from external tools used.
  - Add blkdeactivate -e/--errors for error messages from external tools used.
  - Suppress messages from external tools called in blkdeactivate by default.
  - Workaround gcc v4.8 -O2 bug causing failures if config/checks=1 (32bit arch).
  - Add --with-thin-repair and --with-thin-dump configure options.
  - Use local activation for clearing snapshot COW device.
  - Add configure --with-default-profile-subdir to select dir to keep profiles in.
  - Creation of snapshot takes at most 100% origin coverage.
  - Use LC_ALL to set locale in daemons and fsadm instead of lower priority LANG.
  - Remove dependency on fedora-storage-init.service in lvm2 systemd units.
  - Depend on lvm2-lvmetad.socket in lvm2-monitor.service systemd unit.
  - Optimize out setting the same value of read_ahead.
  - Automatically deactivate failed preloaded dm tree node.
  - Process thin messages once to active thin pool target for dm_tree.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  -  o Packaging:
  - Do not include /lib/udev and /lib/udev/rules.d in device-mapper package.
  - Change Source0 link to ftp://sources.redhat.com/pub/lvm2/releases/LVM2.<version>.tgz
  - Fix some incorrect changelog dates.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-2
changelog:
  - Refresh existing VG before autoactivating (event retrigger/device reappeared).
  - Move mpath device filter before partitioned filter (which opens devices).
  - Fix vgck to notice on-disk corruption even if lvmetad is used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-3
changelog:
  - Do not allow passing empty new name for dmsetup rename.
  - Check for exactly one lv segment in validation of thin pools and volumes.
  - Fix dmeventd unmonitoring of thin pools.
  - Fix lvresize for stacked thin pool volumes (i.e. mirrors).
  - Support most of lvchange operations on stacked thin pool meta/data LVs.
  - Disable pvmove of merging or converting logical volumes.
  - Enable pvmove of snapshots and snapshot origins.
  - Fix inability to specify LV name when pvmove'ing a RAID, mirror, or thin-LV.
  - Add ability to pvmove RAID, mirror, and thin volumes.
  - Avoid unlimited recursion when creating dtree containing inactive pvmove LV.
  - Add man page entries for lvmdump's -u and -l options.
  - Remove "mpath major is not dm major" msg for mpath component scan (2.02.94).
  - Don't assume stdin file descriptor is readable.
  - Write Completed debug message before reinstating log defaults after command.
  - Use pvscan -b in udev rules to avoid a deadlock on udev process count limit.
  - Add pvscan -b/--background for the command to be processed in the background.
  - Direct udev to use 3min timeout for LVM devices. Recent udev has default 30s.
  - Do not scan multipath or RAID components and avoid incorrect autoactivation.
  - Fix MD/loop udev handling to fire autoactivation after setup or coldplug only.
  - Fix ignored lvmetad update on loop device configuration (2.02.99)
  - Fix lvm2app segfault while using lvm_list_pvs_free fn if there are no PVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-4
changelog:
  - Fix RAID calculation for sufficient allocatable space.
  - Conversion from linear to mirror or RAID1 now honors mirror_segtype_default.
  - Fix contiguous & cling allocation policies for parity RAID. (2.02.100)
  - lvconvert no longer converts LVs of "mirror" segment type to thinpool.
  - lvconvert no longer converts thinpool sub-LVs to "mirror" segment type.
  - Make RAID capable of single-machine exclusive operations in a cluster.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-5
changelog:
  - Fix failing metadata repair when lvmetad is used.
  - Fix incorrect memory handling when reading messages from lvmetad.
  - Fix locking in lvmetad when handling the PV which is gone.
  - Fix lvconvert when converting to a thin pool and thin LV at once.
  - Recognize new flag to skip udev scanning in udev rules and act appropriately.
  - Add support for flagging an LV to skip udev scanning during activation.
  - Improve message when unable to change discards setting on active thin pool.
  - Add --ignoreskippedcluster for exit status success when clustered VGs skipped.
  - Define symbolic names for subsystem udev flags in libdevmapper for easier use.
  - Make subsystem udev rules responsible for importing DM_SUBSYSTEM_UDEV_FLAG*.
  - Remove extra GOTO jump in lvmetad udev rules causing incorrect lvmetad update.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-6
changelog:
  - Fix lvconvert swap of poolmetadata volume for active thin pool
  - Check for open count with a timeout before removal/deactivation of an LV.
  - Add workaround for deactivation problem of opened virtual snapshot.
  - Report RAID images split with tracking as out-of-sync ("I").
  - Recognise NVM Express devices in filter.
  - Fix possible race while creating/destroying memory pools.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-7
changelog:
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Revert to using devices/obtain_device_list_from_udev=0 by default.
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-1
changelog:
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-2
changelog:
  - Add report/list_item_separator lvm.conf option.
  - Add lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Comment out devices/{preferred_names,filter} in default lvm.conf file.
  - Enhance lvconvert thin, thinpool, cache and cachepool command line support.
  - Display 'C' only for cache and cache-pool target types in lvs.
  - Prompt for confirmation before change LV into a snapshot exception store.
  - Return proper error codes for some failing lvconvert funtions.
  - Add initial code to use cache tools (cache_check|dump|repair|restore).
  - Add --activationmode degraded to activate degraded raid volumes by default.
  - Add separate lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Recognize "auto"/"unmanaged" values in selection for appropriate fields only.
  - Add report/binary_values_as_numeric lvm.conf option for binary values as 0/1.
  - Add --binary arg to pvs,vgs,lvs and {pv,vg,lv}display -C for 0/1 on reports.
  - Add separate reporting fields for each each {pv,vg,lv}_attr bit.
  - Separate LV device status reporting fields out of LV fields.
  - Fix regression causing PVs not in VGs to be marked as allocatable (2.02.59).
  - Fix VG component of lvid in vgsplit/vgmerge and check in vg_validate.
  - Add lv_full_name, lv_parent and lv_dm_path fields to reports.
  - Change lv_path field to suppress devices that never appear in /dev/vg.
  - Postpone thin pool lvconvert prompts (2.02.107).
  - Require --yes option to skip prompt to lvconvert thin pool chunksize.
  - Support lvremove -ff to remove thin volumes from broken thin pools.
  - Require --yes to skip raid repair prompt.
  - Change makefile %.d generation to handle filename changes without make clean.
  - Fix use of buildir in make pofile.
  - Enhance private volumes UUIDs with suffixed for easier detection.
  - Do not use reserved _[tc]meta volumes for temporary LVs.
  - Leave backup pool metadata with _meta%d suffix instead of reserved _tmeta%d.
  - Allow RAID repair to reuse PVs from same image that suffered a failure.
  - New RAID images now avoid allocation on any PVs in the same parent RAID LV.
  - Always reevaluate filters just before creating PV.
  - Fix dm_report_field_string_list to handle delimiter with multiple chars.
  - Add dm_report_field_reserved_value for per-field reserved value definition.


