# changelog

author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.353.el6
changelog:
  - kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
  - kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
  - kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
  - kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
  - kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
  - Resolves: bz#869981
    (Cross version migration between different host with spice is broken)
  - Resolves: bz#876982
    (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
  - Resolves: bz#894995
    (core dump when install windows guest with x-data-plane=on)
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.354.el6
changelog:
  - spec: add Epoch to old_conflict_ver
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6
changelog:
  - kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
  - kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.356.el6
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.2
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
  - Resolves: bz#910841
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.3
changelog:
  - kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
  - Resolves: bz#929105
    ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.4
changelog:
  - kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
  - Resolves: bz#958750
    (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.5
changelog:
  - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
  - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
  - Resolves: bz#907716
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#957056
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.6
changelog:
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
  - Resolves: bz#980758
    (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6_4.7
changelog:
  - kvm-qcow2-Reinitialise-counter-when-restarting-alloc-r64.patch [bz#996151]
  - Resolves: bz#996151
    (qcow2 corruption bug in cluster allocation code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.8
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#965152]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#965152]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#965152]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#965152]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#965152]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#965152]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#965152]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#965152]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#965152]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#965152]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#965152]
  - kvm-libcacard-remove-sql-prefix.patch [bz#965152]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#965152]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#965152]
  - kvm-libcacard-change-default-ATR.patch [bz#965152]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#965152]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#965152]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#965152]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#965152]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#965152]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#965152]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#965152]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#965152]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#965152]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#965152]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#965152]
  - kvm-uhci-egsm-fix.patch [bz#965152]
  - Resolves: bz#965152
    (Smartcard emulation with Windows guest fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.9
changelog:
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Michal Novotny <minovotn@redhat.com> - 0.12.1.2-2.415.el6_5.1
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.2
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1025596]
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.3
changelog:
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979 bz#1029329]
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1029327]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1029331]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1029331]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029327
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1029329
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029331
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.4
changelog:
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1056642 bz#1063202]
  - Resolves: bz#1063202
    (qemu-img fails to convert vmdk v3 image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.5
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1069239]
  - Resolves: bz#1069239
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1071740]
  - Resolves: bz#1071740
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.7
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1080436]
  - Resolves: bz#1080436
    ([Intel 6.5.z Bug] virsh setvcpus can not setup correct vcpu number)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.8
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605 bz#1078849]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079337 bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079330 bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079318 bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518 bz#1086678]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079337 bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518 bz#1086678]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079452 bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079452 bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079343 bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079452 bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518 bz#1086678]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518 bz#1086678]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518 bz#1086678]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079323 bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079323 bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518 bz#1086678]
  - Resolves: bz#1078849
    (EMBARGOED CVE-2014-0150 qemu-kvm: qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function [rhel-6.5.z])
  - Resolves: bz#1079313
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.5.z])
  - Resolves: bz#1079318
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.5.z])
  - Resolves: bz#1079323
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.5.z])
  - Resolves: bz#1079330
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.5.z])
  - Resolves: bz#1079337
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.5.z])
  - Resolves: bz#1079343
    (CVE-2014-0148 qemu-kvm: Qemu: vhdx: bounds checking for block_size and logical_sector_size [rhel-6.5.z])
  - Resolves: bz#1079452
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.5.z])
  - Resolves: bz#1086678
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.9
changelog:
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087978]
  - Resolves: bz#1087978
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.5.z])


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.10
changelog:
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095692]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095743]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load-2.patch [bz#1095743]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095739]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095735]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095763 bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095763 bz#1096124]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1099941]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095675]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095779]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096825]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1100575]
  - Resolves: bz#1095675
    ()
  - Resolves: bz#1095692
    ()
  - Resolves: bz#1095735
    ()
  - Resolves: bz#1095739
    ()
  - Resolves: bz#1095743
    ()
  - Resolves: bz#1095763
    ()
  - Resolves: bz#1095779
    ()
  - Resolves: bz#1096124
    ()
  - Resolves: bz#1096825
    ()
  - Resolves: bz#1099941
    ()
  - Resolves: bz#1100575
    (Some vCPU topologies not accepted by libvirt)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.11
changelog:
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1109715]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.12
changelog:
  - kvm-qcow-Return-real-error-code-in-qcow_open.txt [bz#1097225]
  - kvm-qcow1-Make-padding-in-the-header-explicit.txt [bz#1097225]
  - kvm-qcow1-Check-maximum-cluster-size.txt [bz#1097225]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.txt [bz#1097225]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.txt [bz#1097234]
  - kvm-qcow1-Stricter-backing-file-length-check.txt [bz#1097234]
  - Resolves: bz#1097225
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.5.z])
  - Resolves: bz#1097234
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.5.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.13
changelog:
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1109715]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1109715]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.patch [bz#1125131]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.patch [bz#1125131]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.patch [bz#1125131]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.patch [bz#1123271]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1123271]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1123271
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#1125131
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.14
changelog:
  - The commit for zrelease .13 was incomplete; the changes to qemu-kvm.spec
    did not include the "%patchNNNN -p1" lines for patches 4647 through 4655;
    so although the patch files themselves were committed, the srpm build
    did not pick them up. In addition, the commit log did not describe the
    patches.

    This commit corrects these problems and bumps the zrelease to .14.


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.15
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1222181]
  - Resolves: bz#1222181
    (CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.5.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.436.el6
changelog:
  - kvm-qcow2-Reject-too-large-header-extensions.patch [bz#1124443]
  - kvm-block-Fix-is_allocated_above-with-resized-files.patch [bz#1122992]
  - kvm-block-mirror-Use-bdrv_is_allocated_above.patch [bz#1122992]
  - kvm-qemu-io-New-command-map.patch [bz#1122410]
  - kvm-qemu-io-Implement-write-c-for-compressed-clusters.patch [bz#1122410]
  - kvm-qemu-img-Add-compare-subcommand.patch [bz#1122410]
  - kvm-qemu-img-Fix-overwriting-ret-before-using.patch [bz#1122410]
  - kvm-QMP-add-get_events-wait-True-option.patch [bz#1122410]
  - kvm-qmp-Check-for-returned-data-from-__json_read-in-get_.patch [bz#1122410]
  - kvm-QMP-add-server-mode-to-QEMUMonitorProtocol.patch [bz#1122410]
  - kvm-qemu-iotests-Import-from-upstream.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-tests-that-require-sample-image.patch [bz#1122410]
  - kvm-block-parse-cache-mode-flags-in-a-single-place.patch [bz#1122410]
  - kvm-qemu-io-Add-command-line-switch-for-cache-mode.patch [bz#1122410]
  - kvm-qemu-io-correctly-print-non-integer-values-as-decima.patch [bz#1122410]
  - kvm-qemu-iotests-Modify-scripts-to-run-with-qemu-kvm-rhe.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-cases-requiring-not-backported-.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-028.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-029.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-030.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-060.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-031.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-040.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-041.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-049.patch [bz#1122410]
  - kvm-qemu-iotests.-Backport-067.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-080.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-086.patch [bz#1122410]
  - kvm-qemu-iotests-Trivial-test-case-backports.patch [bz#1122410]
  - kvm-virtio-rng-Add-human-readable-error-message-for-nega.patch [bz#1119207]
  - kvm-virtio-rng-Move-error-checking-forward-to-prevent-me.patch [bz#1119207]
  - Resolves: bz#1119207
    ([rng]qemu-kvm process still can start when specify negative value for max-bytes)
  - Resolves: bz#1122410
    (backport qemu-iotests to the RHEL 6 internal repository)
  - Resolves: bz#1122992
    (Full mirroring with smaller backing file causes qemu to hang)
  - Resolves: bz#1124443
    (qcow2 doesn't catch invalid header extension sizes)


author: Jeff E. Nelson <> - 0.12.1.2-2.437.el6
changelog:
  - kvm-vmschk-check-rhel6.py-quickly-compare-RHEL6-jsons-ba.patch [bz#1125792]
  - kvm-tests-add-rhel6.0-to-rhel6.6-vmstate-json-files.patch [bz#1125792]
  - kvm-scsi-Ensure-command-and-transfer-lengths-are-set-for.patch [bz#1113068]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#1122885]
  - Resolves: bz#1113068
    (Qemu crashes when some commands are passed from guest to host tape device.)
  - Resolves: bz#1122885
    (qemu-img man doc should tell "should report progress bar when receives "SIGUSR1" signal if -p option is not used")
  - Resolves: bz#1125792
    (Add vmstate json representation files for RHEL6 releases to source tree)


author: Jeff E. Nelson <> - 0.12.1.2-2.438.el6
changelog:
  - kvm-hda-audio-fix-non-mixer-codecs.patch [bz#1080546]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#995931]
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#995931]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#995931]
  - Resolves: bz#1080546
    (pulse sound no longer works after changing KVM win 7 guest SID in RHEL 6.5)
  - Resolves: bz#995931
    (Qemu core dump (red_get_image: unknown type 184) when reboot a RHEL.6.4-64 guest 25 times)


author: Jeff E. Nelson <> - 0.12.1.2-2.439.el6
changelog:
  - kvm-spice-fix-libvirt-snapshots.patch [bz#1010670]
  - kvm-ide-Ignore-double-DMA-transfer-starts-stops.patch [bz#1104573]
  - kvm-ide-Reset-current_addr-after-stopping-DMA.patch [bz#1104573]
  - kvm-ide-Reset-BMIDEA-bit-when-the-bus-master-is-stopped.patch [bz#1104573]
  - Resolves: bz#1010670
    (spice session is closed when taking snapshot with ram)
  - Resolves: bz#1104573
    (DMA error when install RHEL.5.11.x86_64 guest (ide drive) on RHEL6.5.z host)


author: Jeff E. Nelson <> - 0.12.1.2-2.440.el6
changelog:
  - kvm-hw-qdev-emit-DEVICE_DELETED-event-only-if-the-device.patch [bz#1124314]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1120541]
  - Resolves: bz#1120541
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1124314
    (incorrect event reported by QMP on hot plugging an in-use VF to guest)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.441.el6
changelog:
  - kvm-block-Improve-bdrv_aio_co_cancel_em.patch [bz#1018537]
  - kvm-usb-Avoid-reentrancy-of-ehci_advance_async_state-dow.patch [bz#1018537]
  - kvm-scripts-add-sample-model-file-for-Coverity-Scan.patch [bz#1102409]
  - Resolves: bz#1018537
    (qemu core dump after run read/randwr fio in guest with usb or scsi disk)
  - Resolves: bz#1102409
    (Unable to handle NULL pointer dereference in qcow2_check_refcounts)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.1
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-run_2.patch [bz#970103]
  - kvm-virtio-net-drop-assert-on-vm-stop.patch [bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage_2.patch [bz#970103]
  - kvm-migration-only-call-append-when-there-is-something_2.patch [bz#970103]
  - kvm-migration-Only-call-memmove-when-there-is-anything-t.patch [bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-fun_2.patch [bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-sta_2.patch [bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycl_2.patch [bz#970103]
  - kvm-buffered_flush-return-errors.patch [bz#970103]
  - kvm-bandwidth_limit-standarize-in-size_t.patch [bz#970103]
  - kvm-fix-bz-1196970.patch [bz#1196970]
  - Resolves: bz#1196970
    (Migrate status is failed after migrate_cancel.)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.2
changelog:
  - kvm-cirrus-fix-blit-region-check.patch [bz#1170571]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1170571]
  - Resolves: bz#1170571
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-6.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.448.el6_6.3
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219267]
  - Resolves: bz#1219267
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.6.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.4
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225886]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225886]
  - Resolves: bz#1225886
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer overflow in the tx path [rhel-6.6.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.470.el6
changelog:
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157644]
  - Resolves: bz#1157644
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.471.el6
changelog:
  - kvm-aio-switch-aiocb_size-type-int-size_t.patch [bz#1069519]
  - kvm-aio-use-g_slice_alloc-for-AIOCB-pooling.patch [bz#1069519]
  - kvm-aio-rename-AIOPool-to-AIOCBInfo.patch [bz#1069519]
  - kvm-ide-ahci-Check-for-ECANCELED-in-aio-callbacks.patch [bz#1069519]
  - kvm-block-Add-refcnt-in-BlockDriverAIOCB.patch [bz#1069519]
  - kvm-block-Add-bdrv_aio_cancel_async.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_co_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_aiocb_info.cancel.patch [bz#1069519]
  - kvm-posix-aio-Remove-raw_aiocb_info.cancel.patch [bz#1069519]
  - kvm-linux-aio-Convert-laio_aiocb_info.cancel-to-.cancel_.patch [bz#1069519]
  - kvm-dma-Convert-dma_aiocb_info.cancel-to-.cancel_async.patch [bz#1069519]
  - kvm-blkdebug-Drop-blkdebug_aiocb_info.cancel.patch [bz#1069519]
  - kvm-curl-Drop-curl_aiocb_info.cancel.patch [bz#1069519]
  - kvm-qed-Drop-qed_aiocb_info.cancel.patch [bz#1069519]
  - kvm-rbd-Drop-rbd_aiocb_info.cancel.patch [bz#1069519]
  - kvm-vdi-Drop-vdi_aio_cancel.cancel.patch [bz#1069519]
  - kvm-gluster-Drop-gluster_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-AIOCBInfo.cancel.patch [bz#1069519]
  - kvm-block-Rename-qemu_aio_release-qemu_aio_unref.patch [bz#1069519]
  - kvm-scsi-Drop-scsi_req_abort.patch [bz#1069519]
  - kvm-scsi-generic-Handle-canceled-request-in-scsi_command.patch [bz#1069519]
  - kvm-scsi-Unify-request-unref-in-scsi_req_cancel.patch [bz#1069519]
  - kvm-scsi-Drop-SCSIReqOps.cancel_io.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_complete.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_async.patch [bz#1069519]
  - kvm-virtio-scsi-Handle-TMF-request-cancellation-asynchro.patch [bz#1069519]
  - kvm-scsi-fix-cancellation-when-I-O-was-completed-but-DMA.patch [bz#1069519]
  - kvm-block-Fix-bdrv_aio_co_cancel_em-RHEL-only.patch [bz#1069519]
  - kvm-qcow2-Zero-write-support.patch [bz#1130014]
  - Resolves: bz#1069519
    ([FJ6.5 Bug] A KVM guest hangs up for about 30 seconds after issuing SG_IO ioctl to a virtio-scsi device.)
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.472.el6
changelog:
  - kvm-virtio-pci-avoid-repeatedly-deassigning-notifers-of-.patch [bz#1124311]
  - Resolves: bz#1124311
    (Qemu-kvm aborted when boot with 232 virtio NICs (multiple function is on))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.473.el6
changelog:
  - kvm-blockdev-preserve-I-O-throttling-across-drives_reope.patch [bz#1211513]
  - Resolves: bz#1211513
    (IO throttling doesn't work after migration)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.474.el6
changelog:
  - kvm-block-avoid-useless-checks-on-acb-bh.patch [bz#1130014]
  - kvm-clean-unnecessary-code-don-t-check-g_strdup-arg-for-.patch [bz#1205288]
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1205288]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1205288]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1205288]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1205288]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1205288]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1205288]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1205288]
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)
  - Resolves: bz#1205288
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.475.el6
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219268]
  - Resolves: bz#1219268
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.476.el6
changelog:
  - kvm-block-Fix-bdrv_aio_cancel-RHEL-only.patch [bz#1220674]
  - Resolves: bz#1220674
    (Received no response to QMP command 'system_reset')


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.477.el6
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225887]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225887]
  - Resolves: bz#1225887
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer flow in the tx path [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.478.el6
changelog:
  - kvm-vdi-Avoid-direct-AIO-callback.patch [bz#1130046]
  - kvm-vdi-Initialize-acb-bh-in-vdi_aio_setup.patch [bz#1130046]
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    ()


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    (qemu-kvm randomly crashes with "kill failed failed: Invalid argument")


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.1
changelog:
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248761]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248761]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248761]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248761]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248761]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248761]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248761]
  - Resolves: bz#1248761
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.2
changelog:
  - kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263274]
  - Resolves: bz#1263274
    (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.3
changelog:
  - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1287950]
  - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1287950]
  - Resolves: bz#1287950
    (CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6_7.4
changelog:
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298045]
  - Resolves: bz#1298045
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.7.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.482.el6
changelog:
  - kvm-qemu-kvm-get-put-MSR_TSC_AUX-across-reset-and-migrat.patch [bz#1265428]
  - kvm-qcow2-Discard-VM-state-in-active-L1-after-creating-s.patch [bz#1219908]
  - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1286597]
  - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1286567]
  - Resolves: bz#1219908
    (Writing snapshots with "virsh snapshot-create-as" command slows as more snapshots are created)
  - Resolves: bz#1265428
    (contents of MSR_TSC_AUX are not migrated)
  - Resolves: bz#1286567
    (CVE-2015-7512 qemu-kvm: Qemu: net: pcnet: buffer overflow in non-loopback mode [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.483.el6
changelog:
  - kvm-rtl8139-Fix-receive-buffer-overflow-check.patch [bz#1262866]
  - kvm-rtl8139-Do-not-consume-the-packet-during-overflow-in.patch [bz#1262866]
  - Resolves: bz#1262866
    ([RHEL6] Package is 100% lost when ping from host to Win2012r2 guest with 64000 size)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.484.el6
changelog:
  - kvm-qga-flush-explicitly-when-needed.patch [bz#1210246]
  - kvm-qga-add-guest-set-user-password-command.patch [bz#1174181]
  - kvm-qcow2-Zero-initialise-first-cluster-for-new-images.patch [bz#1223216]
  - kvm-Documentation-Warn-against-qemu-img-on-active-image.patch [bz#1297424]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678]
  - kvm-qemu-options-Fix-texinfo-markup.patch [bz#1250442]
  - kvm-qga-Fix-memory-allocation-pasto.patch []
  - kvm-block-raw-posix-Open-file-descriptor-O_RDWR-to-work-.patch [bz#1268347]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root/administrator account password)
  - Resolves: bz#1210246
    ([virtagent]The 'write' content is lost if 'read' it before flush through guest agent)
  - Resolves: bz#1223216
    (qemu-img can not create qcow2 image when backend is block device)
  - Resolves: bz#1250442
    (qemu-doc.html bad markup in section 3.3 Invocation)
  - Resolves: bz#1268347
    (posix_fallocate emulation on NFS fails with Bad file descriptor if fd is opened O_WRONLY)
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297424
    (Add warning about running qemu-img on active VMs to its manpage)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.485.el6
changelog:
  - kvm-Change-fsfreeze-hook-default-location.patch [bz#1213233]
  - kvm-qxl-replace-pipe-signaling-with-bottom-half.patch [bz#1290743]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.486.el6
changelog:
  - kvm-blockdev-Error-out-on-negative-throttling-option-val.patch [bz#1294619]
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298046]
  - Resolves: bz#1294619
    (Guest should failed to boot if set iops,bps to negative number)
  - Resolves: bz#1298046
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.487.el6
changelog:
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249740]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249740]
  - Resolves: bz#1249740
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Miroslav Rezanina <mrezanin@redhat.com - 0.12.1.2-2.488.el6
changelog:
  - Fixed qemu-ga path configuration [bz#1213233]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.489.el6
changelog:
  - kvm-hw-qxl-qxl_send_events-nop-if-stopped.patch [bz#1290743]
  - kvm-block-mirror-fix-full-sync-mode-when-target-does-not.patch [bz#971312]
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)
  - Resolves: bz#971312
    (block: Mirroring to raw block device doesn't zero out unused blocks)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.490.el6
changelog:
  - kvm-qemu-ga-implement-win32-guest-set-user-password.patch [bz#1174181]
  - kvm-util-add-base64-decoding-function.patch [bz#1174181]
  - kvm-qga-convert-to-use-error-checked-base64-decode.patch [bz#1174181]
  - kvm-qga-use-more-idiomatic-qemu-style-eol-operators.patch [bz#1174181]
  - kvm-qga-use-size_t-for-wcslen-return-value.patch [bz#1174181]
  - kvm-qga-use-wide-chars-constants-for-wchar_t-comparisons.patch [bz#1174181]
  - kvm-qga-fix-off-by-one-length-check.patch [bz#1174181]
  - kvm-qga-check-utf8-to-utf16-conversion.patch [bz#1174181]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root account password (Linux guest))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.1
changelog:
  - kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
  - kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
  - kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
  - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
  - kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
  - kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
  - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
  - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
  - Resolves: bz#1331407
    (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.491.el6_8.2
changelog:
  - kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
  - Resolves: bz#1347192
    (Regression from CVE-2016-3712: windows installer fails to start)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.3
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
  - Resolves: bz#1359724
    (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-6.8.z])