author: Alasdair Kergon <agk@redhat.com> - 2.02.108-1
changelog:
  - Add lvscan --cache which re-scans constituents of a particular LV.
  - Make dmeventd's RAID plugin re-scan failed PVs when lvmetad is in use.
  - Improve lvconvert --merge and --splitsnapshot validation.


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.109-2
changelog:
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.1
changelog:
  - Fix configure script to detect that systemd environment is not used and
    generate proper udev rules for lvmetad notification based on this information.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.3
changelog:
  - Fix regression in vgimportclone script that caused failures on
    any duplicate PVs found, hence making the script unusable.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.117-1
changelog:
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-2
changelog:
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Set correct vgid when updating cache when writing PV metadata.
  - Don't silently accept lvcreate -m with raid4/5/6.
  - Add A_PARTITION_BY_TAGS set when allocated areas should not share tags.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-3.el6_7.2
changelog:
  - Fix alloc segfault when extending LV with fewer stripes than in first seg.
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Do not check for suspended devices if scanning for lvmetad update.
  - Fix part. table filter with external_device_info_source="udev" and blkid<2.20.
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Use uninitilized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad vg lookup code.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Clear cached bootloader areas when PV format changed.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().
  - Improve status parsing for thin-pool and thin devices.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Allow for raid leg replacement if not both data and metadata image are on pvs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.68-1
changelog:
  - Have device-mapper-libs require device-mapper (circular) for udev rules.
  - Clear exec_prefix.
  - Use early udev synchronisation and update of dev nodes for clustered mirrors.
  - Fix udev rules to handle spurious events properly.
  - Add lv_path to reports to offer full /dev pathname.
  - Avoid abort when generating cmirror status.
  - Fix clvmd initscript status to print only active clustered LVs. 
  - Fix segfault in clvmd -R if no response from daemon received.
  - Honour log argument when down-converting stacked mirror.
  - Sleep to workaround clvmd -S race: socket closed early and server drops cmd. 
  - Exit successfully when using -o help (but not -o +help) with LVM reports.
  - Add man pages for lvmconf, dmeventd and non-existent lvmsadc and lvmsar tools.
  - Add --force, --nofsck and --resizefs to lvresize/extend/reduce man pages.
  - Fix lvm2cmd example in documentation.
  - Fix typo in warning message about missing device with allocated data areas.
  - Add device name and offset to raw_read_mda_header error messages.
  - Allow use of lvm2app and lvm2cmd headers in C++ code.
  - Require partial option in lvchange --refresh for partial LVs.
  - Don't merge unchanged persistent cache file before dumping if tool scanned.
  - Avoid selecting names under /dev/block if there is an alternative.
  - Fix clvmd initscript restart command to start clvmd if not yet running.
  - Handle failed restart of clvmd using -S switch properly.
  - Use built-in absolute paths in clvmd (clvmd restart and PV and LV queries).
  - Consistently return ECMD_FAILED if interrupted processing multiple LVs.
  - Add --type parameter description to the lvcreate man page.
  - Document 'clear' in dmsetup man page.
  - Replace strncmp kernel version number checks with proper ones.
  - Update clustered log kernel module name to log-userspace for 2.6.31 onwards.
  - Support autoloading of dm-mod module for kernels from 2.6.35.
  - Add dm_tree_node_set_presuspend_node() to presuspend child when deactivating.
  - Do not fail lvm_init() if init_logging() or _init_rand() generates an errno.
  - Fix incorrect memory pool deallocation while using vg_read for files.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-1
changelog:
  - Add metadata/vgmetadatacopies to lvm.conf.
  - Add --metadataignore to pvcreate and vgextend.
  - Add vg_mda_copies, pv_mda_used_count and vg_mda_used_count to reports.
  - Describe --vgmetadatacopies in lvm.conf and other man pages.
  - Add --[vg]metadatacopies to select number of mdas to use in a VG.
  - Make the metadata ignore bit control read/write metadata areas in a PV.
  - Add pvchange --metadataignore to set or clear a metadata ignore bit. 
  - Refactor metadata code to prepare for --metadataignore / --vgmetadatacopies.
  - Ensure region_size of mirrored log does not exceed its full size.
  - Preload libc locale messages to prevent reading it in memory locked state.
  - Fix handling of simultaneous mirror image and mirrored log image failure.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-2
changelog:
  - Always pass unsuspended dm devices through persistent filter to other filters.
  - Move test for suspended dm devices ahead of other filters.
  - Fix another segfault in clvmd -R if no response from daemon received. (2.02.68)
  - Preserve memlock balance in clvmd when activation triggers a resume.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.1
changelog:
  - Fix usage of --yes flag for ReiserFS resize in fsadm.
  - Fix detection of mounted filesystems for fsadm when udev is used.
  - Fix assignment of default value to LVM variable in fsadm.
  - Fix support for --yes flag for fsadm.
  - Do not execute lvresize with --dry-run option for fsadm.
  - Fix fsadm return error code from user's break action.
  - Revert to old glibc vsnprintf behaviour in emit_to_buffer() to catch overflow.
  - Allocate buffer for metadata tags dynamically to remove 4k limit.
  - Fix the way regions are marked complete to avoid slow --nosync cmirror I/O.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.2
changelog:
  - Fix handling of online filesystem resize (using new fsadm return code).
  - Add DIAGNOSTICS section to fsadm man page.
  - Modify fsadm to return different status code for check of mounted filesystem.
  - Fix memory leak of field_id in _output_field function.
  - Allocate buffer for reporting functions dynamically to support long outputs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.0-2.0.1
changelog:
  - update to upstream 1.0.0
  - update .spec file to align with upstream
  - create /container on install if it doesn't already exist
  - include Oracle template changes for OL7


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.2-2.0.1
changelog:
  - update to upstream 1.0.2
  - include patch for yum update within container
  - run ./autogen to ensure build env automake version is used since aclocal
    from upstream tarball may be too new


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.3-2.0.1
changelog:
  - update to upstream 1.0.3
  - include patch for installing from any repo (ie. OL7 .iso)
  - use db_load from container so we can drop Requires: compat-db43 since
    OL7 doesn't have this package
  - adjust lxc.spec for move of libexecdir/lxc-init to sbin/lxc.init


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.3-2.0.2
changelog:
  - [Orabug 18526838] add back in libcap and libvirt Requires which were
    inadvertantly dropped when updating the .spec file to upstream 1.0


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.5-2.0.2
changelog:
  - add libselinux-devel to BuildRequires so that lxc detects SELinux
    in the build environment and builds support for it


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.7-2.0.2
changelog:
  - [Orabug 20465908] Introduce a workaround for creating btrfs snapshots
    by symlinking /containersnaps to a dir in /container. Snapshots will
    thus be created in the same btrfs. The real fix is upstream commit
    18aa217b, but that is too invasive to backport to 1.0.x.


author: Dwight Engen <dwight.engen@oracle.com> - 1.0.7-2.0.3
changelog:
  - [Orabug 20465908] Go ahead and backport upstream commit 18aa217b.
    The symlink workaround was too hackish. With this change, the lock
    file names in /run/lock/lxc/container change from <name> to .<name>
    but snapshots need <name> to now be a directory so we remove any
    old lock files that might be there in %post.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.08-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a patch to fix asm detection on i386 (bug 145882, 145893). Thanks to
    Carlo Marcelo Arenas Belon <carenas@sajinet.com.pe> for the initial patch.
  - Removed unused build dependency on nasm
  - Remove static lib
  - Cleanup %doc a bit


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.02-0.2
  - rebuilt for new gcc4.1 snapshot and glibc changes
  - build with lzop 1 since lzop 2 hasn't been merged yet