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.491.el6.4
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1408389]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1408389]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1408389]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1408389]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1408389]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1408389]
  - Resolves: bz#1408389
    ([RHEL6.8.z] KVM guest shuts itself down after 128th reboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.5
changelog:
  - kvm-net-check-packet-payload-length.patch [bz#1398213]
  - Resolves: bz#1398213
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418230 bz#1419416]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418230 bz#1419416]
  - Resolves: bz#1418230
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])
  - Resolves: bz#1419416
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.7
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420486 bz#1420488]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420486 bz#1420488]
  - Resolves: bz#1420486
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
  - Resolves: bz#1420488
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.494.el6
changelog:
  - kvm-rtl8139-flush-queued-packets-when-RxBufPtr-is-writte.patch [bz#1356924]
  - kvm-block-Detect-unaligned-length-in-bdrv_qiov_is_aligne.patch [bz#1321862]
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1281713]
  - kvm-atapi-fix-halted-DMA-reset.patch [bz#1281713]
  - Resolves: bz#1281713
    (system_reset should clear pending request for error (IDE))
  - Resolves: bz#1321862
    (Backport 'block: Detect unaligned length in bdrv_qiov_is_aligned()')
  - Resolves: bz#1356924
    (rtl8139 driver hangs in widows guests)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.495.el6
changelog:
  - kvm-qemu-img-add-support-for-fully-allocated-images.patch [bz#1297653]
  - kvm-qemu-img-fix-usage-instruction-for-qemu-img-convert.patch [bz#1297653]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678 bz#1320066]
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297653
    ("qemu-img convert" can't  create a fully allocated image passed a "-S 0" option)
  - Resolves: bz#1320066
    (Qemu should not report error when cmdline set threads=2 in Intel host)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.496.el6
changelog:
  - kvm-virtio-blk-Release-s-rq-queue-at-system_reset.patch [bz#1361490]
  - kvm-virtio-scsi-Prevent-assertion-on-missed-events.patch [bz#1333697]
  - Resolves: bz#1333697
    (qemu-kvm: /builddir/build/BUILD/qemu-kvm-0.12.1.2/hw/virtio-scsi.c:724: virtio_scsi_push_event: Assertion `event == 0' failed)
  - Resolves: bz#1361490
    (system_reset should clear pending request for error (virtio-blk))


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.497.el6
changelog:
  - kvm-vmstate-fix-breakage-by-7e72abc382b700a72549e8147bde.patch [bz#1294941]
  - Resolves: bz#1294941
    (QEMU crash on snapshot revert when using Cirrus)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.498.el6
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1392520]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1392520]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1392520]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1392520]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1392520]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1392520]
  - kvm-PATCH-1-4-e1000-pre-initialize-RAH-RAL-registers.patch [bz#1300626]
  - kvm-net-update-nic-info-during-device-reset.patch [bz#1300626]
  - kvm-net-e1000-update-network-information-when-macaddr-is.patch [bz#1300626]
  - kvm-net-rtl8139-update-network-information-when-macaddr-.patch [bz#1300626]
  - Resolves: bz#1300626
    (e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest)
  - Resolves: bz#1392520
    ([RHEL6.9] KVM guest shuts itself down after 128th reboot)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.499.el6
changelog:
  - kvm-rename-qemu_aio_context-to-match-upstream.patch [bz#876993]
  - kvm-block-stop-relying-on-io_flush-in-bdrv_drain_all.patch [bz#876993]
  - kvm-block-add-bdrv_drain.patch [bz#876993]
  - kvm-block-avoid-very-long-pauses-at-the-end-of-mirroring.patch [bz#876993]
  - Resolves: bz#876993
    (qemu-kvm: vm's become non-responsive during migrate disk load from 2 domains to a 3ed)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.500.el6
changelog:
  - kvm-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Disable-086.patch [bz#1405882]
  - kvm-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-iotests-Use-_img_info.patch [bz#1405882]
  - Resolves: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.501.el6
changelog:
  - kvm-Revert-iotests-Use-_img_info.patch [bz#1405882]
  - kvm-Revert-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-Revert-iotests-Disable-086.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-Revert-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-Revert-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-net-check-packet-payload-length.patch [bz#1398214]
  - Resolves: bz#1398214
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.9])
  - Reverts: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.502.el6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418231 bz#1419417]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418231 bz#1419417]
  - Resolves: bz#1418231
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])
  - Resolves: bz#1419417
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420487 bz#1420489]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420487 bz#1420489]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420487 bz#1420489]
  - Resolves: bz#1420487
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])
  - Resolves: bz#1420489
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.1
changelog:
  - kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
  - kvm-vnc-apply-display-size-limits.patch [bz#1400438 bz#1425943]
  - Resolves: bz#1400438
    (qemu-kvm coredump in vnc_refresh_server_surface [rhel-6.9.z])
  - Resolves: bz#1425943
    (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.9.z])
  - Resolves: bz#1428750
    (Fails to build in brew)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.2
changelog:
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443447 bz#1443449]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443447 bz#1443449]
  - Resolves: bz#1443447
    (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
  - Resolves: bz#1443449
    (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
  - Resolves: bz#1447544
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z] )
  - Resolves: bz#1447540
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.3
changelog:
  - kvm-cirrus-avoid-write-only-variables.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444377 bz#1444379]
  - Resolves: bz#1444377
    (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])
  - Resolves: bz#1444379
    (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.503.el6_9.5
changelog:
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501296]
  - Resolves: bz#1501296
    (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.9.z])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.503.el6_9.6
changelog:
  - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574067]
  - Resolves: bz#1574067
    (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-6.9.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.504.el6
changelog:
  - kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
  - kvm-vnc-apply-display-size-limits.patch [bz#1430616 bz#1430617]
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443448 bz#1443450]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443448 bz#1443450 bz#1447542 bz#1447545]
  - kvm-cirrus-avoid-write-only-variables.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444378 bz#1444380]
  - Resolves: bz#1428750
    (Fails to build in brew)
  - Resolves: bz#1430616
    (CVE-2017-2633 qemu-kvm: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1430617
    (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1443448
    (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1443450
    (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1444378
    (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1444380
    (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1447542
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])
  - Resolves: bz#1447545
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.505.el6
changelog:
  - kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [bz#1525939 bz#1528024]
  - kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [bz#1525939 bz#1528024]
  - kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [bz#1525939 bz#1528024]
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501298]
  - kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1486641]
  - kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534692]
  - Resolves: bz#1486641
    (CVE-2017-13672 qemu-kvm-rhev: Qemu: vga: OOB read access during display update [rhel-6.10])
  - Resolves: bz#1501298
    (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.10])
  - Resolves: bz#1525939
    (CVE-2017-5715 qemu-kvm: hw: cpu: speculative execution branch target injection [rhel-6.10])
  - Resolves: bz#1528024
    (CVE-2017-5715 qemu-kvm-rhev: hw: cpu: speculative execution branch target injection [rhel-6.10])
  - Resolves: bz#1534692
    (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-6.10])
  - Resolves: bz#1549152
    (qemu-kvm-rhev: remove unused patch file [rhel-6.10])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6
changelog:
  - kvm-vga-add-share_surface-flag.patch [bz#1553674]
  - kvm-vga-add-sanity-checks.patch [bz#1553674]
  - Resolves: bz#1553674
    (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-6])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.1
changelog:
  - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574074]
  - qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574074]
  - qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574074]
  - Resolves: bz#1574074
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-6.10.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.506.el6_10.3
changelog:
  - kvm-target-i386-define-md-clear-bit.patch [bz#1698996]
  - Resolves: bz#1698996
    (CVE-2018-12130 qemu-kvm: hardware: MFBDS)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.4
changelog:
  - kvm-target-i386-Sanitize-the-XSAVE-related-feature-bits.patch [bz#1673779]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689790]
  - Resolves: bz#1673779
    (RHEL8 VM's do not install on RHEL6 KVM hypervisor)
  - Resolves: bz#1689790
    (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-6])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.5
changelog:
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669066]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669066]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669066]
  - kvm-qxl-check-release-info-object.patch [bz#1712728]
  - kvm-net-Use-iov-helper-functions.patch [bz#1636415]
  - kvm-net-increase-buffer-size-to-accommodate-Jumbo-frame-.patch [bz#1636415]
  - kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636415]
  - kvm-net-drop-too-large-packet-early.patch [bz#1636415]
  - kvm-PATCH-slirp-fix-buffer-overrun.patch [bz#1586251]
  - kvm-Fix-build-from-previous-commit.patch [bz#1586251]
  - kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586251]
  - kvm-slirp-Convert-mbufs-to-use-g_malloc-and-g_free.patch [bz#1586251]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586251]
  - kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636774]
  - Resolves: bz#1586251
    (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-6.10.z])
  - Resolves: bz#1636415
    (CVE-2018-10839 qemu-kvm: Qemu: ne2000: integer overflow leads to buffer overflow issue [rhel-6])
  - Resolves: bz#1636774
    (CVE-2018-17962 qemu-kvm: Qemu: pcnet: integer overflow leads to buffer overflow [rhel-6])
  - Resolves: bz#1669066
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-6.10.z])
  - Resolves: bz#1712728
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-6])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.6
changelog:
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734747]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749731]
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791558]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791558]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791558]
  - Resolves: bz#1734747
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-6.10.z])
  - Resolves: bz#1749731
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-6])
  - Resolves: bz#1791558
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-6.10.z])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.7
changelog:
  - kvm-slirp-disable-tcp_emu.patch [bz#1791680]
  - kvm-slirp-add-slirp_fmt-helpers.patch [bz#1798966]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798966]
  - Resolves: bz#1791680
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-6])
  - Resolves: bz#1798966
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-6.10.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.506.el6_10.8
changelog:
  - kvm-qemu-kvm-QEMU-usb-check-RNDIS-message-length.patch [bz#1869684]
  - kvm-qemu-kvm-QEMU-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869684]
  - Resolves: bz#1869684
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-6.10.z])


author: Doug Ledford <dledford@redhat.com> - 0.4.6-5
changelog:
  - Fix the fact that qperf was using the wrong PF_RDS define now that RDS
    is integrated upstream and its assigned number is no longer temporary
  - Resolves: bz808673


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-10
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-26.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-11
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-28 (MRG 1.3.2 RC2).
    Updated lib version numbers for RHEL 6.1.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-12
changelog:
  - Related: rhbz#659098 - QMFv2 API for C++
  - Related: rhbz#617260 - qmf agent crashes broker when queue limits exceeded
  - Related: rhbz#659100 - QMFv2 API for Python
  - Related: rhbz#662826 - Support for federated brokers in QMF
    This build adds QMF v.2 to the previous MRG 1.3.2 RC2 build, and a
    new python-qmf2 subpackage (rpm).


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1073306-1
changelog:
  - Related: rhbz#675821 - Rebase qpid-cpp to 0.10 for snapshot 3
    Note that the current qpid trunk is still in 0.9, but will branch onto
    the 0.10 release branch soon. This is a test build only.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1078967-1
changelog:
  - Related: rhbz#675821 - First build of 0-10 branch, but because final
    numbering strategy is still undecided, the 0.9.x label persists for this
    build. QMF has been removed entirely and placed into its own package, as
    there were not only inconsistencies in the old packaging, but also name
    clashes.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-1
changelog:
  - Related: rhbz#675821 - Rebase to upstream 0.10 rev 1083082 (store rev
    remains 4446)
  - Removing svn rev no. from the package names


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#706120
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-5
changelog:
  - Related rhbz#706120
    The patch file for the -4 build was not updated, this respin corrects
    that mistake. The fixes described below for -4 should now correctly
    apply to the -5 build.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-6
changelog:
  - Related rhbz#706120
  - MRG 2.0 GA build, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified


author: Justin Ross <jross@redhat.com> - 0.10-8
changelog:
  - Related rhbz#743512 - mrg_2.0.x patch was updated to include:
    - BZ 690107: Too many 'task overran' warnings in qpid broker logs
    - BZ 728586: Broker memory bloat due to leak of messages.
    - BZ 730017: Cluster authentication ignores cluster-* settings
    - BZ 732063: creating invalid federation link causes file descriptor
      leak
    - BZ 733543: Client freezes up when sending a large message
    - BZ 734608: qpidd core dump when accessed from a 1.2 client
    - BZ 736160: Qpidd possible memory leaks


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#711834
  - MRG 2.0 GA build for RHEL 6.1.z, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Ted Ross<tross@redhat.com> - 0.12-3
changelog:
  - BZ 681680 - QMF agents wake up several times a second
  - BZ 699499 - [RFE] qmfv2 must provide mainloop integration


author: Justin Ross <jross@redhat.com> - 0.12-5
changelog:
  - Related: rhbz#742040
  - Remove the indirection for subpackage renaming; we no longer need it
  - Adapt spec file to use upstream qpid source tarball as-is
  - Rebase qpid and store source to 0.12
  - Restore changes for new architectures


author: Justin Ross <jross@redhat.com> - 0.14-14
changelog:
  - Related: rhbz#765803
  - Rebase to 0.14
  - BZs: 730017, 759114, 760636, 786875, 791249, 795399, 797426, 798236,
    800028, 801310


author: Ted Ross <tross@redhat.com> - 0.14-16
changelog:
  - Related: rhbz#703563
  - Related: rhbz#771961
  - Related: rhbz#785919
  - Related: rhbz#788901
  - Related: rhbz#799269
  - Related: rhbz#802807


author: Mike Cressman <mcressman@redhat.com> - 0.14-19
changelog:
  - BZs: 609685, 683711, 693444, 707682, 729311, 801465, 808090,
         809357, 811481, 817283, 826989, 831365, 835628


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.6.895736-5
changelog:
  - Related: rhbz#554415
    Changed name of fedora_lib_patch flag to simply fedora
    Added rhel_5 flag, and put in switches for rhel-5 libs
    Added new boost libs for RHEL-6/Fedora


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.6.895736-5
changelog:
  - Related: rhbz#569937
    Adds missing post actions to set up openais/corosync.
    Fixed up numerous inconsistencies and small discreppanecies in spec file.
    More efficient build which limits the packages built when building only
    core rpms.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.935473-1
changelog:
  - Related: rhbz#574416
    Updated SELinux handling - remove qpidd.pp
    Rebase sources on svn r.935473/r.3913 (initial build for MRG 1.3)


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-1
changelog:
  - Related: rhbz#574881
  - Rebase to qpid r.946106 / store r.3975
  - New build process: building all packages for RHEL-6 in one build; relying
    on compose to split the rpms amongst core RHEL-6 and MRG channels.
  - Removed the qpidd.sasldb file; this caused a multi-lib problem, and is used for
    testing only (BZ587226).
  - Added new client lib libqpidmessaging.so.
  - Limited examples to the messaging dir only.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-3
changelog:
  - Related: rhbz#602696 - removed post script 'semodule -r qpidd' and
             deps on semodule.
  - Related: rhbz#587226 - removed qpidd.sasldb which is causing multilib
             conflict.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-3
changelog:
  - Related: rhbz#604173 - Added patch set for MRG 1.3. Modified spec file
    to set the lib versions for each of the libs produced by the build
    independently of each other and pass that info as params to make.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-5
changelog:
  - Related: rhbz#609298 - ruby QMF bindings can't query agents
    Fix in undelying c++ code for ruby QMF bindings.


author: Ted Ross <tross@redhat.com> - 0.12-2
changelog:
  - Related:rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Ted Ross <tross@redhat.com> - 0.12-4
changelog:
  - Related:rhbz#681680 - QMF agents wake up several times a second
  - Related:rhbz#699499 - [RFE] qmfv2 must provide mainloop integration


author: Justin Ross <jross@redhat.com> - 0.14-1
changelog:
  - Rebase to 0.14
  - rhbz#743657 - The pure-python QMF console unnecessarily retains
    references to query results
  - rhbz#699499 - [RFE] qmfv2 must provide mainloop integration
  - rhbz#681680 - QMF agents wake up several times a second
  - rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917717-4
changelog:
  - Changed defines to globals and moved them to the top.
  - Removed unnecessary python Requires/BuildRequires.


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917557-4
changelog:
  - Changed defines to globals and moved to top.
  - Fixed typo in description.
  - Removed unnecessary python Requires/BuildRequires.