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-7
changelog:
  - fix bz#512798 -  Mailman path in /usr/bin/mailman-update-cfg 
    is incorrect on x86_64.
  - added explanation comment in mailman-update-cfg, to justify
    why this script is needed


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-20
changelog:
  - fix #745409 - do not set Indexes in httpd configuration for public archive
  - fix #1008139 - fix traceback when list_data_dir is not a child of var_prefix


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-23
changelog:
  - fix #1095359 - handle update when some mailing lists have been created
    by newer Mailman than this one


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Petr Machata <pmachata@redhat.com> - 1:3.81-12
changelog:
  - Fix the rlimit patch.  The success flag is kept in memory shared
    with parent process after vfork, and so cannot be reset.
  - Related: #214033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.4-6
changelog:
  - always distribute own ldlinux.sys as well as ldlinux.bss
  - add conditional macro %{new_ldlinux} (default off) to build the package
    with ldlinux.bss and ldlinux.sys taken from some syslinux source directly.
  - Update README.usbboot .


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-1
changelog:
  - New version
  - Drop upstreamed linking patch
  - Re-add a Makefile.in sed build verbosity trick, which was done in the
    dropped patch but not upstream


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-4
changelog:
  - Add patch to change the (un)map_file functions to malaga_(un)map_file,
    there was a symbol conflict with the samba libraries causing a segfault
    if enchant-voikko and evolution-mapi were both installed when using
    Evolution. Bugs rhbz #502546 and sourceforge #2802548, patch by Harri
    Pitkänen.
  - Add defattr to the libmalaga subpackage


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.28.0b41287.git
changelog:
  - Refresh from upstream
  - Local broker is now optional
  - Functional Host, Network and Services (including support for OCF Resources) agents
    Related: rhbz#658828


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.29.0b41287.git
changelog:
  - Update to upstream version 2798d52.git
    + Support password authentication to qpid
    + Prevent errors when matahari is started at boot
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-1
changelog:
  - Split the packaging up, one subpackage per agent 
  - Remove dependancy on qpid-cpp-server-devel
  - Convert agents to the QMFv2 API
  - Rebuild for updated qpid-cpp
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-2
changelog:
  - Add explicit versioned dependancies between relevant sub-packages
  - Avoid the -libs package depending on QMF libraries
  - Fix post and postun scripts for matahari-service
  - Resolves: rhbz#688164 rhbz#692400 rhbz#688197 
  - Resolves: rhbz#674185 rhbz#690587


author: Russell Bryant <rbryant@redhat.com> 0.4.3-1
changelog:
  - Rebase to upstream release 0.4.3
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-1
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Related: rhbz#674578


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Sync with upstream spec file fixes.
  - add man pages (rhbz#737088)
  - fix some sysconfig issues (rhbz#737137)
  - ensure old processes get cleaned up after an upgrade (rhbz#737618)
  - fix agent crash on NULL UUIDs (rhbz#739666)
  - don't list "LSB" as a valid standard on windows (rhbz#739952)
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Russell Bryant <rbryant@redhat.com> 0.4.4-5
changelog:
  - remove hard puppet dependency
  - fix sysconfig agent no response (rhbz#740038)
  - Resolves: rhbz#740038
  - Related: rhbz#737137


author: Russell Bryant <rbryant@redhat.com> 0.4.4-6
changelog:
  - resolve coverity warnings in broker wrapper (rhbz#735426)
  - add validation on sysconfig keys (rhbz#740090)
  - store sysconfig keys in a subdir (rhbz#740091)
  - Resolves: rhbz#740090, rhbz#740091
  - Related: rhbz#735426


author: Russell Bryant <rbryant@redhat.com> 0.4.4-7
changelog:
  - Validate sysconfig keys sooner (rhbz#741965)
  - Add man pages in a patch instead of generating during build (rhbz#737088)
  - Update sigar version dependency (rhbz#737541)
  - Resolves: rhbz#741965, rhbz#737088, rhbz#737541


author: Zane Bitter <zbitter@redhat.com> 0.4.4-9
changelog:
  - Read the CPU features on non-x86 architectures (rhbz#746288)
  - Add daemons to chkconfig after installation (rhbz#746084)
  - Resolves: rhbz#746084
  - Related: rhbz#746288


author: Jeff Peeler <jpeeler@redhat.com> 0.4.4-12
changelog:
  - Do not link to the Qpid client library.
  - Remove unused includes to avoid linking to qpid::sys symbols
    Resolves: rhbz#806766


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fix buildroot
  - Add COPYING license file to docs
  - Added {} braces around % macros
  - Own {_sysconfdir}/matchbox directory
  - Own {_datadir}/matchbox


author: Jindrich Novy <jnovy@redhat.com> 4.6.99-0.20090731git
changelog:
  - update to latest GIT mc
  - forwardport prompt fix and exit patch, keep IPv6 patch and drop the others


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3-0.1
changelog:
  - updated to 1.0pre3
  - added initscript for Predictive Failure Analysis (PFA) which does not
    run by default.


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20101112-0.7
changelog:
  - Updated to 1.0pre3 as of Jul 18 2011/cbd4da48 [BZ 699592]
  - chkconfig mcelogd on by default [BZ 699592]


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20120814_2-0.14
changelog:
  - add /etc/logrotate.d/mcelog file [849252]
  - add chkconfig levels to mcelogd initscript [1006293]
  - fix IvyBridge detection (commits b29cc4d and 2577aeb) [1079360]
  - cleanup .orig and .rej patch files [1059227]
  - add Haswell CPUID 0x3f [1079501]
  - Modify --daemon logic to allow syslog-only output [872387]


author: Prarit Bhargava <prarit@redhat.com> 2:101.0
changelog:
  - Decode MISC register when IO MCA occurs
  - add and fix leaky bucket logging
  - exit with EXIT_SUCCESS (aka 0) when stopped by signal
  - Fix missing handling for flag MCE_GETCLEAR_FLAGS
  - Decode new simple error code number 6
  - introduce new NVR scheme to sync with upstream


author: Prarit Bhargava <prarit@redhat.com> 2:109.1
changelog:
  - updated to upstream 109, brought in previous Haswell and additional fixes
  - add Broadwell support, currently unsupported in kernel


author: Kiyoshi Matsui <kmatsui@t3.rim.or.jp> 2.7.1-1
changelog:
  - Upstream new release.
  - Change to library build.
  - Devide to 4 packages: mcpp, libmcpp, libmcpp-devel and mcpp-doc.
  - Thanks to Mary Ellen Foster for correcting this spec file.


author: Joe Nall <joe@nall.com> 0.3.1-1
changelog:
  - Rewrite translations to allow individual word/category mapping
  - Eamon Walsh's color mapping changes


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, bz617280)
  - Remove mdadm.static as its no longer used in initrd creation
  - Remove glibc-static buildreq
  - Resolves: bz617280


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)
  - Resolves: bz604023


author: Doug Ledford <dledford@redhat.com> - 3.1.3-1
changelog:
  - Update to official 3.1.3 release instead of a git snapshot
  - Add patch for return code in the case that a container is not assembled
    due to insufficient drives (bz622408)
  - Add patch to allow the deprecated --no-degraded option to be passed in,
    just not honored (bz622408)
  - Resolves: bz622408


author: Doug Ledford <dledford@redhat.com> - 3.2-1
changelog:
  - Update to latest upstream release
  - Related: bz633306, bz633667, bz633671, bz633688, bz633690, bz633692
  - Fix mdadm udev rules file
  - Resolves: bz605710
  - Process the Y option
  - Resolves: bz636883


author: Doug Ledford <dledford@redhat.com> - 3.2.1-1
changelog:
  - Update to latest upstream release
  - Don't report mismatch counts on either raid1 or raid10 devices
  - Check both active and idle arrays during raid check runs
  - Move raid-check script to /usr/sbin, add a crontab entry to /etc/cron.d
    and mark it config(noreplace) so that users can select their own
    raid check frequency and it will be preserved across updates
  - Allow the raid check script to set both the cpu and io priority on the
    raid check process in an effort to minimize the impact to users on the
    system
  - Related: bz633306


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1.el6_1.1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz723135, bz723137, bz723139, bz723140,
    bz723141, bz723142)
  - Correct typo in /etc/sysconfig/raid-check file
  - Fix a bug related to readding devices into an array
  - Resolves: bz723135, bz723137, bz723139, bz723140, bz723141, bz723142


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz716413, bz694083, bz694092, bz694103,
    bz694121, bz694779, bz695336, bz702270)
  - Correct typo in /etc/sysconfig/raid-check file (bz708280)
  - Fix a bug related to readding devices into an array (bz706500)
  - Resolves: bz716413, bz694083, bz694092, bz694103, bz694121, bz694779
  - Resolves: bz695336, bz702270, bz708280, bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-2
changelog:
  - When using writemostly on a raid1 array, if you remove a device that
    is readwrite and then readd it, it can end up being listed as writemostly
    if the device used to pull the superblock info from was writemostly.
    Properly clear the writemostly bit when adding/readding a device.
  - Related: bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Be robust when running on a version 3.0 kernel
  - Properly set the default chunk size on orom devices
  - Fix getinfo_super_imsm so a hack in create.c can be dropped
  - Make the output of --detail more accurately communicate the state of
    a device that is waiting on a resync because another resync is
    already running
  - A few tweaks to the man page for mdadm to clarify usage in relation to
    imsm arrays
  - Resolves: bz727216, bz727207, bz727210, bz727212, bz727203


author: Doug Ledford <dledford@redhat.com> - 3.2.2-4
changelog:
  - Minor tweaks to wording in the comments of the /etc/sysconfig/raid-check
    file
  - Resolves: bz708280


author: Doug Ledford <dledford@redhat.com> - 3.2.2-5
changelog:
  - Fix multiple issues in the udev incremental assembly rules file.  We should
    now properly support:
    1) Nested md raid arrays
    2) md raid arrays built on top of dm device (like LUKS encrypted devices)
    3) md raid arrays build on top of dm multipath devices (we should no longer
      attempt to grab the path device instead of waiting for the logical
      multipath device to come live and grabbing it for our md raid usage)
  - Resolves: bz598513, bz609122


author: Doug Ledford <dledford@redhat.com> - 3.2.2-6
changelog:
  - Fix several new coverity issues introduced by changes between the rhel6.1
    and rhel6.2 mdadm package (this does not attempt to address coverity
    issues that also exist in rhel6.1)
  - Resolves: bz734716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-7
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz692261