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Adam Tkac <atkac redhat com> - 0.99.15-8
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-10
changelog:
  - add watchquagga initscript (#862826, #1208617)
  - remove pidfile when service is stopped (#842308)
  - use QCONFDIR correctly in initscripts (#839620)
  - include watchquagga and ospfclient manpages (#674862)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-11
changelog:
  - fix for CVE-2013-2236 (#1391918)
  - fix for CVE-2016-1245 (#1391914)
  - fix for CVE-2016-2342 (#1391916)
  - fix for CVE-2016-4049 (#1391919)


author: Michal Ruprich <mruprich@redhat.com> - 0.99.15-14
changelog:
  - Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory


author: Jiri Skala <jskala@redhat.com> - 0.99.11-3
changelog:
  - fix #498832 - bgpd crashes on as paths containing more 6 digit as numbers
  - corrected release number


author: Jiri Skala <jskala@redhat.com> - 0.99.12-1
changelog:
  - update to latest upstream version
  - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-22
changelog:
  - Remove fixed limit on number of autofs mount points (bug #1024097)
  - Print negative quota values properly (bug #1009397)


author: Jiri Skala <jskala@redhat.com> - 1.5-1
changelog:
  - Resolves: #555348 - radvd eats 100% CPU after interface comes back
  - Resolves: #555352 - radvd[11524]: sendmsg: Bad file descriptor
  - updated to latest upstream version - fixes bug #555348


author: Jiri Skala <jskala@redhat.com> - 1.5-5
changelog:
  - Resolves: #594399 - wrong users and groups creation in spec file
  - Resolves: #594329 - RPMdiff run failed


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.4.16-1
changelog:
  - Update to 1.4.16 (for Soprano 2, also lots of bugfixes).
  - Specify LGPL version in License tag.
  - Update URLs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.18-5.1
changelog:
  - Fixed XML entity expansion that could lead to information disclosure (CVE-2012-0037)
    Resolves: rhbz#804496


author: Prarit Bhargava <prarit@redhat.com> 1.0.0
changelog:
  - initial import of aer-inject
  - 0.1 from http://www.kernel.org/pub/linux/utils/pci/aer-inject/
  - http://git.kernel.org/?p=utils/pci/aer-inject/aer-inject.git;a=summary
  - initial import of mce-inject
  - 22b6fd9d6c53de44e612f31b78b964c3a10a24a1 from
    http://git.kernel.org/?p=utils/cpu/mce/mce-inject.git;a=summary


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.9.15-1
changelog:
  - Update to 0.9.15 (for redland 1.0.7, also lots of bugfixes)
  - Update minimum raptor version
  - BR perl(XML::DOM) (needed by the testsuite)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 5.7-36
changelog:
  - fixes based on review
  - Add dependency on diffutils.
  - Apply build tweaks patch from Debian (incl installing rcsfreeze).
  - BuildRequire autoconf instead of automake.
  - Actually configure instead of shipping a pregenerated conf.h (#226356).
  - Ship docs as PDF rather than troff source.
  - Run test suite during build.
  - Include COPYING.
  - Resolves: #543948


author: Adam Jackson <ajax@redhat.com> 1.6.0-10
changelog:
  - Don't Require: libao-devel at runtime (#820008)
  - rdesktop-1.6.0-ts2008-licence.patch: Fix licence handling against some
    versions of Terminal Services. (#831095)
  - rdesktop-1.6.0-cursor.patch: Fix cursor rendering for Windows Server 2008
    (#782494)
  - rdesktop-1.6.0-smart-card-lp64.patch: Fix smartcard support on 64-bit
    hosts (#772020, #680917)
  - rdesktop-1.6.0-scard-crash.patch: Fix a crash in smartcard support (#680926)


author: Soren Sandmann <ssp@redhat.com> 1.7.1-1
changelog:
  - Rebase to 1.7.1 (#852890, #902912, #914279)
  - Add patches from 
      http://sourceforge.net/p/rdesktop/patches/214/
    to rework redirect PDU handling (#701246)


author: Doug Ledford <dledford@redhat.com> - 1.0-6
changelog:
  - Tweak init script for LSB compliance
  - Tweak ifup-ib script to work properly with bonded slaves that need their
    MTU set
  - Tweak ifup-ib script to properly change connected mode either on or off
    instead of only setting it on but not turning it off if the setting changes


author: Doug Ledford <dledford@redhat.com> - 1.0-7
changelog:
  - Require a version of udev that's known to contain udevadm and support
    usage of udevadm trigger and udevadm settle
  - Update rdma.init to use the proper udev commands
  - Resolves: bz586594


author: Doug Ledford <dledford@redhat.com> - 1.0-8
changelog:
  - Update udev rules syntax to eliminate warnings emitted via syslog (bz603264)
  - Add new init script for starting/stopping nfs over rdma support
  - Require that the nfs-rdma service be down before stopping the rdma
    service (bz613437)
  - Change ifup-ib to properly account for the fact that the [ test program
    does not process tests in order and fail immediately on first failing
    test, resulting in error messages due to unquoted environment variables
    that don't need quoting in the second test due to the fact that the
    first test guarantees they exist.  Or that's how things should be, but
    they aren't, so rewrite tests to accommodate this fact. (bz612284)
  - Use ip instead of ifconfig as ifconfig knows it doesn't handle infinband
    hardware addresses properly (even though we don't care, we aren't using
    it for that) and prints out copious warning messages (bz613086)
  - Related: bz612284, bz613086


author: Doug Ledford <dledford@redhat.com> - 1.0-9
changelog:
  - Minor tweak to rdma init script to do the udevadm trigger command in two
    seperate calls since we can no longer match on the same item twice and
    have the command succeed for both match types.
  - Resolves: bz612234


author: Doug Ledford <dledford@redhat.com> - 1.0-10
changelog:
  - Fix ifup-ib script to be compatible with change to core function
    expand_config
  - Fix renaming of ib? devices to the name given in the ifcfg-* file
  - Fix the fact that once you down the rdma stack and reload it, the
    HWADDR line in ifcfg-* files no longer matches the address of the
    ports.  We now match only on the part of the HWADDR that doesn't
    change.
  - Fix rdma init script to know about cxgb4 adapters
  - Fix rdma init script to find all InfiniBand interfaces whether they
    use an ib? name or a custom name
  - Fix rdma init script to down all InfiniBand interfaces on rdma shutdown
    regardless of interface name
  - Fix rdma init script to find all ifcfg-* files that apply to ipoib
    interfaces without requiring that they be named ib?
  - Fix rdma init script to know to unload ib_qib module on stop
  - Add an ifdown-ib file that fixes the HWADDR not matching on the second
    or later times you down the rdma subsystem
  - Related: bz725016
  - Resolves: bz678947, bz721101


author: Doug Ledford <dledford@redhat.com> - 1.0-13
changelog:
  - Default to not loading the RDS stack by default as it has some known
    issues at the moment.
  - Resolves: bz747378


author: Doug Ledford <dledford@redhat.com> - 1.0-14
changelog:
  - Clear the umask before loading kernel modules otherwise the kernel
    modules inherit our umask and don't create the /dev/infiniband
    files with the proper permissions.
  - Resolves: bz748087


author: Doug Ledford <dledford@redhat.com> - 1.0-2
changelog:
  - Attempt to use --subsystem-match=infiniband in the rdma init script use
    of udevtrigger so we don't trigger the whole system
  - Add a requirement to stop opensm to the init script


author: Doug Ledford <dledford@redhat.com> - 3.3-1
changelog:
  - Fix an issue in the rdma script that caused rds_rdma to load
    when it shouldn't
  - Resolves: bz815622


author: Doug Ledford <dledford@redhat.com> - 3.3-3
changelog:
  - The fix to bug 808600 was noisy and resulted in bug 815999,
    silence the script
  - Resolves: bz815999


author: Doug Ledford <dledford@redhat.com> - 3.3-4
changelog:
  - Fix an issue in the ifup-ib script
  - Fix a problem with the setting of infiniband dev perms
  - Resolves: bz834428


author: Doug Ledford <dledford@redhat.com> - 3.10-1
changelog:
  - Bump version to match final kernel submission
  - Add support for P_Key interfaces to ifup-ib and ifdown-ib


author: Doug Ledford <dledford@redhat.com> - 3.10-2
changelog:
  - Somehow during editing I accidentally deleted a single character from
    the post scriptlet.  rpmdiff caught it, now I'm fixing it.
  - Resolves: bz990288


author: Doug Ledford <dledford@redhat.com> - 1.0-15
changelog:
  - No longer provide a rules file to create infinband devices, the kernel
    now creates them in the proper place all by itself
  - Change the LSB headers in the init script, they were wrong
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-16
changelog:
  - If we are being installed on a machine that has ib_ipoib module loaded,
    then this is likely because it is a machine being installed over IPoIB,
    so enable our init script
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-17
changelog:
  - Don't do lsmod in the %post script looking for ib_ipoib, anaconda
    loads it unconditionally.  Instead, anaconda has been modified to
    enable our init script if it installed over an IPoIB interface, so
    simply remove that portion of our %post script.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-20
changelog:
  - Name the cards slightly differently (upstream request)
  - Check for the ibacm program before trying to down the stack
  - Resolves: bz808600


author: Doug Ledford <dledford@redhat.com> - 6.6_3.15-1
changelog:
  - Change numbering scheme to be clearer: first number is redhat
    release this package is for (aka rhel6.6), second number is the
    upstream kernel that our kernel code comes from, aka 3.15.
  - Minor fix to init script to support cxgb4 and ocrdma and mlx5
    drivers properly
  - Add a dracut module to make sure all the needed InfiniBand
    kernel modules and support files make it on to the initrd
  - Resolves: 1064308


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-2
changelog:
  - Fix ipoib MTU issue
  - Fix shutdown ordering of NFSoRDMA code
  - Absorb mlx4/cxgb3/cxgb4 setup/module init code into our package
  - Resolves: bz1186498, bz1163527


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-4
changelog:
  - Fix modprobe file so command line opts passed to modprobe mlx4_core will
    work again
  - Resolves: bz1215857


author: Doug Ledford <dledford@redhat.com> - 2.0.4-2
changelog:
  - Add a modprobe conf file to automatically load rds_tcp and rds_rdma when
    we load the base rds module
  - Resolves: bz643113


author: Doug Ledford <dledford@redhat.com> - 2.0.6-1
changelog:
  - Update to latest upstream version
  - Initial Fedora import
  - Multiple fixes for package review
  - Related: bz739138


author: Harald Hoyer <harald@redhat.com> 1.5.1-1
changelog:
  - readahead-1.5.1
  - add syslog() to collector
  - translation update
  - let upstart set console owner for collector


author: Harald Hoyer <harald@redhat.com> 1.5.3-1
changelog:
  - fix readhead for new libaudit (bug #523400)
  - don't leak file descriptors (bug #525893)
  - also collect openat() calls
  - ignore files > 10MB


author: Harald Hoyer <harald@redhat.com> 1.5.5-1
changelog:
  - version 1.5.5
  - exit readahead-collector correctly, if audit is not enabled
  - make delay of services configurable
  - make minimum memory requirement configurable
  - log to /dev/kmsg in upstart scripts
  - upstart scripts updated for upstart 0.6 (#546077, #575114)
  - Resolves: rhbz#575119, rhbz#561486


author: Harald Hoyer <harald@redhat.com> 1.5.6-1
changelog:
  - version 1.5.6
  - various bugfixes by Raphael Geissert 
    (#527498, #527505, #527508, #527509, #528781, #528785)
  - Related: rhbz#543948


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Petr Hracek <phracek@redhat.com> - 1.17.2-2
changelog:
  - Update description
  - Remove other distros from SPEC
  - Changed license
  - Change Source0 to Sourceforge
  - Resolves: #981637


author: Jeremy Crafts <jcrafts@redhat.com> - 1.0.7-3
changelog:
  - New config options trace and no_schedule
  - New command line options --no_schedule, --conf, --to-stdout, --compressor, --from-stdin, --support, --offline, and --status
  - Add certificate chain verification to connection test
  - Revised debug output
  - Reduced set of environment vars used for command execution
  - OpenStack cluster support
  - Remember time of last successful upload
  - Resolves: bz1237112, bz1243028, bz1244113, bz1246919, bz1250384, bz1257242, bz1267299, bz1276055, bz1276130, bz1280353, bz1295929, bz1295935, bz1295939


author: Richard Brantley <rbrantle@redhat.com> - 1.0.12-0
changelog:
  - Respects NO_PROXY, HTTPS_PROXY environment variables
  - Fixes remove.conf configuration issues
  - Fixes timezone and file encoding related issues
  - Adds new support for wildcard directories and files
  - Fixes issue where invalid proxy would hang registration check
  - Fixes some test cases
  - Adds support for integration with Coordinators
  - Resolves: bz1368236


author: Dan Varga <dvarga@redhat.com> - 1.0.1-0
changelog:
  - Add man pages
  - New certificate chain for cert-api.access.redhat.com
  - Better auto configuration for satellite installations


author: Dan Varga <dvarga@redhat.com> - 1.0.5-0
changelog:
  - Automatically retry failed uploads when invoked via cron
  - Update python-requests dependency to >= 2.6
  - Add --unregister option
  - --no-gpg fix
  - Remove --weekly option
  - Add --quiet and --silent options
  - Default cron to quiet
  - Fix satellite 5 proxy auto configuration
  - Remove .registered and .unregistered files on uninstallation
  - lowercase -> lower()
  - Resolves: bz1248011, bz1248012, bz1248014, bz1248023


author: Jens Petersen <petersen@redhat.com> - 6-4
changelog:
  - update the release notes links for bn, gu, hi, ko, pa, ta, te, and zh-CN
    to point to their translations


author: Ray Strode <rstrode@redhat.com> 60.0.7-1
changelog:
  - Rename firstboot theme to RHEL
    Resolves: #566173
  - Add new plymouth artwork
    Related: #558608
  - Update backgrounds
  - Update anaconda
  - Drop gnome-splash
  - Drop empty screensaver dir
    Resolves: #576912
  - Drop grub splash at request of artists


author: Ray Strode <rstrode@redhat.com> 60.0.8-1
changelog:
  - Add large logo for compiz easter egg
    Resolves: #582411
  - Drop Bluecurve
    Related: #559765
  - Install logo icons in System theme
    Related: #566370


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Dennis Gregorovic <dgregor@redhat.com> - 5.90-6.0.0.31
changelog:
  - Only include the AddOn repos in the appropriate arches/variants
  - Update the Beta GPG key locations


author: Jon Masters <jcm@redhat.com> - 9.0.3-24
changelog:
  - Update the kmodtool and the percent kernel_module_package macro in
    accordance with the upstream packaging standard.
  - Resolves: #618518.


author: Jon Masters <jcm@redhat.com> - 9.0.3-25
changelog:
  - Update the kmodtool and correct kmod removal to delete package-specific files
  - Resolves: #622618.


author: Florian Festi <ffesti@redhat.com> - 9.0.3-40
changelog:
  - Fix verrel in kmodtool when used with variants
  - Resolves: #795577
  - Add %_smp_ncpus_max macro to allow adjusting the number of processors used
  - Resolves: #669638
  - Fix brp-java-repack-jars for jar files that contain non-standard permissions
  - Resolves: #822073


author: Florian Festi <ffesti@redhat.com> - 9.0.3-43
changelog:
  - Adjust location of kabi-whitelists
  - Resolves: #842761
  - Be stricter with she bang lines in find-requires
  - Resolves: #1179521


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-45
changelog:
  - Fix latest_kernel macro (#976462)
  - Permit using different python version for brp-python-bytecompile (#1252628)


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-46
changelog:
  - Remove aarch64 part from regex for the latest kernel. aarch64 is not
    supported in rhel-6 (#976462)


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - API update to bring in line with current version of Strata.
    Changes include:
     - Update to Recommendations API
     - Pagination of Cases
  - Additional fixes for proxy handling, and traceability of exceptions


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Downloads:
    - Fixes to download handling to avoid excessive memory use
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - Various updates to source, including:
    - Pagination of 'listcases'
    - Better debugability
    - Splitfile abilities to 'addattachment'
    - Recommendations support
    - Changes to 'downloadall' attachment handling


author: Nigel Jones <nigjones@redhat.com> - 0.9.3-1
changelog:
  - Pagination bug fix to fix an offsetting bug that could contribute
    to missing, or duplicate results.


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Diagnostics:
    - Opening a case will now trigger the case recommendations engine
      prior to opening the case.
    - Extracted backtraces from kernel vmcores can be passed to
      Ask Shadowman at the users request
  - Case Handling:
    - modifycase can be triggered on a selected case
    - Per above, opencase/diagnostics support
  - Plugins:
    - Ability for Vendor/L3 plugins
    - Sample 'ACMECorp' plugin + README.plugins in documentation directory.
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-2
changelog:
  - Various updates including;
    - Filtering and pagination of listcases
    - casegroup command
    - opencase is in the analyze and diagnose commands


author: Keith Robertson <kroberts@redhat.com> - 0.9.6-2
changelog:
  - Resolves: bz1035938
  - Resolves: bz1036699
  - Resolves: bz1036711
  - Resolves: bz1036772
  - Resolves: bz1036921
  - Resolves: bz1054445
  - Resolves: bz1060916


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-4
changelog:
  - Resolves: rhbz#983909
  - Resolves: rhbz#983896
  - Resolves: rhbz#983903
  - Also various issues with btextract


author: Keith Robertson <kroberts@redhat.com> - 0.9.7-1
changelog:
  - Allow the CLI to return more than 50 results
  - TypeError: Incorrect padding with a specific password and not working further.
  - diagnose filename output gives URLs to the XML file, not html, and XML displays author sso name
  - getcase subcommand of redhat-support-tool doesn't show the group name


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - Resolves: rhbz#1161141 - search plugin output gives URLs to the XML page, not html
  - Resolves: rhbz#1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - Resolves: rhbz#1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1174461
  - Resolves: rhbz#1174460
  - Resolves: rhbz#1146360
  - Resolves: rhbz#1130271
  - Resolves: rhbz#1104722 
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-3
changelog:
  - Resolves: rhbz#1192110
  - Resolves: rhbz#1209012
  - Resolves: rhbz#1243865
  - Resolves: rhbz#1243868
  - Resolves: rhbz#1243878
  - Resolves: rhbz#1243909
  - Resolves: rhbz#1243920
  - Resolves: rhbz#1243923
  - Resolves: rhbz#1275885
  - Resolves: rhbz#1284359
  - Resolves: rhbz#1284363


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - bz1161141 - search plugin output gives URLs to the XML page, not html
  - bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
  - Resolves: rhbz#1168414 - rhel7 vmcore offset
  - Resolves: rhbz#1174461 - skip already downloaded attachments
  - Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
  - Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1196297 - typos in opencase
  - Resolves: rhbz#1196316 - change menus when closing a case
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
  - Resolves: rhbz#1344800 - severity list is backwards
  - Resolves: rhbz#1356830 - opencase -o doesn't obfuscate input


author: Vivek Lakshmanan <vivekl at redhat.com> 0:1.4-3jpp.1.fc7
changelog:
  - Resync with JPP
  - Use the upstream tar ball as JPP does since they clean it off jars anyway
  - Use JPackage exception compliant naming scheme
  - Remove section definition
  - Install unversioned symlink
  - Add missing ghost for unversioned link
  - Add requires on java


author: Gavin Romig-Koch <gavin@redhat.com> 0.15-1
changelog:
  - Update version after release
  - fixed: subpackage name change causes dependency failures (RHEL 594047)


author: Gavin Romig-Koch <gavin@redhat.com> 0.16-1
changelog:
  - Insure correct PRODUCT and VERSION used in the Bugzilla and Strata plugins 
        under Anaconda (RHEL 586147)
  - Prepare for the switch from RHEL-bugzilla to Strata (RHEL 567972 partial)
  - allow canceling out of input with ctrl-D (RHEL 604030)
  - pretty up Newt IO a bit (RHEL 603067)
  - clean up documentation a bit (RHEL 604045)
  - remove the unused 'username' command line and configuration option. 
        (RHEL 604195)
  - fix the worst of the problems with the ftp plugin (RHEL 604782)(RHEL 604780)
  - Need to add -DFORTIFY_SOURCE=2 (RHEL 599342)
  - fix command line crash on empty or non-existant input file 
      (RHEL 594892)(Fedora 594890)
      with help from Adam Stokes <astokes@redhat.com>
  - make target buttons list vertically, improve 'Query' titles 
      (RHEL 594897)(Fedora 594895)
  - change the config file parser to make config names case sensitive 
      (Fedora 594863)(RHEL 594865)
      from Adam Stokes <astokes@redhat.com>
  - change "localsave" button to "local" (Fedora 594899)(RHEL 594901)
      from Adam Stokes <astokes@redhat.com>
  - fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)
      from Adam Stokes <astokes@redhat.com>
  - Strata client now handles 305 redirects (RHEL 591907)
  - Add po/ru.po to the list of PO files
  - fix so that we continue to build on RHEL/EPEL-5: old libcurl version
  - l10n: Updates to Ukrainian (uk) translation
      from yurchor <yurchor@fedoraproject.org> -


author: Gavin Romig-Koch <gavin@redhat.com> 0.17-1
changelog:
  - better fix for bug in localsave to /tmp
      (Fedora 595854)(RHEL 595855)(RHEL 607507)
  - Revert "fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)"
  - correct SyntaxWarning: name 'HAVE_gnomekeyring' is used prior to
      global declaration. (Fedora 604235)
      Author: Ales Kozumplik <akozumpl@redhat.com>
  - l10n: Updates to Polish (pl) translation
      Author: raven <raven@fedoraproject.org>
  - l10n: Updates to Ukrainian (uk) translation
      Author: yurchor <yurchor@fedoraproject.org>


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-1
changelog:
  - strata plugin buttonURLXxxx (RHEL 589704)
  - improve strata server testing scripts
  - reorg functions in strata_client_lib (RHEL 591922 related)
  - improved error checking of C compiler
  - Eliminate crash in DisplayXXXMessage