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-8
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-9
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings. Additional fix being extra cautious from -8.
  - Resolves: bz733153


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - Work around udev sporadically not updating ID_FS_TYPE field of block
    device entry in its database when array is being created.
  - Resolves bz1040006


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Change permissions of /etc/cron.d/raid-check to 600
  - Resolves bz1012505
  - Avoid double close() issue reported by Coverity
  - Resolves bz991041


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-10
changelog:
  - Fix problem of IMSM platform capabilities not being detected in UEFI
    mode when only the second SATA controller is enabled.
  - Resolves bz1075529


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1059307


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-2
changelog:
  - Fix problem with path=* policy not working, due to lack of /dev/disk/by-path/
  - Resolves bz1059193


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Fix problem with reshape of IMSM RAID arrays failing to start
  - Disallow IMSM arrays spanning multiple controllers
  - Fix problem with reshape failing to restart when reassembling IMSM RAID
  - Resolves bz1136880, bz1136891, bz1136903


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.3
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug.
  - Resolves bz1331331


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1347808


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.5
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1348544


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1343809


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-5
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug, which was identified
    during the z-stream backport of this bug.
  - Resolves bz1322317


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-3.el6_8.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Dave Airlie <airlied@redhat.com> 7.7-1
changelog:
  - rebase to 7.7 release - the best base to move forward at this point in time.
  - bump libdrm requires


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-12
changelog:
  - Require gnome-themes rather than nodoka-metacity-theme (rhbz 532455, Stijn Hoop)
  - Add patches for GNOME bugs
     445447 - Application-induced window raise fails when raise_on_click off (rhbz 526045)
     530702 - compiz doesn't start if metacity compositor is enabled (rhbz 537791)
     559816 - Doesn't update keybindings being disabled/cleared (rhbz 473224)
     567528 - Cannot raise windows from applications in Tcl/Tk and Java (rhbz 503522)
     577576 - Failed to read saved session file warning on new sessions (rhbz 493245)
     598231 - When Chromium rings the bell, metacity quits (rhbz 532282)
     598995 - Don't focus ancestor window on a different workspace (rhbz 237158)
     599097 - For mouse and sloppy focus, return to "mouse mode" on motion (rhbz 530261)
     599248 - Add no_focus_windows preference to list windows that shouldn't be focused (rhbz 530262)
     599261 - Add a new_windows_always_on_top preference (rhbz 530263)
     599262 - Add XFCE Terminal as a terminal
     604319 - Handle XError and XIOError for unknown displays (rhbz 537845)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-16
changelog:
  - Add a patch to fix confusion between windows
    Resolves: rhbz 588926
  - Add translation updates
    Resolves: rhbz 589227


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-17
changelog:
  - Add patch to allow breaking out from maximization during mouse resize
    Resolves: rhbz 523520
  - Add patches that tweak behaviors of RHEL 5.5 added GConf preferences
     - apply new_windows_always_on_top to windows that are raised
       or activated but denied focus as well.
     - exclude the current application from the effect of no_focus_windows
       preference
    Resolves: rhbz 607390


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-19
changelog:
  - Fix breaking out from maximization in reduced resources mode; bug
    discovered in testing resulted in mis-positioning in that case.
    Resolves: rhbz 523520


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-20
changelog:
  - Fix cases where unmaximized size wouldn't be honored when unmaximizing
    in reduced resources mode.
    Resolves: rhbz 523520


author: Martin Nagy <mnagy@redhat.com> - 1.1.33-16
changelog:
  - fix -t option of g32pbm (#188028)
  - move g32pbm and g3cat from mgetty-sendfax to mgetty (#190179)
  - some whitespace changes (#263641)
  - added faxq-helper man page (#243293)


author: Martin Nagy <mnagy@redhat.com> - 1.1.36-1
changelog:
  - update to new upstream release
  - use our own faxq-helper man page now that we updated
  - fix -t flag of faxspool so it now accepts time ranges as it should (#171280)
  - fix mgetty and vgetty logrotate configuration files (#436727)
  - faxspool will handle spaces in file names better (#46697)


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-25.2
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527357