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-2
changelog:
  - fix crash in ftp plugin (Fedora 610870)(RHEL 609480)
  - Production/GA configuration of report, enable Strata plugin (RHEL 567972)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-3
changelog:
  - correct Obsoletes for report-*-RHEL-*
  - strata: handle self signed certs
  - strata-test.conf: setup URL translation
  - add html and xml response translation to strata_client_lib


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-5
changelog:
  - scp plugin: force password auth (RHEL 589702)
  - fix known hosts bug for strata scp target (RHEL 589702)
  - GTKIO: only show 'clickable' button if displaying the link is possible (RHEL 594827)
  - strata client needs to attach each file as separate file (RHEL 591922)
  - report cmd: check access to file immediatly (RHEL 614274)
  - Report throws traceback when there is a configuration for a non-present plugin (RHEL 614139)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-6
changelog:
  - Correct the order of target choices
  - remove http headers from user display (RHEL 621354)
  - correct GTKIO success dialog box (partial RHEL 621354)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-8
changelog:
  - honor the options in [main]  (RHEL 624676) (Fedora 635107)
  - Allow Strata plugin to send original filenames from report to server (Fedora 635118)(RHEL 626994)
  -  add _isa macro to spec file. (RHEL 672647)(Fedora 670215)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-9
changelog:
  - Correct the patch for Allow Strata plugin to send original filenames from report to server (RHEL 626994)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix incorrect default for VM.sh agent
    (resolve_incorrect_default_for_vm_agent.patch)
    Resolves: rhbz#599643


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-15.el6_0.1
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#640190


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-9
changelog:
  - More SAPDatabase updates to fix SAP workloads
  - Allow rgmanager SAP resource agent to manage SAP Webdispatcher & TREX
  - Resolves: rhbz#726500 rhbz#746996


author: Chris Feist <cfeist@redhat.com> - 3.9.2-10
changelog:
  - Fix to prevent /dev/shm being filled up by ocf_log debug messages
  - NFS client resource are now recovered properly when they are missing in
    /var/lib/nfs/etab
  - Resolves: rhbz#797922 rhbz#749713


author: Chris Feist <cfeist@redhat.com> - 3.9.2-11
changelog:
  - In LVM HA agent, remove missing PVs before attempting to remove the tag
  - Rgmanager now properly detects when clvmd is not running when using HA LVM
  - vm.sh now supports a 'tunnelled' option
  - Resource agent script now have common directory set properly
  - Fixed apache resource agent configuration with IPv6
  - fs-lib.sh now will now properly work with all return codes of mount
  - netfs now allows you to have the same NFS export mounted in different locations
  - The timeout in rhev-check has been increased to 90 seconds
  - Resolves: rhbz#772773 rhbz#729481 rhbz#712174 rhbz#784357 rhbz#742859 rhbz#728086 rhbz#799998 rhbz#727546


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12
changelog:
  - Fix for LVM HA agent for service relocation after leg failure (we now
    properly remove tag).
  - Resolves: rhbz#772773


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12.2
changelog:
  - Fixed an issue causing HA LVM to be unable to shutdown when device failures
    cause LVs to go missing
  - Resolves: rhbz#878023


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-21-8
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#1001519


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.4
changelog:
  - Med: oracledb.sh: Remove quotes around listener name
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#1031789
    Resolves: rhbz#1031791
    Resolves: rhbz#1031940
    Resolves: rhbz#1032778
    Resolves: rhbz#1032777


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.5
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051185


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.7
changelog:
  - High: Adds ability to monitor VirtualDomain instances using
    kvm without requiring libvirtd.

    Resolves: rhbz#1054327


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.10
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1115498


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes unreliable detection of nic device in IPaddr2
  - Fix fs-lib.sh regression in is_alive write test failure detection
  - Fix properly handle mysql when alternate user is specified.

    Resolves: rhbz#1181187
    Resolves: rhbz#1183735
    Resolves: rhbz#1183148


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Fixes rgmanager lvm agent's ability to exclusively activate
    volume groups on nodes with aliases

    Resolves: rhbz#1085109


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-26
changelog:
  - Match exact Oracle SID to avoid waiting for 90 seconds and killing other databases if their names include the name of the database you're trying to stop
  - Use DAD to check for address collision instead of ping for IPv6 in rgmanager
  - MySQL wait up to "startup_wait" seconds for mysqld to create PID
  - Handle failure state during stop in orainstance.sh
  - Add Oracle resource agents for Pacemaker

    Resolves: rhbz#1200639
    Resolves: rhbz#1191247
    Resolves: rhbz#1207285
    Resolves: rhbz#1234777
    Resolves: rhbz#1070479


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-27
changelog:
  - SAP HANA add Multiple Components One System (MCOS) support
  - sap_redhat_cluster_connector add support for "-" in hostnames

    Resolves: rhbz#1200903
    Resolves: rhbz#1269897


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-28
changelog:
  - Use IPv6 DAD for collision detection in IPaddr2
  - Add RAID segment type support for HA LVM
  - Fix Tomcat SELinux failed in enforcing mode
  - Add migrate_options parameter to VirtualDomain
  - Remove not-working tmpfs "support" from fs.sh
  - Fix tmpfile leak in mysql resource agent

    Resolves: rhbz#1276698
    Resolves: rhbz#1266173
    Resolves: rhbz#1280319
    Resolves: rhbz#1286650
    Resolves: rhbz#1024505
    Resolves: rhbz#1292054


author: Jan Pokorny <jpokorny@redhat.com> - 3.9.5-31
changelog:
  - Fix up for wrongly generated RNG schema for cluster configuration
    wrt. "action" tag

    Related: rhbz#1272587


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-32
changelog:
  - Add portblock resource agent for Pacemaker
  - Add Oracle Data Guard resource agent for rgmanager

    Resolves: rhbz#1302545
    Resolves: rhbz#1086838


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-2
changelog:
  - Fix 2+ simultaneous relocation crash
    (fix_2_or_more_simultaneous_relocation_crash.patch)
    Resolves: rhbz#577856
  - Fix meory leaks during relocation
    (fix_memory_leaks_during_relocation.patch)
    (fix_memory_leak_during_reconfig.patch)
    Resolves: rhbz#578249


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues from 3.0.12 release:
    Resolves: rhbz#588890, rhbz#588925, rhbz#589131, rhbz#588010
    * Rebase:
    Resolves: rhbz#582350
  - Stop build on ppc and ppc64.
    Resolves: rhbz#591000


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Pass timeouts to resource agents
    (pass_timeouts_to_resource_agents.patch)
    Resolves: rhbz#606480


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - Fix rgmanager init script to be more LSB compliant
    (rgmanager_init_lsb_compliant.patch)
    Resolves: rhbz#612110


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Make clulog filter correctly based on cluster.conf
    (make_clulog_filter_correctly.patch)
    Resolves: rhbz#609866


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Add failover domain documentation and other improvements
    (man_page_improvements.patch)
    Resolves: rhbz#557563


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-11
changelog:
  - rgmanager: Present flags in clustat output
    (present_flags_in_clustat_output.patch)
    Resolves: rhbz#634298
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#621562
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#621694
  - rgmanager: Add non-critical flag to resources
    (add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (allow_restart,disable_recovery_policy.patch)
    rgmanager: Ensure state is preserved across config changes
    (ensure_state_is_preserved_across_config_changes.patch)
    rgmanager: Fix handling of independent subtrees
    (fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (fix_corner_case_in_critical_non_critical_handling.patch)
    rgmanager: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    Resolves: rhbz#634277
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#639103
  - rgmanager: DBus notifications for service state changes
    (dbus_notifications_for_service_state_changes.patch)
    rgmanager: Clean up dbus notifications
    (clean_up_dbus_notifications.patch)
    rgmanager: Retry dbus if we get disconnected
    (retry_dbus_if_we_get_disconnected.patch)
    rgmanager: minor dbus cleanups
    (minor_dbus_cleanups.patch)
    rgmanager: Match fenced's option to disable DBus
    (match_fenced_s_option_to_disable_dbus.patch)
    rgmanager: allow dbus notification code to be disabled
    (allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#657756
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#661881
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#672841


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-3
changelog:
  - rgmanager: Fix race in shutdown vs. notification
    Resolves: rhbz#697446
  - rgmanager: Add 'disabled' configuration option
    Resolves: rhbz#723925


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-4
changelog:
  - rgmanager: Fix segfault caused by unref race
    Resolves: rhbz#697446
  - rgmanager: Fix uninitialized variable
    Resolves: rhbz#734730


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-5
changelog:
  - rgmanager: Clean up DBus concurrency
    rgmanager: Block signals when dealing with dbus
    Resolves: rhbz#741607


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-6
changelog:
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#635152
  - rgmanager: Fix clusvcadm message when run with -F
    Resolves: rhbz#727326
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743218
  - rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#744824
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#745226


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-13
changelog:
  - rgmanager: Fix a crash when dbus notifications are
    Resolves: rhbz#825375
  - rgmanager: Fix for deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-15
changelog:
  - rgmanager: Randomize node list when relocating with no
    Resolves: rhbz#831648
  - rgmanager: Fix return code when a service would deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-18
changelog:
  - rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#983296


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-20
changelog:
  - rgmanager: clusvcadm: If service doesn't exist, try
    Resolves: rhbz#952729
  - rgmanager: Don't crash if a resource agent does not
    Resolves: rhbz#1018079
  - rgmanager: Fix rg_test exit status on failures
    Resolves: rhbz#1033162
  - rgmanager: resrules: make expand_time buffer-less
    Resolves: rhbz#1036652
  - rgmanager: Fix error logging when building the resource
    Resolves: rhbz#1053739


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-22
changelog:
  - rgmanager: Fix potential NULL ptr deref in clustat
    Resolves: rhbz#1079207
  - rgmanager: Log a warning when the non-critical flag is
    Resolves: rhbz#1128877
  - rgmanager: Don't restart locally if failover domain
    Resolves: rhbz#1151199


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-25
changelog:
  - rgmanager: Fix bash syntax error in clunfslock
    rgmanager: clunfslock: copy state info if it exists
    Resolves: rhbz#1278943


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.1
changelog:
  - rgmanager: Reload the resource tree after quorum is regained
    if central processing is enabled.
    Resolves: rhbz#1335412


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.2
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#bz1335412
  - rgmanager: Check for NULL when attempting to access the member list
    Resolves: rhbz#bz1343345


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.3
changelog:
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1344640


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-29
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#1084053
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1342825


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    * rgmanager: fix compiler warning in clulog.c
    * rgmanager: Add resource-defaults section
    * rgmanager: Fix clustat help & version operations
    * rgmanager: Make clustat -f not query CCS/objdb
    * rgmanager: Pause during exit if we stopped services
    * rgmanager: Fix reference count handling
  - spec file update:
    * update spec file copyright date
    * drop all patches
    * update and clean configure and build section.
    * resync with fedora spec file
    Resolves: rhbz#707118
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Requires/Obsoletes on resource-agents to avoid file conflicts
    Resolves: rhbz#693517


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-2
changelog:
  - Improve rgmanager's exclusive prioritization handling
    Resolves: rhbz#690191
  - Fix bad passing of SFL_FAILURE up
    Resolves: rhbz#716231
  - Fix segfault on config reload
    Resolves: rhbz#692895
  - Make handling of failed services consistent
    Resolves: rhbz#673167


author: Tom Lane <tgl@redhat.com> 8.4.0-3
changelog:
  - Add -fno-strict-aliasing to CFLAGS per rpmdiff complaint, and -fwrapv
    too just to be on the safe side.
  Resolves: #596204


author: Joey Boggs <jboggs@redhat.com 6.5-20140613.0
changelog:
  - Swap tty/ttyS0 console ordering output rhbz#1099462
  - Add growpart packages to increase rootfs size on boot rhbz#1100286


author: Matt Wringe <mwringe@redhat.com> 0:1.6-0.1.r5.1jpp.2
changelog:
  - Remove script from build as the debugging tool is disabled due to it 
    containing proprietary code from Sun.


author: Lillian Angel <langel@redhat.com> - 0:1.7-0.3.r2pre.1.1
changelog:
  - Updated rhino-build.patch
  - License for treetable has been fixed. Re-included this code, and removed patch.
  - Resolves: rhbz#457336


author: Severin Gehwolf <sgehwolf@redhat.com> - 0:1.7R4-2
changelog:
  - Preserve nicer backward compatibility by using same jar file
    names and symlink names as 1.7-0.7.r2 did.


author: Miroslav Suchý <msuchy@redhat.com> 1.0.0-54
changelog:
  - Resolves: #684245 - lookup of the subscription-manager page via localized
    title is volatile, let's use its __module__ name
  - Related: #679217 - update translations


author: Miroslav Suchý <msuchy@redhat.com> 1.0.0-55
changelog:
  - Resolves: #684248 - mark module encoding as utf8, bind to rhn-client-tools
    gettext domain and mark unicode string as unicode


author: Michael Mraka <michael.mraka@redhat.com> 1.0.0-63
changelog:
  - the latest yum-rhn-plugin and rhn-client-tools require each other
  - Related: #710065 - handle unicode log messages
  - Resolves: #710065 - handle unicode error messages
  - Resolves: #684250 - correct priority for initial registration screen
  - Resolves: #710065 - registration: send correct hostname during kickstart
  - Resolves: #702107 - cogent error message for exception when listing child
    channels
  - Resolves: #702084 - rhn-channel: meaningful message when wrong username /
    password
  - Resolves: #559797 - fixed configuration file name
  - Resolves: #713548 - enable running rhn-channel against both RHN and RHN
    Satellite
  - Resolves: #665013 - do not send None for ipaddr in IPv6 only system


author: Milan Zazrivec <mzazrivec@redhat.com> 1.0.0-67
changelog:
  - Resolves: #729161 - default to RHSM in firstboot registration
  - Resolves: #729468 - firstboot dialogs polishing


author: Miroslav Suchý 1.0.0-77
changelog:
  - Related: #781421 - newt can not accept unicode
  - Resolves: #781421 - sys.stderr.write could not handle decoded unicode


author: Stephen Herr <sherr@redhat.com> 1.0.0.1-6
changelog:
  - Resolves: #949640 - Make timeout of yum-rhn-plugin calls through rhn-client-
    tools configurable
  - Client tools able to pass up socket info
  - Bumping build number so we don't conflict with Sat 5.6 beta package
    buildsStephen Herr <sherr@redhat.com>


author: Michael Mraka <michael.mraka@redhat.com> 1.0.0.1-21
changelog:
  - Resolves: #1147904 - minor fixes in es_ES, it_IT, de_DE, fr_FR translations
  - Resolves: #1147890 - minor fixes to bn_IN, gu_IN, hi_IN, kn_IN, ml_IN, or_IN,


author: Matej Kollar <mkollar@redhat.com> 1.0.0.1-30
changelog:
  - Related: #1147425 - we might be registered also via rhsm (mkollar@redhat.com)
  - Resolves: #1147425 - avoid "list index out of range" (mkollar@redhat.com)


author: Grant Gainey 1.0.0.1-34
changelog:
  - Resolves: #1266574 - teach up2date_client error-logging not to die on
    utf8-conversion issues (ggainey@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 1.0.0.1-36
changelog:
  - Resolves: #1260454 - clean up channels to subscribe before processing results
    (tkasparek@redhat.com)
  - Resolves: #1207058 - when checking package architecture during errata update,
    allow transition to and from noarch. (jpazdziora@redhat.com)
  - Resolves: #875728 - Clarify useNoSSLForPackages comment to match reality
    (ggainey@redhat.com)


author: Stephen Herr <sherr@redhat.com> 1.0.0-90
changelog:
  - Broken msgctxt in translations removedsherr@redhat.com
  - Resolves: #823551 - updating po and pot files, sending strings to
    translatorssherr@redhat.com


author: Stephen Herr <sherr@redhat.com> 1.0.0-93
changelog:
  - Resolves: #810315 - Adding new puplet screenshot as additional source to work
    around dist-git build problemsherr@redhat.com


author: Stephen Herr <sherr@redhat.com> 1.0.0.1-1
changelog:
  - Resolves: #810315 - Updating to new version of rhn-client-tools This is so we
    will create a new base tarball that includes the new puplet
    screenshot.sherr@redhat.com


author: Gennadii Altukhov <galt@redhat.com> 1.0.0.1-39
changelog:
  - Resolves: #1320468 - add newline before hostname in LoginPage label
    (galt@redhat.com)
  - 1019157 1241846 update strings in rhn-client-tools for RHEL 6.9
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 1.0.0.1-40
changelog:
  - Related: #1019157 - fix msgctxt for non-duplicate string IDs
    (tkasparek@redhat.com)
  - Resolves: #1019157 - remove msgctxt for non duplicate IDs
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 1.0.0.1-44
changelog:
  - Resolves: #1402402 - use correct product name in rhn-client-tools
    (tkasparek@redhat.com)
  - Resolves: #1417185 - change permissions to default provided by rhn-client-
    tools rpm (tkasparek@redhat.com)
  - Resolves: #1512988 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Jan Pazdziora 2.5.22-5
changelog:
  - Resolves: #585943, 583980 - replace fcntl.O_NDELAY with os.O_NDELAY, for
    newer Pythons.
  - Resolves: #585945, 583020 - need to initialize self.send_handler for the
    class Server as well.


author: Miroslav Suchý <msuchy@redhat.com> 2.5.22-10
changelog:
  - Resolves: #684815 - create idn_ascii_to_pune() and idn_pune_to_unicode(),
    which will take care about corner cases of encodings.idna


author: Stephen Herr <sherr@redhat.com> 2.5.22-13
changelog:
  - Related: #949650 - rhnlib update made necessary by error in rhncfg
  - Related: #949650 - Make timeout of yum-rhn-plugin calls through rhn-client-
    tools configurable
  - Resolves: #949650 - make Proxy timeouts configurable
    and xmlrpc protocol error


author: Stephen Herr <sherr@redhat.com> 2.5.22-14
changelog:
  - Resolves: #949650 - update bug numbers in commit message to be correct acl'd
    bugStephen Herr <sherr@redhat.com>


author: Miroslav Suchý <msuchy@redhat.com> 4.5.16-1
changelog:
  - 502234 - fixing issue where the rhnsd init script would fail to reload the configuration, a forward port of a patch from rhel 4 (jsherril@redhat.com)
  - 541682 - make env. for rhn_check consistent with osad (mzazrivec@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 4.9.2-1
changelog:
  - Pass version define to the compiler (Jan Pazdziora)
  - 533895 - if init script is run user return code 4
  - 533891 - if reloading fails return code 7
  - 533891 - implement force-reload
  - 533867 - init script, wrong parameter should return 2


author: Tomas Kasparek <tkasparek@redhat.com> 4.9.3-6
changelog:
  - Resolves: #1469682 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Chris Feist <cfeist@redhat.com> - 0.16.2-3
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#580575


author: Chris Feist <cfeist@redhat.com> - 0.16.2-6
changelog:
  - Init script now complies more closely with Fedora Guidelines
  - Passing a bad node to ccs_sync no longer results in a segfault
  - Resolves: rhbz#585126 rhbz#587526


author: Chris Feist <cfeist@redhat.com> - 0.16.2-27
changelog:
  - More fixes for ccs
  - Ricci no longer sends non-SSL over an SSL connection
  - Resolves: rhbz#652837 rhbz#614647


author: Chris Feist <cfeist@redhat.com> - 0.16.2-30
changelog:
  - Added ability to configure unfence section in ccs
  - Fixed --setmulticast to properly remove multicast settings
  - Resolves: rhbz#683192 rhbz#681646


author: Chris Feist <cfeist@redhat.com> - 0.16.2-32
changelog:
  - Add validation logic when first looking at the config file and after
    changing it
  - Resolves: rhbz#682868


author: Chris Feist <cfeist@redhat.com> - 0.16.2-34
changelog:
  - Fixed several minor documentation issues
  - Fixed --status errors
  - Fixed missing --debug option
  - Fixed traceback when using --help as an argument
  - Related: rhbz#682868


author: Chris Feist <cfeist@redhat.com> - 0.16.2-48
changelog:
  - Added ipv6 support (#724014)
  - Providing a useful error when passed a bad cluster.conf (#731113)
  - --checkconf on a local file now works (#738567)
  - Fixed issue with ccs backtrace with bad response (#721113)
  - Error gracefully when given a directory with '-f' (#734910)
  - Updated usage and man page for --start/--stop (#729168)
  - Show virtual machines when using --lsservices (#770637)
  - Added --getschema command and use remote schema for validation (#726722)
  - Log exec path and arguments when fork()/execv()ing in ricci and modcluster
  - Fixed ccs_sync to build with '-g' option.
  - If ricci user password isn't set, log a warning message
  - ccs_sync now returns 1 when there is an error syncing the file
  - Prevent deadlock when executing external programs such as yum
  - Resolves: rhbz#724014 rhbz#731113 rhbz#738567 rhbz#721113 rhbz#734910 rhbz#729168 rhbz#770637 rhbz#726722 rhbz#738797 rhbz#729011 rhbz#773383 rhbz#738008 rhbz#rhbz#736795


author: Chris Feist <cfeist@redhat.com> - 0.16.2-53
changelog:
  - --createcluster now verifies that a cluster.conf doesn't already exist.
  - Added support for altname & altmulticast to support RRP
  - Resolves: rhbz#797292 rhbz#758823


author: Chris Feist <cfeist@redhat.com> - 0.16.2-54
changelog:
  - Fix issue with non english languages with ricci detecting if a passwd
    is set
  - Resolves: rhbz#773383


author: Chris Feist <cfeist@redhat.com> - 0.16.2-56
changelog:
  - Fixed traceback when using ccs --stopall
  - Fixed return codes from ccs_sync
  - Fixed listing altmulticast with ccs --lsmisc
  - Ricci & ccs_sync should no longer crash when trying to update a cluster.conf 
    file that is too large 
  - Resolves: rhbz#811702 rhbz#841288 rhbz#839039 rhbz#815752 rhbz#818335


author: Chris Feist <cfeist@redhat.com> - 0.16.2-57
changelog:
  - Updated --addresource to properly add resources when rm section is missing
  - Fixed redirect which wouldn't allow creation of keys in a read-only folder
  - Resolves: rhbz#867019 rhbz#866894


author: Chris Feist <cfeist@redhat.com> - 0.16.2-60
changelog:
  - Fix issue causing conga to be unable to find/install packages due to line
    breaks in yum output
  - Resolves: rhbz#842939


author: Chris Feist <cfeist@redhat.com> - 0.16.2-63
changelog:
  - Synced cluster schema with latest cman, resource-agents, fence-agents
    fence-sanlock & fence_virt
  - Resolves: rhbz#878108


author: Chris Feist <cfeist@redhat.com> - 0.16.2-64
changelog:
  - Automatically add unfencing section when adding scsi fence agents
  - Prevent ccs_sync from segfaulting when multiple hostnames were provided
  - ccs --lsmisc now shows fence_daemon options
  - ccs --lsresourceopts has been added as an alias to --lsserviceopts
  - Resolves: rhbz#853890 rhbz#877863 rhbz#893574 rhbz#918555


author: Chris Feist <cfeist@redhat.com> - 0.16.2-69.el6_5.1
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1038272


author: Chris Feist <cfeist@redhat.com> - 0.16.2-70
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1025053


author: Chris Feist <cfeist@redhat.com> - 0.16.2-71
changelog:
  - Added --noenable/--nodisable options when starting/stoping cluster
  - Only propagate/activate cluster on last node when using --activate
  - ccs no longer returns 0 when --startall/--stopall fails on a node
  - If not hostname or filename is specified, use 'localhost'
  - Don't leave tempfiles around from schema tests
  - Resolves: rhbz#1090642 rhbz#917809 rhbz#1062402 rhbz#1024962 rhbz#996196


author: Chris Feist <cfeist@redhat.com> - 0.16.2-72
changelog:
  - Added '-s' option to disable SSLv2 connections to ricci
  - Added ability to configure RICCIOPTS variable in /etc/sysconfig/cluster
    or /etc/sysconfig/ricci
  - Resolves: rhbz#1075176


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-73
changelog:
  - ricci: fix end-use modules do not handle stdin polling correctly
  - ricci: fix missing deployment-time dependencies
  - ricci: prevent possible reboot loop
  - Resolves: rhbz#1076713 rhbz#1106842 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-74
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
  - ricci: enhance possible reboot loop prevention (avoid stale batches)
  - Resolves: rhbz#1055424 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-75
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1055424


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-75.1
changelog:
  - ricci: fix modules cannot return values due to bug in Module::empty_response
           (introduced with rhbz#1044122 fix)
  - Resolves: rhbz#1199561 (Z-stream of 1187745)


author: Chris Feist <cfeist@redhat.com> - 0.16.2-75.2
changelog:
  - ricci: disable SSLv2/SSLv3 by default, added '-x' option to enable SSLv2/3
  - Resolves: rhbz#1222411


author: Chris Feist <cfeist@redhat.com> - 0.16.2-77
changelog:
  - ricci: disable SSLv2/SSLv3 by default, added '-x' option to enable SSLv2/3
  - ccs: Added ability to add actions to vm services
         (and other resources/services)
  - ccs: Show error when a user is already authenticated and uses a bad
         password
  - ccs: Fixed error when piping output of ccs (specifically --getschema)
  - ccs: Using --setconf without hostname no longer produces a traceback
  - ccs: comments in cluster.conf should no longer produce a traceback when
         listing services
  - ccs: ccs should no longer produce anything if cluster.conf doesn't
         exist on remote node
  - ccs: ccs no longer triggers activation more than once in one command
  - Resolves: rhbz#1156157 rhbz#1126876 rhbz#1125954 rhbz#1125957 rhbz#1079032
    rhbz#1126872 rhbz#1084991 rhbz#1166589


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-78
changelog:
  - ricci: fix modules cannot return values due to bug in Module::empty_response
           (introduced with rhbz#1044122 fix)
  - Resolves: rhbz#1187745


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-79
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1210679


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-83
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp) incl. reflecting fix up for wrongly generated
    RNG schema for cluster configuration wrt. "action" tag
  - Resolves: rhbz#1272588


author: Chris Feist <cfeist@redhat.com> - 0.16.2-84
changelog:
  - ccs: provide option to backup cluster.conf files when editing
  - ccs: when stopping all nodes send an option to ricci to shutdown
    the cluster before shutting down all of the nodes
  - ccs: Added --usealt option to force ccs to try to connect to
    ricci on the alt node if the normal node interface is not responding
  - Resolves: rhbz#1079529 rhbz#1192637 rhbz#1188108


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-86
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp), now also incl. new "oradg" resource agent
  - Resolves: rhbz#1272588


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Jay Fenlason <fenlason@redhat.com> - 2-9
changelog:
  - Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
    Resolves: bz#733452


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#754752
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Don Zickus <dzickus@redhat.com> - 2-8.1
changelog:
  - Resolves: bz#749183
    Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
  - Resolves: bz#751356
    add ignorefail option to manpage


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#751374
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-5
changelog:
  - fix segfault on failed url retrieval (#557118)
  - fix verification error code depending on verbosity level (#557101)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-6
changelog:
  - Permit em64t architecture in query/erasure too (#547341)
  - Avoid accessing unrelated mount points in disk space checking (#495623)
  - Fix disk space reporting with erasures present in transaction (#561160)
  - Teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - Fix python match iterator regression wrt boolean representation
  - Support parallel python versions in python dependency extractor (#532118)
  - Python byte-compilation fixes + improvements (#538101)
  - Preserve empty lines in spec prep section (#573339)
  - Fix nosrc package generation regression
  - Avoid owning localized man directories through find_lang (#569536)
  - Lose useless symlink to berkeley_db_svc


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-17
changelog:
  - Allow self conflicts (#651951)
  - Add support for xz compression in rpm2cpio.sh (#674348)
  - Don't error out on already imported GPG keys (#680889)
  - Fix file conflict handling for uncolored files (#705115)
  - Fix file attribute handling with %defattr(-) (#705993)
  - Don't error out when trying to add the same signature again (#707449)
  - Fix signature checking (#721363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-19.1
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-20
changelog:
  - -D is for --define, not --predefine (#785236)
  - Add runtime detection for /usr move (#761000)
  - Fix brace matching on multiline constructs in perl.req (#752119)
  - Make pretrans scriptlet failure fail the package installation (#736960)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-25
changelog:
  - Fix Lua script current directory behavior (#746190)
  - Copy rpmpkgs "log" into place instead of moving (#746637)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-33
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163055)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-33
changelog:
  - Fix build-time double-free on file capability processing (#904818)
  - Fix include-directive getting processed on false branch (#920190)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163056)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163059)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-40
changelog:
  - Add check if source files aren't too big for payload (#833427)
  - Fix producing bogus dependencies by perl.req (#1024517, #1026750)
  - Fix color skipping of multiple files with the same content (#1170124)
  - Disable curl globbing for remote retrievals (#1076277)
  - Make rpm-build depend on redhat-rpm-config provide (#1122100)
  - Handle directory replaced with a symlink to one in verify (#1158377)
  - Restore default SIGPIPE handling for build scriptlets (#993868)
  - State --setperms and --setugids are mutually exclusive (#1119572)
  - Fix byteorder for 64 bit tags on big endian machines (#1040318)
  - File mode from %defattr is applied to directories with warning (#997774)
  - If an error occurs during printing log message then print the error
    on stderr (#1139444)
  - Error out on more than one --pipe option (#966093)
  - Extend PKG_CONFIG_PATH instead of override (#921969)
  - Add RPMCALLBACK_SCRIPT_START and RPMCALLBACK_SCRIPT_STOP. These events are
    not emitted by default (#606239)
  - Enable rpm to work with shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-41
changelog:
  - Add missing braces around the block of code (#606239)
  - Add missing patch for shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-43
changelog:
  - Fix for patch for color skipping (#1170124)
  - Add power64 macro (#1178083)
  - Plug segfault on NULL pointer dereference in debugedit (#903009)
  - Account for temporary disk-space requirements on update (#872314)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-57
changelog:
  - Very slow "rpm -q --specfile a.spec" if specfile has thousands of patches (#1383422)
  - Fix refcounting for Python hdr objects (#1438811)
  - Add sources to lua to prevent %autosetup failing in some cases (#1438815)


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-newinit for easier access to the init script template, move the
    template to %{_sysconfdir}/rpmdevtools, improve reload action example.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Improve newspec/newinit when only "-o foo" argument is given (#498588,
    thanks to Edwin ten Brink).
  - Try to get packager mail address for *Emacs rpm-spec-mode from ~/.fedora.cert
    if rpm-spec-user-mail-address is not set.
  - Add xz support to rpmdev-extract.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-packager - script for getting rpm packager info.
  - Use rpmdev-packager in rpmdev-bumpspec and rpmdev-init.el.
  - Fix rpmdev-extract MIME type comparisons with file(1) output containing
    parameters.


author: Ville Skyttä <ville.skytta@iki.fi> - 7.4-1
changelog:
  - Update to 7.4, fixes #215927 and #466353.
  - Patch spectool to make -s and -p to work as documented (Todd Zullinger).


author: Ville Skyttä <ville.skytta@iki.fi> - 0.89-1
changelog:
  - Update to 0.89; fixes #461610, #496735, #496737 (partially), #498107,
    - Sync Fedora license list with Wiki revision 1.44.
  - Parse list of standard users and groups from the setup package's uidgid file.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.91-1
changelog:
  - Update to 0.91; fixes #513811, #515185, #516492, #519694, and #521630.
  - Add dependencies on gzip, bzip2, and xz.
  - Sync Fedora license list with Wiki revision 1.49.
  - Move pre-2008 %changelog entries to CHANGES.package.old.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.92-1
changelog:
  - Update to 0.92; fixes #528535, and #531102 (partially).
  - Python byte compile patch applied/superseded upstream.
  - Add <lua> to list of valid scriptlet shells.
  - Sync Fedora license list with Wiki revision 1.53.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.93-1
changelog:
  - Update to 0.93; fixes #531102 and #555284.
  - Enable checks requiring network access in default config.
  - Disallow kernel module packages in default config.
  - Remove old X11R6 dirs from paths treated as system ones in default config.
  - Sync Fedora license list with Wiki revision 1.64.
  - Omit python-enchant and python-magic dependencies when built on EL.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.94-1
changelog:
  - Update to 0.94; rpm >= 4.8.0 spec file check fix included upstream.
  - Sync Fedora license list with Wiki revision 1.65 (#559156).


author: Adam Tkac <atkac redhat com> 0.17-51
changelog:
  - updated ipv6 patch due rpm 4.6 (#465053)
  - make in.rshd working on kernels without audit support (#448904)


author: Adam Tkac <atkac redhat com> - 0.17-60
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Michal Ruprich <mruprich@redhat.com> - 0.17-64.1
changelog:
  - Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-6
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments (#684933)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-7
changelog:
  - Use portreserve to protect rsync/tcp port (#786076)
  - Truncate a copied sparse file at the end of transaction
    (-S, --sparse option) (#737539)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-9
changelog:
  - Revert portreserve, as portrelease functionality needs to be
    implemented first in the rsync binary (#786076)


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-5.1
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #684932


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Peter Vrabec <pvrabec@redhat.com> 4.6.2-3.el6_1.3
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #742275


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1109155
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8.el6_5.1
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172164
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-4
changelog:
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202455
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224335
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1184722
  - add a patch to remove a limit on number of sources in imfile
    resolves: rhbz#1122802
  - add an explicit, versioned requirement on librelp to work
    around an incorrect soname
    resolves: rhbz#1191680
  - make logrotate tolerate missing log files
    resolves: rhbz#1252909
  - replace bundled docs with updated upstream documentation
    remove reference to queue.spoolDirectory
    drop empty NEWS file
    resolves: rhbz#1238451
    resolves: rhbz#1243293


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: kwizart < kwizart at gmail.com > - 1.2-4
changelog:
  - Disable dist tag
  - Preserve timestamp
  - Add license from Ralink
  - Improved summary and description


author: Lennart Poettering <lpoetter@redhat.com> - 0.5-1
changelog:
  - New release
  - By default don't demote unknown threads
  - Make messages less cute
  - Resolves: #530582


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid thread-related segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
    Do not ignore test failure on ppc64.
  - Resolves: rhbz#653824


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-7.1
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709963


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979300


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979300


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033500


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768831


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163993
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163993


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: David Lutterkort <dlutter@redhat.com> - 1.2.0-1
changelog:
  - Updated for new setup.rb
  - Simplified by removing conditionals that were needed for EL-4;
    there's just no way we can support that with newer rubygems


author: Vít Ondruch <vondruch@redhat.com> - 1.3.7-3
changelog:
  - Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
    - Related: rhbz#1002838.


author: Vít Ondruch <vondruch@redhat.com> - 1.3.7-4
changelog:
  - Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
    - Related: rhbz#1002839.


author: Steve Dickson <steved@redaht.com> 0.17-51
changelog:
  - Removed portmap dependency and re-worked when the user
    privilege are drop; allowing port registration with
    rpcbind. (#247985)


author: Honza Horak <hhorak@redhat.com> - 0.17-60
changelog:
  - fixed .include patch which had not been aplicable
  - fixed rusersd and rstatd initscripts
    Resolves: #697862
  - fixed rpmlint errors and warnings
    Resolves: #634922


author: Dan Horák <dan[at]danny.cz> 2:1.8.2-19
changelog:
  - fixed mismatch between man and -h in chshut (#563625)
  - use the merged ccw_init script (#533494, #561814)
  - Resolves: #561814, #563625
  - Related: #533494


author: Dan Horák <dan[at]danny.cz> 2:1.8.2-20
changelog:
  - updated lsdasd man page (#587044)
  - reinitialize array in lsqeth (#587599)
  - Resolves: #587044, #587599


author: Dan Horák <dan[at]danny.cz> 2:1.8.2-26
changelog:
  - follow symlinks in ziorep (#598574)
  - do not restrict group names to be alphanumeric in ts-shell (#598641)
  - znetconf --drive|-d option returning 'unknown driver' for qeth (#601846)
  - fix stack overwrite in cpuplugd (#601847)
  - fix cmm_min/max limit checks in cpuplugd (#606366)
  - set cpu_min to 1 by default in cpuplugd (#606416)
  - build with -fno-strict-aliasing (#599396)
  - remove reference to z/VM from the cpi initscript (#601753)
  - fix return values for the mon_statd initscript (#606805)
  - ignore backup and similar config files in device_cio_free (#533494)
  - Resolves: #598574, #598641, #601846, #601847, #606366, #606416, #599396, #601753, #606805
  - Related: #533494


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-27
changelog:
  - make znet_cio_free work also when no interface config files exists (#609073)
  - fix --dates option in zfcpdbf (#609092)
  - Resolves: #609073, #609092


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-28
changelog:
  - lsluns: uninitialized value on adapter offline (#611795)
  - zfcpdbf: Fix 'Use of uninitialized value' and output issues (#612622)
  - Resolves: #611795, #612622


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-29
changelog:
  - libzfcphbaapi library needs kernel-devel during build and thus is limited to s390x
  - libzfcphbaapi library rebased to 2.1 (#633414)
  - new zfcp tools added (#633409)
  - Resolves: #633414, #633409


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-30
changelog:
  - use lower-case in udev rules (#597360)
  - add support for the 1731/02 OSM/OSX network device (#636849)
  - xcec-bridge: fix multicast forwarding (#619504)
  - ziomon: wrong return codes (#623250)
  - qethconf: process devices with non-zero subchannel (#627692)
  - wait for completion of any pending actions affecting device (#631527)
  - add infrastructure code for new features (#631541)
  - hyptop: Show hypervisor performance data on System z (#631541)
  - cmsfs-fuse: support for CMS EDF filesystems via fuse (#631546)
  - lsmem/chmem: Tools to manage memory hotplug (#631561)
  - dumpconf: Prevent re-IPL loop for dump on panic (#633411)
  - ttyrun: run a program if a terminal device is available (#633420)
  - zgetdump/zipl: Add ELF dump support (needed for makedumpfile) (#633437)
  - znetconf: support for OSA CHPID types OSX and OSM (#633534)
  - iucvtty: do not specify z/VM user ID as argument to login -h (#636204)
  - tunedasd: add new option -Q / --query_reserve (#644935)
  - fdasd/dasdfmt: fix format 7 label (#649787)
  - cpuplugd: cmm_pages not set and restored correctly (#658517)
  - lsluns: Fix LUN reporting for SAN volume controller (SVC) (#659828)
  - lsluns: Accept uppercase and lowercase hex digits (#660361)
  - cmsfs: use detected filesystem block size (#651012)
  - device_cio_free: use the /proc/cio_settle interface when waiting for devices
  - Resolves: #597360, #636849, #619504, #623250, #627692, #631527, #631541, #631546
  - Resolves: #631561, #633411, #633420, #633437, #633534, #636204, #644935, #649787
  - Resolves: #658517, #659828, #660361, #651012