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-25.4.0.1
changelog:
  - Enable early microcode load to allow updating Broadwell model 79
  - Make sure "modprobe microcode" is not executed on Broadwell model 79
  - Run dracut upon microcode update
  - Add updated Intel 20180108 microcode for CPUIDs: {CVE-2017-5715}
    306c3 (06-3c-03 rev 0x23, Haswell);
    306d4 (06-3d-04 rev 0x28, Broadwell);
    306f2 (06-3f-02 rev 0x3b, Haswell);
    306f4 (06-3f-04 rev 0x10, Haswell);
    306e4 (06-3e-04 rev 0x42a, Ivy Bridge);
    40651 (06-45-01 rev 0x21, Haswell);
    40661 (06-46-01 rev 0x18, Haswell);
    40671 (06-47-01 rev 0x1b, Broadwell);
    406e3 (06-4e-03 rev 0xc2, Skylake);
    406f1 (06-4f-01 rev 0xb000025, Broadwell);
    50654 (06-55-04 rev 0x200003c, Skylake);
    50662 (06-56-02 rev 0x14, Broadwell);
    50663 (06-56-03 rev 0x7000011, Broadwell);
    506e3 (06-5e-03 rev 0xc2, Skylake);
    706a1 (06-7a-01 rev 0x22);
    806e9 (06-8e-09 rev 0x80, Kaby Lake);
    806ea (06-8e-0a rev 0x80);
    906e9 (06-9e-09 rev 0x80, Kaby Lake)
    906ea (06-9e-0a rev 0x80);
    906eb (06-9e-0b rev 0x80)


author: Jacob Wang <jacob.wang@oracle.com> - 1:1.17-25.6.0.1
changelog:
  - Remove upstream disclaimer file. (todd.vierling@oracle.com)
  - Update 106a5 (06-1a-05) to rev 0x1c. (todd.vierling@oracle.com)
  - Update 206c2 (06-2c-02) to rev 0x1e. (todd.vierling@oracle.com)
  - Update 206e6 (06-2e-06) to rev 0xc. (todd.vierling@oracle.com)
  - Update 206f2 (06-2f-02) to rev 0x3a. (todd.vierling@oracle.com)
  - Update 206d7 (06-2d-07) to rev 0x713. (todd.vierling@oracle.com)
  - Update 306e4 (06-3e-04) to rev 0x42c. (todd.vierling@oracle.com)
  - Update 306e7 (06-3e-07) to rev 0x713. (todd.vierling@oracle.com)
  - Update 306f4 (06-3f-04) to rev 0x11. (todd.vierling@oracle.com)
  - Enable early microcode load to allow updating Broadwell model 79 (todd.vierling@oracle.com)
  - Make sure "modprobe microcode" is not executed on Broadwell model 79 (todd.vierling@oracle.com)
  - Run dracut upon microcode update (todd.vierling@oracle.com)
  - Update 306f2 (06-3f-02) to rev 0x3c. (todd.vierling@oracle.com)
  - Update 406f1 (06-4f-01) to rev 0xb00002a. (todd.vierling@oracle.com)
  - Update 50654 (06-55-04) to rev 0x2000043. (todd.vierling@oracle.com)
  - Revert:  early microcode load to allow updating Broadwell model 79 (keshav.sharma@oracle.com)
  - Revert: Make sure "modprobe microcode" is not executed on Broadwell model 79 (keshav.sharma@oracle.com)
  - Revert: Run dracut upon microcode update (keshav.sharma@oracle.com)
  - Revert updated Intel 20180108 microcode for CPUIDs: {CVE-2017-5715} (keshav.sharma@oracle.com)
    306c3 (06-3c-03 rev 0x23, Haswell);
    306d4 (06-3d-04 rev 0x28, Broadwell);
    306f2 (06-3f-02 rev 0x3b, Haswell);
    306f4 (06-3f-04 rev 0x10, Haswell);
    306e4 (06-3e-04 rev 0x42a, Ivy Bridge);
    40651 (06-45-01 rev 0x21, Haswell);
    40661 (06-46-01 rev 0x18, Haswell);
    40671 (06-47-01 rev 0x1b, Broadwell);
    406e3 (06-4e-03 rev 0xc2, Skylake);
    406f1 (06-4f-01 rev 0xb000025, Broadwell);
    50654 (06-55-04 rev 0x200003c, Skylake);
    50662 (06-56-02 rev 0x14, Broadwell);
    50663 (06-56-03 rev 0x7000011, Broadwell);
    506e3 (06-5e-03 rev 0xc2, Skylake);
    706a1 (06-7a-01 rev 0x22);
    806e9 (06-8e-09 rev 0x80, Kaby Lake);
    806ea (06-8e-0a rev 0x80);
    906e9 (06-9e-09 rev 0x80, Kaby Lake)
    906ea (06-9e-0a rev 0x80);
    906eb (06-9e-0b rev 0x80)
  - Enable early microcode load to allow updating Broadwell model 79 (todd.vierling@oracle.com)
  - Make sure "modprobe microcode" is not executed on Broadwell model 79 (todd.vierling@oracle.com)
  - Run dracut upon microcode update (todd.vierling@oracle.com)
  - Add updated Intel 20180108 microcode for CPUIDs: {CVE-2017-5715} (todd.vierling@oracle.com)
    306c3 (06-3c-03 rev 0x23, Haswell);
    306d4 (06-3d-04 rev 0x28, Broadwell);
    306f2 (06-3f-02 rev 0x3b, Haswell);
    306f4 (06-3f-04 rev 0x10, Haswell);
    306e4 (06-3e-04 rev 0x42a, Ivy Bridge);
    40651 (06-45-01 rev 0x21, Haswell);
    40661 (06-46-01 rev 0x18, Haswell);
    40671 (06-47-01 rev 0x1b, Broadwell);
    406e3 (06-4e-03 rev 0xc2, Skylake);
    406f1 (06-4f-01 rev 0xb000025, Broadwell);
    50654 (06-55-04 rev 0x200003c, Skylake);
    50662 (06-56-02 rev 0x14, Broadwell);
    50663 (06-56-03 rev 0x7000011, Broadwell);
    506e3 (06-5e-03 rev 0xc2, Skylake);
    706a1 (06-7a-01 rev 0x22);
    806e9 (06-8e-09 rev 0x80, Kaby Lake);
    806ea (06-8e-0a rev 0x80);
    906e9 (06-9e-09 rev 0x80, Kaby Lake)
    906ea (06-9e-0a rev 0x80);
    906eb (06-9e-0b rev 0x80)