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-31
changelog:
  - dumpconf: Add DELAY_MINUTES description to man page (#676706)
  - iucvterm scriptlet need shadow-utils (#677247)
  - Resolves: #676706, #677247


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-32
changelog:
  - cmsfs-fuse: fix read and write errors in text mode (#680465)
  - cmsfs-fuse needs fuse (#631546)
  - Resolves: #680465
  - Related: #631546


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-33
changelog:
  - mon_statd: switch to using udevadm settle (#688140)
  - hyptop: Fix man page typo for "current weight" (#684244)
  - fdasd: buffer overflow when writing to read-only device (#688340)
  - Resolves: #688140, #684244, #688340


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-34
changelog:
  - cmsfs-fuse: Delete old file if renaming to an existing file (#690505)
  - cmsfs-fuse: Enlarge fsname string (#690506)
  - cmsfs-fuse: Unable to use cmsfs-fuse if $HOME is not set (#690514)
  - hyptop: Prevent interactive mode on s390 line mode terminals (#690810)
  - Resolves: #690505, #690506, #690514, #690810


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-37
changelog:
  - zfcp-hbaapi: Fix crash on HBA_FreeLibrary call (#713817)
  - s390utils-iucvterm should depend on grep (#711998)
  - don't enable cpuplugd by default (#700531)
  - chreipl enhancements (#632327)
  - improve memory ballooning with cpuplugd (#694465)
  - cmsfs-fuse: Unpredictable behaviour in filetype translation mod (#695380)
  - ziomon: Debugfs mount path check at /sys/kernel/debug (#700470)
  - ziomon: Option '--output' should be '--outfile' as documented (#700471)
  - dasdinfo: don't return 0 if action failed (#705404)
  - lsluns: fails to show all attached devices (#711775)
  - lsreipl: Prevent error messages for empty sysfs files (#718198)
  - cpuplugd: add cpu/cmm_min/max sanity checks (#718697)
  - cpuplugd: fix daemon startup race (#718745)
  - cpuplugd: Fix check for existing variable names (#725737)
  - cpuplugd: Fix typo and wording in man page (#726414)
  - fdasd: fix generation of disk label for option 'auto' and 'config' (#729610)
  - register libzfcphbaapi with /etc/hba.conf (#704505)
  - zipl: set C locale when running the helper script (#729981)
  - Resolves: #713817, #711998, #700531, #632327, #694465, #695380, #700470
  - Resolves: #700471, #705404, #711775, #718198, #718697, #718745, #725737
  - Resolves: #726414, #729610, #704505, #729981


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-39
changelog:
  - zfcpdbf: Fix off by minus one in month of timestamps (#730978)
  - cpuplugd: fix config file parsing (#732739)
  - dumpconf: Do not use DELAY_MINUTES for restart (#736035)
  - qetharp: fix buffer overflow (#736397)
  - Resolves: #730978, #732739, #736035, #736397
  - Related: #704505


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-40
changelog:
  - af_iucv manpage: add HiperSockets transport (#738329)
  - lsqeth: add hsuid attribute (#738330)
  - lsluns: check for required SCSI generic (sg) functionality (#738340)
  - lsdasd,lscss: suppress error messages when working on unsettled sysfs tree (#738341)
  - Resolves: #738329, #738330, #738340, #738341


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-41
changelog:
  - lsmem/chmem: Fix handling of memory holes (#740302)
  - fix build of libzfcphbaapi when multiple kernel-devel packages are installed
  - Resolves: #740302


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-42
changelog:
  - cmsfs-fuse: Fix file size calculation for files larger than 2 GB (#745936)
  - cmsfs-fuse: Fix big write requests (#745938)
  - cmsfs-fuse: Multiple write requests for fixed record format files (#745939)
  - cmsfs-fuse: Fix EOF detection for fixed record format files (#745940)
  - cmsfs-fuse: Fix block allocation on large disks (#746195)
  - cmsfs-fuse: Add support for FBA-512 disks (#746201)
  - cmsfs-fuse: Update the number of records on disk full condition (#746202)
  - Resolves: #745936, #745938, #745939, #745940, #746195, #746201, #746202


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-43
changelog:
  - zipl: Remove DEFAULT_RAMDISK_ADDRESS (#632347)
  - qethconf: Message catalog (#633532)
  - kdump: Add s390-tools kdump support (#738863)
  - dasdstat: Add new zconf tool dasdstat (#738870)
  - qetharp: support ipv6 for query arp cache for HiperSockets (#738873)
  - lsmem/chmem: Fix memory device size calculation (#747937)
  - ttyrun: Introduce verbose option for syslog messages (#769416)
  - xcec-bridge: HiperSockets Network Concentrator: correct warning (#772576)
  - zipl: Add sync to ensure that all data has been written to disk (#783161)
  - qethconf: fix/improve IPv6 address handling (#785761)
  - znetconf: layer autodetection not working under z/VM 6.x (#785762)
  - cmsfs-fuse: Use pread/pwrite if mmap'ing the whole disk fails (#797937)
  - Resolves: #632347, #633532, #738863, #738870, #738873, #747937, #769416
  - Resolves: #772576, #783161, #785761, #785762, #797937


author: Dan Horák <dhorak@redhat.com> 2:1.8.2-47
changelog:
  - mon_statd: fix stopping of unused records (#809510)
  - fixed a typo in CTC initialization
  - Resolves: #809510


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-49
changelog:
  - ziomon: Fix handling of multiple multipath devices (#818599)
  - lsdasd: fix manpage and returncode (#828145)
  - lsluns: Fix checks for scsi generic (sg) functionality (#828146)
  - lsluns: Check SCSI registration in loop, after LUN0&WLUN unit_add (#837311)
  - zconf: Allow SCM access via EADM subchannels (#847087)
  - lszcrypt: Add support for CEX4 crypto card (#847088)
  - zipl: Flush disk buffers before installing IPL record (#857815)
  - zipl.conf must be owned by s390utils-base (#818877)
  - Resolves: #818599, #828145, #828146, #837311, #847087, #847088, #857815, #818877


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-50
changelog:
  - ziomon: follow symlinks to find multipath devices (#883456)
  - dbginfo.sh: Improvements on data collection and speed (#887336)
  - ziomon: cope with scsi disks not part of multipath device (#906836)
  - s390: Fuzzy live dump for System z (#929261)
  - dasd: add safe offline interface (#929263)
  - cio: Provide PCHID mapping (#967014)
  - dbginfo.sh: Improvements on logging, content and collecting sysfs (#973235)
  - dbginfo.sh: enhancement for cryptograhic adapters (#974180)
  - zfcp-hbaapi: find sg dev without deprecated sysfs (#948343)
  - zfcp-hbaapi: correctly convert WWN and LUN strings to u64 (#951585)
  - Resolves: #883456, #887336, #906836, #929261, #929263, #967014, #973235, #974180, #948343, #951585


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-51
changelog:
  - dbginfo.sh: Avoiding exclusion list for pipes in sysfs (#996180)
  - zgetdump: Fix ELF header size calculation (#997359)
  - zipl: Fix zipl "--force" option for DASD multi-volume dump (#997360)
  - Resolves: #996180, #997359, #997360


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-52
changelog:
  - fix zFCP device discovery in anaconda GUI (#1009897)
  - zipl: Use "possible_cpus" kernel parameter (#1016181)
  - dbginfo.sh: Add missing man page (#1017854)
  - fdasd: fix segmentation fault during config file parsing (#1020364)
  - dbginfo.sh: enhancements for script execution and man page (#1031143)
  - dbginfo.sh: avoid double data collection (#1032061)
  - zdsfs: add new tool to allow to access z/OS legacy data directly on the DASD storage devices (#1053832)
  - lszcrypt: list EP11 capability (#1080582)
  - dbginfo.sh: Add collection of journalctl (#1088328)
  - znetconf: Handle removal of offline'd ccwgroup devices (#1094376)
  - lsqeth: put grep regex in quotes (#1107779)
  - Resolves: #1009897, #1016181, #1017854, #1020364, #1031143, #1032061, #1053832
  - Resolves: #1080582, #1088328, #1094376, #1107779


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-55
changelog:
  - zipl: Re-write boot loaders in C (#1053824)
  - dasdfmt: increase speed of dasdfmt (#1053828)
  - cio: Provide robustness against missing interrupts to internal IO (#1053829)
  - cpuplugd: update default sysconfig file (#1142415)
  - lsdasd: add path information (#1148118)
  - lsqeth: Add support for switch port attributes (#1148126)
  - fdasd: Add new partition type for IBM GPFS (#1148128)
  - dbginfo.sh: Add option to specify directory for data collection (#1148744)
  - dasdstat: avoid inconsistent data due to multiple reads/seeks (#1186407)
  - zfcpconf.sh tries to online a zfcp device multiple times (#1161726)
  - Resolves: #1053824, #1053828, #1053829, #1142415, #1148118, #1148126, #1148128, #1148744, #1186407, #1161726


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-57
changelog:
  - remove bashism from s390.sh (#1203680)
  - remove bashism from zfcpconf.sh (#1161726)
  - dbginfo.sh: Query virtual network settings for VM guests (#1211281)
  - dbginfo.sh: Extend data collection for libvirt and multipath (#1211282)
  - Resolves: #1203680, #1211281, #1211282
  - Related: #1161726


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-58
changelog:
  - zgetdump: Add support for v3 dump structure brought in by zipl rebase (#1218061)
  - ziomon/ziorep: fix wrong assumption of 0.0.xxxx busids (#1223722)
  - Resolves: #1218061, #1223722


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-59
changelog:
  - lszfcp: display of incorrect device types (#1257063)
  - lsluns: do not scan FCP devices no longer online or in bad state (#1259821)
  - cmsfs-fuse: Fix time stamp handling for data sets (#1262936)
  - cpuplugd: load the cmm kernel module on start (#1202834)
  - Resolves: #1257063, #1259821, #1262936, #1202834


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-60
changelog:
  - dbginfo.sh: Grant access of collected data only to root user (#1303137)
  - dbginfo.sh: Replace plain text passwords to asterisks (#1303140)
  - chmem: fix memory block number calculation with memory holes (#1303141)
  - Resolves: #1303137, #1303140, #1303141


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-61
changelog:
  - zipl/boot: fix failed start subchannel in FBA loader (#1353261)
  - zipl: Fix installation on multipath target with failed paths (#1373572)
  - Resolves: #1353261, #1373572


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-62
changelog:
  - libzfcphbaapi: fix scriptlets (#1395329)
  - zipl: fix segmentation fault for -d on multipath targets (#1415116)
  - Resolves: #1395329, #1415116


author: Dan Horák <dhorak@redhat.com> - 2:1.8.2-63
changelog:
  - lscss: allow to specify devices from ssid > 2 (#1416418)
  - cpuplugd: fix start on LPAR (#1416831)
  - Resolves: #1416418, #1416831


author: Warren Togami <wtogami@redhat.com> - 2.29.5-0.1.rc2
changelog:
  - Update to 2.95.5-rc2
  - glade removed, replaced by GNOME Builder 
  - /etc/desktop-profile moved to /etc/sabayon/profiles
    Manual Migration:
    mv /etc/desktop-profiles/*.xml /etc/sabayon
    mv /etc/desktop-profiles/*.zip /etc/sabayon/profiles


author: Warren Togami <wtogami@redhat.com> - 2.29.91-1
changelog:
  - 2.29.91 with important bug fixes
    Saves and Restores File Permissions
    Details pane is now less confusing
    Common Editor Crasher Fixed


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - Fix profile saving if file/folder names contain an apostrophe (#654567)
  - Fix sabayon crash when getting details of a profile (#674012)


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-15
changelog:
  - resolves: #1165750 - Fix guid retrieval for published printers.
  - resolves: #1163383 - Fix 'net ads join -k' with existing keytab entries.
  - resolves: #1195456 - Fix starting daemons on read only filesystems.
  - resolves: #1138552 - Fix CPU utilization when re-reading the printcap info.
  - resolves: #1144916 - Fix smbclient NTLMv2 authentication.
  - resolves: #1164336 - Document 'sharesec' command for
                         'access based share enum' option.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1290706 - CVE-2015-5299
  - related: #1290706 - CVE-2015-5296
  - related: #1290706 - CVE-2015-5252
  - related: #1290706 - CVE-2015-5330


author: Andreas Schneider <asn@redhat.com> - 3.6.23-26
changelog:
  - resolves: #1322686 - Fix CVE-2015-5370
  - resolves: #1322686 - Fix CVE-2016-2110
  - resolves: #1322686 - Fix CVE-2016-2111
  - resolves: #1322686 - Fix CVE-2016-2112
  - resolves: #1322686 - Fix CVE-2016-2115
  - resolves: #1322686 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-24
changelog:
  - resolves: #1271763 - Fix segfault in NTLMv2_generate_names_blob()
  - resolves: #1261265 - Add '--no-dns-updates' option for 'net ads join'


author: Andreas Schneider <asn@redhat.com> - 3.6.23-29
changelog:
  - resolves: #1322687 - Fix CVE-2015-5370
  - resolves: #1322687 - Fix CVE-2016-2110
  - resolves: #1322687 - Fix CVE-2016-2111
  - resolves: #1322687 - Fix CVE-2016-2112
  - resolves: #1322687 - Fix CVE-2016-2115
  - resolves: #1322687 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1329967 - Fix netlogon credential checks
  - resolves: #1329975 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1391256 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.24-44
changelog:
  - resolves: #1451105 - Fix trusted domain handling in winbind
  - resolves: #1431000 - Fix crash while trying to authenticate with a disabled
                         account
  - resolves: #1467395 - Add 'winbind request timeout' option


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.9-169
changelog:
  - resolves: #1105499 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108840 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-54.rc4
changelog:
  - Fix summary and description of dc subpackages.
  - resolves: #896142
  - Remove conflicting libsmbclient.7 manpage.
  - resolves: #896240


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-56.rc4
changelog:
  - Fix libwbclient.so.0 symlink.
  - resolves: #882338
  - Fix correct linking of libreplace with cmdline-credentials.
  - resolves: #911264


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-57.rc4
changelog:
  - resolves: #984809 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073913 - Fix CVE-2012-6150.
  - resolves: #1073913 - Fix CVE-2013-4496.
  - resolves: #1073913 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105501 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108842 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105571 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073356 - Fix CVE-2012-6150.
  - resolves: #1073356 - Fix CVE-2013-4496.
  - resolves: #1073356 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105502 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108843 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105572 - CVE-2014-0178: Uninitialized memory exposure.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290708 - CVE-2015-7540
  - related: #1290708 - CVE-2015-5299
  - related: #1290708 - CVE-2015-5296
  - related: #1290708 - CVE-2015-5252
  - related: #1290708 - CVE-2015-5330


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290709 - CVE-2015-7540
  - related: #1290709 - CVE-2015-5299
  - related: #1290709 - CVE-2015-5296
  - related: #1290709 - CVE-2015-5252
  - related: #1290709 - CVE-2015-5330


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - update udev rules for Fujitsu fi-6110 device (#987890)
  - fix bogus changelog dates
  - fix source URLs


author: Nils Philippsen <nphilipp@redhat.com> 1.0.14-3
changelog:
  - merge review (#226389):
    - add version info to obsoletes/provides
    - no config files in /usr
    - use %configure macro
  - add dist tag


author: Nils Philippsen <nils@redhat.com> 1.0.14-6
changelog:
  - don't require libieee2384-devel, libjpeg-devel but require fixed
    sane-backends-devel for building


author: Nils Philippsen <nils@redhat.com> - 1.0.14-9.2
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: David Teigland <teigland@redhat.com> - 2.5-1
changelog:
  - Resolves: rhbz#826022 rhbz#830736 rhbz#830848 rhbz#831906 rhbz#832935 rhbz#840063 rhbz#841305 rhbz#843073


author: Sherry Yu <syu@redhat.com> - 0.91
changelog:
  - Naming change from sap_prepare to sap-prepare
  - Detailed log output
  - In function virtrpms: for RHEV Hypervisor, recommend to check SAP Note
    1400911 for setting up host monitoring on RHEV
  - New function check_utilrpms: install utility rpms used in the sap-prepare
    script, e.g. syslinux rpm for gethostid()
  - Add one section Recommendations at the end of the log file, containing
    recommended changes that have to be carried out manually
  - Add a Recommendations section at the end of the log file, for CHECK_ONLY
    mode, that contains the recommended settings
  - Add command-line argument "-h" for Help Message
  - Move java rpms to variable JAVARPMS, as IBM JDK becomes obsolete on Oct. 2012
  - Add global variable VIRTRPMS
  - Remove [-f config] argument in usage - recommended configurations are not to
    be changed
  - In check_fqdn: keep the backup file as
    /etc/sysconfig/network.sap-prepare-<timestamp>
  - In check_security add: if SELINUX=disabled in /etc/sysconfig/selinux, give
    recommendation to set it to Permissive. If SELINUX=permissive but getenforce
    returns 1, setenforce 0. For SELINUX=enforcing, to update the config file,
    keep backup file as /etc/sysconfig/selinux.sap-prepare-<timestamp>; if
    CHECK_ONLY==1, give recommendations
  - Split check_rhn into check_rhn, check_rpms, check_ibmjdk, and check_links
  - Add a variable SAP_NOTE_RHEL6
  - Remove check_users which is not used to keep the script clean
  - Remove variable VERBOSE
  - Rename prepare_environment to check_env, to be consistent with the naming
    convention
  - Move the code of setting kernel parameters from main body to check_env
  - Add SYB_VARS
  - In check_env add the setting of kernel parameters for Sybase
  - In check_ntp ntpdate is removed as ntpd is preferred
  - Remove update_limits_conf because it's no longer needed in RHEL6


author: Sherry Yu <syu@redhat.com> - 0.92
changelog:
  - Changed the name to sapconf
  - Move kernel parameters to /etc/sysconfig/sap, other than /etc/sysctl.conf
  - Add /etc/rc.d/init.d/sapconf and S99sapconf links in /etc/rc2.d, /etc/rc3.d,
    and /etc/rc5.d
  - Removed check_utilrpms() and defined the util rpms as dependency in the rpm
    spec file
  - Removed check_ibmjdk()


author: Frank Danapfel <fdanapfe@redhat.com> - 0.93
changelog:
  - removed /etc/init.d/sapconf service, since this is now done via tuned
  - cleaned up requirements section in spec file
  - added changelog to spec file


author: Frank Danapfel <fdanapfe@redhat.com> - 0.93
changelog:
  - replaced vhostmd with vm-dump-metrics for KVM guest installs
  - re-added function to set user/process limits
  - changed check_ntp to only check if ntpd is running


author: Nils Philippsen <nils@redhat.com> - 0.93-1
changelog:
  - remove obsolete tuned patch
  - fix changelog dates
  - require specific tuned version, prep for upcoming RHEL versions
  - clean up script header
  - don't mess around with SELinux settings, just report
  - use bzipped tarball


author: Nils Philippsen <nils@redhat.com> - 0.95-1
changelog:
  - ignore whitespace and empty lines when checking /etc/hosts
  - use mktemp to create temporary host file
  - add release numbers to changelog entries


author: Jan Grulich <jgrulich@redhat.com> - 0.98-1
changelog:
  - add Man-Page
  - correctly detect VMware virtual guest
  - do not write to /etc/security/limits.conf directly
  - correctly edit /etc/hosts


author: Jan Grulich <jgrulich@redhat.com> - 0.98-5
changelog:
  - add information about KVM to manpage 
    resolves: bz#1123917
  - set correct vm.max_map_count value
    resolves: bz#1168422
  - do not wait for input from keyboard and read from file instead
    resolves: bz#1173861
  - add information about sapconf version
    resolves: bz#1174321


author: Than Ngo <than@redhat.com> - 0.98-8
changelog:
  - Resolves: bz#1382312, fix depends on dmidecode on s390x/ppc64
  - Resolves: bz#1362700, sapconf doesn't recognize RHSM or Satellite 6 repository id's


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Jakub Filak <jfilak@redhat.com> 0.10-1
changelog:
  - New upstream version
    - Fix a segmentation fault in sr_rpm_package_uniq()
    - Respect kernel flavor when parsing package name
    - Parse backtrace without Thread header
    - Fix koops json output if there are no modules
    - Add support for multiple koops stacks


author: Jakub Filak <jfilak@redhat.com> 0.11-1
changelog:
  - New upstream version
    - Make all python objects hashable
    - Improve memory management in rpm module
    - Extend the list of normalized functions
    - Add command for debugging duphashes to satyr utility


author: Martin Milata <mmilata@redhat.com> 0.12-1
changelog:
  - New upstream version
    - JVM frames normalization
    - Add C++ symbol demangling
    - Unsigned overflow bugfixes
    - Fix malformed uReports for Java


author: Martin Milata <mmilata@redhat.com> 0.14-1
changelog:
  - New upstream version
    - Ported to elfutils-0.158 unwinder API
    - Frame fingerprinting disabled
    - Bugfixes


author: Jakub Filak <jfilak@redhat.com> 0.15-1
changelog:
  - New upstream version
    - uReport enhancements (DESKTOP_SESSION, auth_data, missing values)
    - Enhance the backtrace quality algorithm to tackle MiniDebuginfo
    - Support unusual Python and Java exceptions
    - Deal with infinite recursion in backtraces
    - Bugfixes


author: Martin Milata <mmilata@redhat.com> 0.16-1
changelog:
  - New upstream version
    - Add support for unwinding from core dump hook
    - Add support for Ruby uReports
    - Bugfixes


author: Ville Skyttä <ville.skytta at iki.fi> - 0:6.5.3-2jpp
changelog:
  - Apply two patches for known limitations from
    http://saxon.sourceforge.net/saxon6.5.3/limitations.html
  - Make the command line script use xml-commons-resolver if it's available.
  - Include man page for command line script.
  - Add patch to fix command line option handling and document missing options.
  - New style versionless javadoc dir symlinking.
  - Crosslink with local J2SE javadocs.
  - Add missing jdom-javadoc build dependency.


author: <kwenning@redhat.com> - 1.2.1-30
changelog:
  - init-patch updated
  - Rebuild against RHEL-6.9
    Resolves: rhbz#1375244

  -* Mon Apr 4 2016 <kwenning@redhat.com> - 1.2.1-9
  - use SBD_OPTS when calling sbd
    Resolves: rhbz#1313246


author: <kwenning@redhat.com> - 1.2.1-31
changelog:
  - init-patch updated
  - added CONFDIR & INITDIR for distro indep init
  - added stripped down manpage
    Resolves: rhbz#1375244


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Ondrej Vasik <ovasik@redhat.com> - 2.0.1-5
changelog:
  - based on further discussion the old approach with
    conflicts will be used, reverting previous two changes(#604578)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-1
changelog:
  - Update to sblim-cmpi-fsvol-1.5.1
    Resolves: #694506
  - Add Linux_Ext4FileSystem class support
    Resolves: #663833


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-2
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921482


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-1
changelog:
  - Update to sblim-gather-2.2.3
    Resolves: #633991
  - Move init script to the correct place
    Resolves: #626769
  - Fix return codes from init script
    Resolves: #627919
  - Register Linux_MetricRegisteredProfile class under the root/interop namespace
    Resolves: #713174
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #712043


author: mrueckert@suse.de
changelog:
  - update to 0.4.2
    ind_helper.c, ind_helper.h:
    Bugs: 1203849 (side effect) made a lot of function arguments
    const in order to remove the cmpi-base warnings.
    added sblim-indication_helper-0.4.2_warnings.patch
    fixes a small warning regarding pointer size


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: <praveen_paladugu@dell.com>- 1.3.4-9
changelog:
  - LocalInterfaceInvokeMethodFix: CHARS and string were handled the same.
  -  They are differentiated in this patch.
  - destroyThreadKey: Local sfcb connect was creating thread specific data
  -  associating a key to it. This won't get deleted resulting in crash
  -  of opwsman, sfcc and sfcb. This patch deletes that data.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)
    Resolves: #868905
  - Remove tog-pegasus requires
    Resolves: #745264


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-3
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239117


author: Shawn Wells <shawn@redhat.com> 0.1-16.rc1
changelog:
  - [bugfix] RHEL6 no_empty_passwords remediation script overwrote
    system-auth symlink. Added --follow-symlink to sed command.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-1
changelog:
  - Upgrade to upstream 0.1.21 version
  - Drop C2S profile patch since it has been adopted upstream
  - Include datastream forms of benchmarks for Red Hat Enterprise Linux 6
    and Red Hat Enterprise Linux 7
  - Include the kickstart file for United States Government Configuration
    Baseline (USGCB) profile for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-2
changelog:
  - Re-implement nodev, noexec, and nosuid removable media OVAL checks
    (RH BZ#1185426)
  - Don't include the 'test' profile into the SCAP content (RH BZ#1199946)
  - Document USGCB profile kickstart availability for Red Hat Enterprise Linux 6
    in the scap-security-guide manual page (RH BZ#1133963)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-3
changelog:
  - Rebuild scap-security-guide RPM against openscap >= 1.0.9 in order the
    upstream SCAP Security Guide logo to be rendered properly in the generated
    HTML guide


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-4
changelog:
  - Update R / BR to lightweight openscap-scanner >= 1.0.10-2 package
    (RH BZ#1243396)
  - Update URL to point to official SCAP Security Guide GitHub repository


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-1
changelog:
  - Rebase to upstream 0.1.27 version (RH BZ#1267509, RH BZ#1284045,
    RH BZ#1270329, RH BZ#1250895, RH BZ#1270710, RH BZ#1223865)
  - Perform the spec changes necessary for the rebase:
    * Update path to remediation functions library, list of provided
    kickstart files, path to scap-security-guide(8) manual page, path
    to LICENSE file
    * Drop:
    - scap-security-guide-0.1.21-dev-shm-removable.patch
    - scap-security-guide-0.1.21-dont-include-the-test-profile.patch
    patches since they have been merged upstream
    * Replace:
    - scap-security-guide-0.1.21-document-kickstart-in-manual-page.patch
    with its updated:
    - scap-security-guide-0.1.27-document-kickstarts-in-manual-page.patch
    version to also document inclusion of new kickstart files for Red Hat
    Enterprise Linux 6 that are available in upstream's 0.1.27 release
    * Introduce the new scap-security-guide-doc subpackage (to contain the
    HTML formatted documents containing security guides that have been
    generated from XCCDF benchmarks present in the scap-security-guide package)
    * Include the datastream versions of Firefox and Java Runtime Environment
    (JRE) benchmarks


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-2
changelog:
  - Modify the upstream provided kickstart files for Red Hat Enterprise Linux 6
    to use internal scap-security-guide RPM package rather than upstream git
    repository copies (RH BZ#1251929)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-1
changelog:
  - Rebase to upstream 0.1.28 version
  - Start using consistent IDs for OVAL definitions (RH BZ#1250808)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-2
changelog:
  - Update URL to PCI DSS standard (latest version is v3.1 from April 2015)
  - Enhance title of CNSS No.1253 profile for Red Hat Enterprise Linux 6
    (RH BZ#1284045#c8)
  - Drop 'install_hids' rule from PCI DSS profile for both Red Hat Enterprise
    Linux 6 and 7 (since we don't have an OVAL check for this requirement)


author: Tomas Tomecek <ttomecek@redhat.com> - 0.7.2-6
changelog:
  - Resolves: rhbz#697530
  - ExcludeArch s390 -- tests fail there
  - ExcludeArch ppc -- package won't build there
  - ExcludeArch s390x -- package won't build there


author: Jindrich Novy <jnovy@redhat.com> 20120209-1
changelog:
  - fix minor bugs (#788194)
    - clear temp files
    - handle commands from stdin properly
    - run command even if ran as "scl enable SCL command" from already
      enabled SCL


author: Jindrich Novy <jnovy@redhat.com> 20120423-1
changelog:
  - update to the latest upstream scl-utils-20120423 (#713147)
   - filesystem ownership by meta package
   - add man page
   - fix memory leak when parsing commands from stdin
   - use more descriptive error message if /etc/prefixes is missing
   - do not prepend scl_* prefix to package names
   - unify package naming to <SCL>-package-version
   - add scl --list functionality to list available SCLs


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-2.3
changelog:
  - Allow overriding values in macro scl_package (#960556)
  - Delete redundant argument from check_asprintf (#961424)
  - Enable all collections given as arguments, not just the first one (#961430)
  - Prevent collections to be enabled multiple times (#961429)


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1071834)
  - added capability of dynamically registering and deregistering collections (#1099394)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 21020927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths


author: Lubos Kardos <lkardos@redhat.com - 20120927- 23
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add printing file names in error messages.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - Add owning and creating of state and conf files if nfsmountable is defined
  - drop recursive ownership of /usr/lib within SCL root


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1113685)
  - capability to dynamically register and deregister collections (#1113686)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20120927-25
changelog:
  - Creating filelist in build subdirectory instead of build directory.
  - Removing filelist before build.


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - Allow overriding values in macro scl_package (#957185)
  - Delete redundant argument from check_asprintf (#957183)
  - Enable all collections given as arguments, not just the first one (#949995)
  - Prevent collections to be enabled multiple times (#955669)


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 1.2.0-1
changelog:
  - Update to 1.2.0 to fix problems with Python 2.6 (#475903)
    (currently causing broken deps with other packages)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Daniel Kopecek <dkopecek@redhat.com> 2.2-2
changelog:
  - added support for scrubing only allocated file extents (option -E)
  - added patch to fix scrub-freespace
    Resolves: rhbz#907173
    Resolves: rhbz#903890


author: Mike Christie <mchristie@redhat.com> - 1.0.4-0
changelog:
  - 587072 Fix tgt-admin logic error with shared accounts in targets.conf 
  - Rebase to 1.0.4 to sync fixes.


author: Mike Christie <mchristie@redhat.com> - 1.0.13-0
changelog:
  - Rebase to upstream 1.0.13.
  - Add upstream iser target. This requires setting the driver/lld
  type to iser. See targets.conf for example or the README.iscsi for
  a tgtadm example.
  - 616402 read-only support


author: Mike Christie <mchristie@redhat.com> - 1.0.13-1
changelog:
  - Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
  in 6.0 this patch was broken and linked against rdma libs, so
  the got brought in by yum. The new patch was not broken and did not
  force linking but yum/iser users are not expecting the depencies
  to be broken.


author: Andy Grover <agrover@redhat.com> - 1.0.24-4
changelog:
  - Add patches
    * 0001-iser-Fix-bidirectional-chap.patch
    * 0002-bs_aio-use-64bit-to-read-eventfd-counter.patch
    * 0003-iser-added-huge-pages-support.patch
    * 0004-iser-added-parameter-for-pool-size.patch
    * 0005-iser-limit-number-of-CQ-entries-requested.patch
    * 0006-iser-add-CQ-vector-param.patch
    * 0007-Rework-param_set_val-and-friends.patch
    * 0008-return-Reject-in-iscsi-login-text-failure.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-9
changelog:
  - Redo patches to use 'git format-patch' naming
  - Add more backported patches:
    * 0014-iser-Don-t-wait-until-iser_ib_init-to-init-list_head.patch
    * 0015-iser-cleaning-iser-ib-objects-on-lld-exit.patch
    * 0016-iser-Don-t-release-IB-resources-if-were-not-allocate.patch
    * 0017-Fix-possible-segfault-on-logicalunit-update.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-14
changelog:
  - Add patches for write and verify support, rhbz #1094084
    * 0021-DPO-Add-emulation-of-DPO-bit-for-READ-WRITE-VERIFY10.patch
    * 0022-Add-support-for-WRITEVERIFY10-12-16.patch
    * 0023-sbc-Add-residual-handling-for-WRITE6-10-12-16-and-WR.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-17
changelog:
  - Add patches to fix #1186090, #852532, #1136405.
    * 0026-iscsi-fix-leak-of-task-for-delayed-management-reques.patch
    * 0027-Set-ExpCmdSn-and-MaxCmdSn-in-ISCSI_OP_R2T.patch


author: Hans de Goede <hdegoede@redhat.com> - 0.9.11-1.20091205snap
changelog:
  - Rebase to 0.9.11 + some fixes from git (git id
    97832d8dcd00202a493290b5d134b581ce20885c)
  - Rewrite initscript, make it follow:
    http://fedoraproject.org/wiki/Packaging/SysVInitScript
    And merge in RHEL-5 initscript improvements:
    - Parse /etc/tgt/targets.conf, which allows easy configuration of targets
    - Better initiator status checking in stop
    - Add force-stop, to stop even when initiators are still connected
    - Make reload reload configuration from /etc/tgt/targets.conf without
      stopping tgtd (but only for unused targets)
    - Add force-reload (reloads configs for all targets including busy ones)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.9.20100108git669c991.el6
changelog:
  - seabios-Support-for-booting-from-virtio-disks.patch [bz#578752]
  - Resolves: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.10.20100108git669c991.el6
changelog:
  - seabios-Revert-Support-for-booting-from-virtio-disks.patch [bz#578752 bz#596881]
  - Resolves: bz#596881
    (Unable to install RHEL virtual machines)
  - Related: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.11.20100108git669c991.el6
changelog:
  - seabios-Support-for-booting-from-virtio-disks-reapply.patch [bz#578752]
  - seabios-zero-memory-before-use.patch [bz#578752 bz#596881]
  - Resolves: bz#578752
    (Need to show "hard disk" menu item when pressing F12 during POST)
  - Related: bz#596881
    (Unable to install RHEL virtual machines)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.12.20100108git669c991.el6
changelog:
  - seabios-do-not-advertise-hpet-to-a-guest-OS.patch [bz#602177]
  - Resolves: bz#602177
    (Failed to install rhel3.9-64 guest)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.13.20100108git669c991.el6
changelog:
  - seabios-smbios-allow-vendor-manufacturer-version-product-nam.patch [bz#593317]
  - seabios-smbios-set-bios-vendor-version-fields-to-Seabios-0.5.patch [bz#593317]
  - seabios-smbios-set-system-manufacturer-product-name-to-Red-H.patch [bz#593317]
  - seabios-smbios-set-Type-3-chassis-manufacturer-information-t.patch [bz#593317]
  - Resolves: bz#593317
    (seabios: SMBIOS data is different from that shown in RHEL5, even with -M rhel5.4.0)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.14.20100108git669c991.el6
changelog:
  - seabios-fix-resume-from-S3-with-QXL-device.patch [bz#603677]
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.15.20100108git669c991.el6
changelog:
  - seabios-remove-acpi-dsdt.hex-file-from-source-tree.patch [bz#603677]
  - Add BuildRequires: iasl
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-1.el6
changelog:
  - seabios-Update-version-to-0.5.1.patch [bz#606411]
  - Resolves: bz#606411
    (Update version info to match upstream 0.5.1)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-2.el6
changelog:
  - seabios-Support-USB-keyboard-auto-repeat.patch [bz#561324]
  - seabios-Support-USB-interrupt-schedules-on-OHCI-and-UHCI.patch [bz#561324]
  - Resolves: bz#561324
    (USB keyboard misbehaves with BIOS driver)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-3.el6
changelog:
  - seabios-add-write-support-to-virtio-blk.patch [bz#607500]
  - Resolves: bz#607500
    (An unexpected error occurs during winxp installation with virtio disk.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-9.el6
changelog:
  - seabios-mask-interrupts-on-S3-resume.patch [bz#771946]
  - Resolves: bz#771946
    (mask interrupts on S3 resume)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-10.el6
changelog:
  - seabios-Remove-HPET-from-DSDT.patch [bz#786142]
  - Resolves: bz#786142
    (Windows guest shows HPET device, but qemu has none.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-12.el6
changelog:
  - seabios-usb-fix-boot-paths.patch [bz#782028]
  - seabios-usb-uhci-reorganize-wait_qh-into-wait_pipe.patch [bz#782028]
  - seabios-usb-uhci-Be-sure-to-wrap-pipe-iobase-in-GET_FLATPTR.patch [bz#782028]
  - seabios-usb-uhci-fix-race-against-host-controller.patch [bz#782028]
  - seabios-usb-ehci-Fix-races-with-controller-on-updates-to-QH.patch [bz#782028]
  - seabios-usb-msc-support-commands-without-payload.patch [bz#782028]
  - seabios-usb-msc-add-usb_msc_send.patch [bz#782028]
  - seabios-usb-msc-move-READ-CAPACITY-to-usb_msc_init-fix-off-b.patch [bz#782028]
  - seabios-usb-msc-pass-drive-to-setup_drive_.patch [bz#782028]
  - seabios-usb-msc-support-WRITE-commands.patch [bz#782028]
  - seabios-Extract-space-trimming-code-from-ATA-and-use-in-USB-.patch [bz#782028]
  - seabios-usb-msc-rename-INQUIRY-types.patch [bz#782028]
  - seabios-cdrom-use-TEST-UNIT-READY-to-detect-ready-medium.patch [bz#782028]
  - seabios-usb-msc-go-through-TEST-UNIT-READY-for-hard-disks.patch [bz#782028]
  - seabios-usb-msc-move-common-scsi-code-to-blockcmd.c.patch [bz#782028]
  - seabios-usb-msc-move-cdb-dispatch-to-block.c.patch [bz#782028]
  - seabios-scsi-get-physical-chs-geometry-from-mode-page-0x04.patch [bz#782028]
  - seabios-always-specify-virtio-blk-rather-than-virtio.patch [bz#782028]
  - seabios-virtio-pci-include-pci.h-and-pci_regs.h.patch [bz#782028]
  - seabios-virtio-pci-introduce-vp_init_simple.patch [bz#782028]
  - seabios-virtio-pci-allocate-vq-in-vp_find_vq.patch [bz#782028]
  - seabios-add-virtio-scsi-driver.patch [bz#782028]
  - Resolves: bz#782028
    ([RFE] virtio-scsi boot support in SeaBIOS)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-13.el6
changelog:
  - seabios-enable-S3-S4.patch [bz#761586]
  - Resolves: bz#761586
    (Patch bios to restore S3/S4)
  - Resolves: bz#804603
    (specfile: Put seabios version into banner)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-14.el6
changelog:
  - seabios-Halt-if-number-of-started-cpus-are-more-then-expecte.patch [bz#802033 bz#805168]
  - seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#802033
    (kvm guest hangs on reboot after cpu-hotplug)
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)
  - Resolves: bz#805168
    (seabios should not spin on cpu if started cpu count != cmos value at 0x5f)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-15.el6
changelog:
  - seabios-scsi-do-not-send-MODE-SENSE-except-to-QEMU-disks.patch [bz#801293]
  - seabios-Use-OUT-mode-for-all-zero-byte-scsi-transfers.patch [bz#801293]
  - seabios-virtio-scsi-Fix-virtio-scsi-after-cdb_is_read-change.patch [bz#801293]
  - seabios-ata-send-TEST-UNIT-READY-correctly.patch [bz#801293]
  - Resolves: bz#801293
    (fix boot from host or redirected USB pen drives)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-16.el6
changelog:
  - Restore seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-17.el6
changelog:
  - seabios-Replace-level-gpe-event-with-edge-gpe-event-for-hot-.patch [bz#808033]
  - Resolves: bz#808033
    (kvm guest doesn't see all hotplugged vcpus when 'virsh setvcpus 64 --live ' or hot-plugged devices when they added fast enough)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-18.el6
changelog:
  - seabios-Revert-enable-S3-S4.patch [bz#809797]
  - add S3/S4 seabios binary [bz#809797]
  - Resolves: bz#809797
    (Create a seabios binary that supports s3/s4)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-19.el6
changelog:
  - seabios-increase-f-segment-memory-pool.patch [bz#810471]
  - Resolves: bz#810471
    (boot fails while starting guest with sockets>62 and cores=1 and threads=1 option  and 10 virtio disks)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-19.el6_3
changelog:
  - seabios-report-real-I-O-APIC-ID-0-on-MADT-and-MP-table.patch [bz#851245]
  - seabios-allow-CPUs-to-have-non-contiguous-Local-APIC-IDs.patch [bz#851245]
  - Resolves: bz#851245
    (SeaBIOS: support non-contiguous APIC IDs)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-20.el6
changelog:
  - seabios-Add-romfile-code-to-assist-with-extract-integer-conf.patch [bz#831273]
  - seabios-Automatically-reboot-after-60-second-delay-on-failed.patch [bz#831273]
  - Resolves: bz#831273
    (RFE: reboot VM if no bootable device found)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-21.el6
changelog:
  - seabios-Revert-do-not-advertise-S4-S3-in-DSDT.patch [bz#827500]
  - seabios-acpi-generate-and-parse-mixed-asl-aml-listing.patch [bz#827500]
  - seabios-acpi-extract-aml-from-.lst.patch [bz#827500]
  - seabios-Fix-aml_name_string-to-recognize-block-name-modifier.patch [bz#827500]
  - seabios-Add-ACPI_EXTRACT_PKG_START-macro-parsing.patch [bz#827500]
  - seabios-acpi-add-ssdt-for-pci-hotplug.patch [bz#827500]
  - seabios-Get-system-state-configuration-from-QEMU-and-patch-D.patch [bz#827500]
  - Resolves: bz#827500
    (Config s3/s4 per VM - in seabios)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-24.el6
changelog:
  - revert-seabios-to-single-binary [bz#839674]
  - Resolves: bz#839674
    (Revert back to a single seabios binary once s3/s4 configuration is in)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-25.el6
changelog:
  - Fix data in the spec file
  - Related: bz#839674
    (Revert back to a single seabios binary once s3/s4 configuration is in)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-25.el6
changelog:
  - seabios-pci-use-u64-for-pci-address-space-math.patch [bz#771616]
  - Resolves: bz#771616
    (Too big value of QXL-VGA ram_size and vram_size cause VM paused (internal-error))