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-25.7.0.2
changelog:
  - Remove upstream disclaimer file.
  - Enable early microcode load to allow updating Broadwell model 79
  - Make sure "modprobe microcode" is not executed on Broadwell model 79
  - Run dracut upon microcode update


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.13
changelog:
  - Remove disclaimer, as it is not as important now to justify kmsg/log
    pollution; its contents are partially adopted in README.caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.16
changelog:
  - Revert more strict model check code, as it requires request_firmware-based
    microcode loading mechanism and breaks enabling of microcode with caveats.


author: Todd Vierling <todd.vierling@oracle.com> - 3:1.17-33.17.0.1
changelog:
  - merge Oracle changes for early load via dracut
  - enable late load on install for UEK4 kernels marked safe (except BDW-79)
  - update 06-55-04 to 0x2000065
  - update 06-55-07 to 0x500002c


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.18
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764049, #1764062, #1764953,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.20
changelog:
  - Package the publicy available microcode-20191112 release (#1755021):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.21
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.22
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.25
changelog:
  - Update Intel CPU microcode to microcode-20200520 release (#1839193):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.26
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795353, #1795357, #1827186):
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Todd Vierling <todd.vierling@oracle.com> - 3:1.17-33.26.0.1
changelog:
  - update 06-2d-07 to 0x71a
  - update 06-55-04 to 0x2006906
  - update 06-55-07 to 0x5002f01
  - merge Oracle changes for early load via dracut
  - enable late load on install for UEK4 kernels marked safe (except BDW-79)
  - set early_microcode="no" in virtualized guests to avoid early load bugs [Orabug: 30618737]


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.27
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1846134).


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.28
changelog:
  - Enable 06-55-04 (SKL-X/W) caveat by default.
  - Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846024).


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.29
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1826590):
    - Fixed a typo in the release note file.


author: Todd Vierling <todd.vierling@oracle.com> - 3:1.17-33.29.0.1
changelog:
  - merge Oracle changes for early load via dracut
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - remove other caveat support to be compatible with early load logic
  - enable late load on install for UEK4 kernels marked safe (except BDW-79)
  - set early_microcode="no" in virtualized guests to avoid early load bugs [Orabug: 30618737]


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.30
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.31
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893243, #1893238):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode (in microcode.dat)
      at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      microcode.dat) at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode (in microcode.dat)
      at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in microcode.dat)
      at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat)
      at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode (in
      microcode.dat) at revision 0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      microcode-06-4e-03.dat) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      microcode-06-55-04.dat) from revision 0x2006906 up to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      microcode-06-5e-03.dat) from revision 0xdc up to 0xe2;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      (in microcode.dat) from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in microcode.dat)
      from revision 0x1000157 up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in microcode.dat)
      from revision 0x4002f01 up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in
      microcode.dat) from revision 0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode (in microcode.dat) from
      revision 0x38 up to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode (in microcode.dat)
      from revision 0x16 up to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode (in microcode.dat)
      from revision 0x16 up to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in microcode.dat)
      from revision 0x78 up to 0xa0;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat)
      from revision 0xd6 up to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      microcode.dat) from revision 0xd6 up to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in microcode.dat)
      from revision 0xd6 up to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in microcode.dat)
      from revision 0xd6 up to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      microcode.dat) from revision 0xd6 up to 0xde;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in microcode.dat)
      from revision 0xca up to 0xe0.