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-27.el6
changelog:
  - seabios-Use-coreboot-smbios-table-if-found.patch [bz#876250]
  - seabios-maininit-print-machine-UUID-under-seabios-version-me.patch [bz#876250]
  - seabios-display_uuid-fix-incomplete-check-after-the-loop.patch [bz#876250]
  - seabios-Minor-Separate-UUID-display-from-F12-boot-prompt.patch [bz#876250]
  - seabios-acpi-do-not-let-guest-OSes-enable-disable-the-SCI.patch [bz#846912]
  - seabios-boot-Support-halt-in-the-boot-order-to-prevent-defau.patch [bz#888633]
  - Resolves: bz#846912
    ([virtio-win][scsi] Disabling/enabling scsi driver stuck after S3/S4)
  - Resolves: bz#876250
    (Display 'SMBIOS GUID' at the BIOS post screen.)
  - Resolves: bz#888633
    (don't boot from un-selected devices)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-28.el6
changelog:
  - seabios-Add-pvpanic-device-driver.patch [bz#963312]
  - Resolves: bz#963312
    ([Hitachi 6.5 FEAT] (SeaBIOS) "virsh dump" support for automatic capturing and automatic actions after capturing.)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1-1.el6
changelog:
  - Update to upstream seabios-0.6.1
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-1.el6
changelog:
  - Update to upstream seabios-0.6.1.2 (from git tag rel-0.6.1.2)
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)
  - Resolves: bz#668707
    (Guest moved used index from 0 to 580" occur when guest load to grub during reboot)


author: Luiz Capitulino <lcapitulino@redhat.com> - seabios-0.6.1.2-2.el6
changelog:
  - seabios-Create-separate-IPL-entry-for-each-CD-DVD-qemu-in-se.patch [bz#643688]
  - seabios-Provide-full-EDD-3.0-info-for-virtio-disk.patch [bz#643688]
  - seabios-Add-romfile_name-function.patch [bz#643688]
  - seabios-Add-strchr-function.patch [bz#643688]
  - seabios-Read-bootorder-file-into-memory.patch [bz#643688]
  - seabios-Add-romfile_loadfile-helper-function.patch [bz#643688]
  - seabios-Breakup-boot_setup-bootorder-code-into-its-own-funct.patch [bz#643688]
  - seabios-Support-qemu-based-romfile-wrappers-called-out-of-or.patch [bz#643688]
  - seabios-Track-the-source-of-each-optionrom-deployed.patch [bz#643688]
  - seabios-Populate-drive_g-desc-prior-to-calling-add_bcv_inter.patch [bz#643688]
  - seabios-Simplify-boot-ordering-by-building-an-inclusive-boot.patch [bz#643688]
  - seabios-Add-stubs-to-permit-devices-to-specify-their-boot-pr.patch [bz#643688]
  - seabios-Rename-add_ordered_drive-to-add_drive-and-use-in-map.patch [bz#643688]
  - seabios-Call-setup_translation-from-map_hd_drive.patch [bz#643688]
  - seabios-Simplify-keyboard-reading-code-in-the-interactive-bo.patch [bz#643688]
  - seabios-Don-t-access-drive_g-desc-from-boot_cdrom.patch [bz#643688]
  - seabios-Remove-Drives-global-struct-in-favor-of-independent-.patch [bz#643688]
  - seabios-Move-IPL.checkfloppysig-to-a-global-CheckFloppySig-i.patch [bz#643688]
  - seabios-Move-IPL.bev-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Move-IPL.fw_bootorder-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Minor-reorganization-of-some-of-the-boot_xxx-code-in.patch [bz#643688]
  - seabios-Remove-drive-desc-field.patch [bz#643688]
  - seabios-Use-bootprio_find_named_rom-for-ramdisk-and-cbfs-pay.patch [bz#643688]
  - seabios-Add-functions-for-boot-device-path-parsing.patch [bz#643688]
  - seabios-Extend-usb_pipe-to-track-the-controller-and-ports-of.patch [bz#643688]
  - seabios-Add-support-for-finding-the-boot-priority-of-USB-dri.patch [bz#643688]
  - seabios-re-nitialize-global-variables-on-reboot.patch [bz#643688]
  - seabios-Initialize-FloppyCount-and-CDCount-on-reboot.patch [bz#643688]
  - seabios-acpi-add-_RMV-control-method-for-PCI-devices.patch [bz#671544]
  - Resolves: bz#643688
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#671544
    (seabios: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-3.el6
changelog:
  - seabios-support-T13-EDD3.0-spec.patch [bz#673751]
  - seabios-lets-pretend-that-RTC-can-be-used-to-wakeup-from-S4.patch [bz#663240]
  - Resolves: bz#663240
    ([WHQL] pwrtest failed in the job "CHAOS-Concurrent Hardware And OS test")
  - Resolves: bz#673751
    (Provide EDD3.0 info in accordance with T13 spec.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-3.el6_1.1
changelog:
  - seabios-increase-smp_mtrr-array-size-v2.patch [bz#740185]
  - Resolves: bz#740185
    ([RHEL6.1] - Windows2008 32-bit guest installation fails.)


author: Jeff E. Nelson <jen@redhat.com> - 0.6.1.2-29.el6
changelog:
  - seabios-boot-Fix-boot-order-for-SCSI-target-lun-9.patch [bz#1129930]
  - Resolves: bz#1129930
    (fail to assign correct order for the boot device in seabios as we specified the bootindex in qemu-kvm cli(under the same virtio-scsi-pci))


author: Jeff E. Nelson <jen@redhat.com> - 0.6.1.2-30.el6
changelog:
  - seabios-boot.c-delay-exiting-boot-if-menu-key-is-ESC.patch [bz#1131530]
  - seabios-boot-allow-pressing-ESC-to-enter-the-menu.patch [bz#1131530]
  - Resolves: bz#1131530
    (Provide a platform agnostic approach to invoking the BIOS, boot menu, or other BIOS functions)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-4.el6
changelog:
  - seabios-increase-smp_mtrr-array-size-v2.patch [bz#727328]
  - Resolves: bz#727328
    ([RHEL6.1] - Windows2008 32-bit guest installation fails.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-5.el6
changelog:
  - seabios-do-not-advertise-S4-S3-in-DSDT.patch [bz#736522]
  - Resolves: bz#736522
    (Patch bios to remove S3/S4 for mitigate power management issues)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-6.el6
changelog:
  - seabios-usb-move-hid-initialization.patch [bz#733028]
  - Resolves: bz#733028
    (Failed to reboot guest due to "key event queue full")


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-7.el6
changelog:
  - seabios-add-40-48-bit-RAM-range-to-seabios.patch [bz#630975]
  - Resolves: bz#630975
    (KVM guest limited to 40bit of physical address space)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-8.el6
changelog:
  - seabios-Add-Local-APIC-NMI-Structure-to-ACPI-MADT-wa.patch [bz#750191]
  - seabios-fix-mptable-nmi-entry-was-Re-Qemu-devel-PATC.patch [bz#750191]
  - Resolves: bz#750191
    (Wrong LINT1/NMI ACPI and mptable descriptors)


author: Matthias Clasen <mclasen@redhat.com> 2.28.1-2
changelog:
  - Don't call problematic functions in an atexit handler,
    since this can lead to segfaults at session end (#524415)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.2.1-8
changelog:
  - fix `--copy' option behaviour to unlink sedXXX temp files,
    clean-up the copy-option patch and merge it with the
    `-i/--in-place' docs/manpage patch (#709956)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-8
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-146
changelog:
  - Add sysadm_secadm policy module to separate in secadm_r, sysadm_r
  Resolves:#787413
  - Fixes for libvirt-qmf
  - Add label for package-cleanup 
  - Add support for zfs
  - Make cfengine domains as unconfined
  Resolves:#753184
  - Allow sshd_t to dyntransition to sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.4
changelog:
  - Make condor_startd_ssh domain as unconfined
  - Allow condor_startd_ssh to connect to kerberos_master port
  Resolves:#852456


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.9
changelog:
  - Fix cron_admin_role() to make sysadm cronjobs running in sysadm_t instead of cronjob_t which causes issues in MLS
  Resolves:#878360


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.13
changelog:
  - Allow consolehelper-gtk to connect to xserver port
  - Make rhev_agentd_consolehelper_t also as permissive domain
  - Allow rhev-agentd to connect to xserver
  Resolves:#886210


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.14
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  - Dontaudit attempts by openshift to read apache logs
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow quota to manage openshift_var_lib_t directories
  Resolves:#888381


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.2
changelog:
  - Allow cgred to use notify
  Resolves:#917966
  - Allow mount to transition to gluster
  Resolves:#917972


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.4
changelog:
  - Allow dirsrv-admin server to be restarted from console 
  Resolves:#955703
  - Allow dac_override for openshift-cron


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.6
changelog:
  - Allow myslqd-safe to execute shell_exec_t
  Resolves:#966997
  - Allow openshift-cron to read openshift link files in /var/lib


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.7
changelog:
  - Make Quantum 2013.1.1 working with netns
  - Make SSHing into an Openshift Enterprise Node working
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.8
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.9
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.13
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  Resolves:#1015117
  - Allow virt_domain to read virt_var_run_t symlinks
  Resolves:#1015068


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.16
changelog:
  - Allow all daemons to search cluster lib files
  - Resource agents needs to manage /etc/cluster to place own configs
  Resolves:#985442


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.17
changelog:
  - Allow all daemons to manage cluster lib files if daemons_enable_cluster_mode boolean is enabled
  Resolves:#985442


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231.el6_5.4
changelog:
  - Allow passenger to accept connection.
  - Update passenger rules from RHEL7.
  Resolves:#1211705
  - Allow mysqld_t to use pam
  - Allow mysqld_t to send audit messages
  Resolves:#1214022
  - Back port labeling for /etc/my.cnf.d dir.
  Resolves:#1212975
  - Add labeling for mariadb log/pid files/dirs.
  Resolves:#1212845
  - Add support for mogos service.
  Resolves:#1212971


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260.el6_6.1
changelog:
  - Allow osad to execute rhn_check
  - Make osad_t as unconfined domain
  - Allow osad connect to jabber client port
  Resolves:#1169688
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260.el6_6.3
changelog:
  - Allow passenger to accept connection.
  - Update passenger rules from RHEL7.
  Resolves:#1211706
  - Allow mysqld_t to use pam
  - Allow mysqld_t to send audit messages
  Resolves:#1214023
  - Back port labeling for /etc/my.cnf.d dir.
  Resolves:#1212976
  - Add labeling for mariadb log/pid files/dirs.
  Resolves:#1212846
  - Add support for mogos service.
  Resolves:#1212972


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
   - Update rules related to glusterd_brick_t.
   - Allow glusterd to execute lvm tools in the lvm_t target domain.
   - Allow glusterd to execute xfs_growfs in the target domain.
   - Add support for /usr/sbin/xfs_growfs.
   - Allow glusterd to create samba config files if it is started by service script and running with unconfined_u.
  Resolves:#1228109
  - Fix description for ftpd_use_passive_mode boolean.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have transition to insmod.
  - Allow glusterd to use geo-replication gluster tool.
  - Remove gluster from permissive domains.
  Resolves:#1229605


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-276
changelog:
  - Allow gluster to manage own log files.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  - Label gluster python hooks also as bin_t.
  - Allow samba_t net_admin capability to make CIFS mount working.
  Resolves:#1229605
  - Allow ssh_keygen_t to manage keys located in /var/lib/gluster.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-278
changelog:
  - Allow logrotate get attributes of all unallocated tty device nodes.
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
  - Allow glusterd to connect to init.
  Resolves:#1230371
  - Allow gluster do dbus chat with domain running as initrc_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.1
changelog:
  - Backport gluster fixes from RHEL7
   - execute showmount in own domain
  Resolves:#1248520
   - execute nsfd in own domain
   - allow gluster to connect to all ports
   - Add support for /usr/sbin/ctdbd_wrapper.
   - nrpe needs kill capability to make gluster moniterd nodes working.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.2
changelog:
  - Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
  Resolves:#1248520


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.6
changelog:
  - Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
  Resolves:#1257318
  Resolves:#1257319


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.8
changelog:
  - Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
  Resolves:#1289019


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-279.el6_7.9
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
  Related: #1322688


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-284
changelog:
  - Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
  Resolves:#1287182


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-285
changelog:
  -Allow munin apache scripts to manage munin logs and talk with httpd over unix stream socket. 
  Resolves:#1286052
  -Allow httpd to send generic signal to httpd suexec if htpasswd is invoked. Resolves:#1286007
  -Dontaudit httpd running as piranha_web_t accesses to snmp mib indexes. 
  Resolves:#1285674
  -Allow ipsec running as ipsec_t to create pluto.log with correct labeling.
  Resolves:#1267212
  -Allow whack executed by sysadm SELinux user to access /var/run/pluto/pluto.ctl. It fixes "ipsec auto --status" executed by sysadm_t. 
  Resolves:#1257591
  -Dontaudit attemps to write generic tmp_t dirs if gnome-keyring-daemon runs under passwd_t domain. 
  Resovles:#1131531


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-286
changelog:
  - arping running as netutils_t sys_module capability for removing tap devices. Dontaudit this access.
  - Allow hv_vss_daemon to write access on all mount point directories to make VSS live backup if working if there is home partition.
  - Add support for squid to be able to create temoporary files. 
  Resolves:#1291164
  - Allow usbhid-ups to access /proc/bus/usb to have it working on ppc64 machines. 
  Resolves:#1290693
  - Add support for /var/run/chronyd.sock. 
  Resolves:#1290310
  - Update apache_content_template() inteface to allow "shutdown" permissions for apache scripts on unix_stream_socket. 
  Resolves:#1286052
  - Fix label for /var/lib/graphite-web 
  Resolves:#1221934
  - Dontaudit rpm write access for prelink_mask_t Resolves:#1216907
  - Allow apcupsd_t to communicate with sssd Add default label for /var/lock/subsys/apcupsd and /var/lock/LCK.
  Resolves:#1286030
  - Allow shorewall_t to create netlink_socket 
  Resolves:#1290705


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-287
changelog:
  - Allow sssd-ifp to dbus chat with all users. 
  Resolves:#1296693
  - Allow keepalived to connect to 3306/tcp port - mysqld_port_t.
  Resolves:#1296854
  - Add support for stunnel custom log files, allow transition and label /log/stunnel* log files. 
  Resolves:#1296238
  - Provide conman_unconfined_script_exec_t/conman_unconfined_script_t SELinux types used for conman scripts.
  - Resolves:#1290565
  - Allow ctdbd trasition to smbcontrol_t when "ctdb disablescript 50.samba" is executed.
  - Resolves:#1293787
  - Label ctdbd event scripts as ctdbd_exec_t instead of bin_t. 
  Resolves:#1293787
  - Allow watchdog to read localization files. It wants to access localtime. 
  Resolves:#1267974
  - Backport rules allowing sssd_t to be able to request the kernel to load a module.
  Resolves:#1246634


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-288
changelog:
  - Allow netutils_t domain to chown capability.
  Resolves:#1298514
  - Allow all jabber domain to access SSL certs.
  Resolves:#1261145
  - Allow shorewall request kernel load module
  Resolves:#1290705
  - Allow passwd to create temporary files to support ssh logins if gnome-keyring-daemon is called by passwd and runs in passwd_t.
  Resolves:#1131531
  - Allow stunnel to write log outputs on users pty.
  Resolves:#1296238
  - Allow polkit-1/actions to get attributes for all filesytems.
  Resolves:#1301561
  - Allow p11-child to connect to apache ports. Allow p11-child  to manage authentication cache.


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
  Related: #1326621


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292.1
changelog:
  - Allow ipc_lock capability for glusterd.
  - GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
  Resolves: #1388582


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292.2
changelog:
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1393267
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
  Resolves: rhbz#1393253


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292.3
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1409482


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-298
changelog:
  - Allow isnsd_t to accept tcp connections
  Resolves:rhbz#1365501
  - Add label for alsa_var_lib_t dirs and files.
  Resolves: rhbz#1340150


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-300
changelog:
  - Allow sblim_reposd_t domain to read cert_f files
  Resolves:rhbz#1392382
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
  Resolves: rhbz#1392406


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-301
changelog:
  - Allow hald_t to read nvme devices.
  Resolves: rhbz#1389982
  - Allow ftpdctl_t domain to manage own sockets
  Resolves: rhbz#1392525


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-302
changelog:
  - Label /var/lock/kdump as kdump_lock_t.
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-303
changelog:
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565
  - Allow guest-set-user-passwd to set users password
  Resolves: rhbz#1369699


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-304
changelog:
  - Allow _java_t domain to read systemd state.
  Resolves:rhbz#1393938
  - Allow kdumpgui to read/write to nvme filesystem.
  Resolves:rhbz#1323293


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-305
changelog:
  - Fix typo bug sepgsql_contexts file
  Resolves: rhbz#1397703
  - Allow sssd_t domain to manage samba files and dirs.
  Resolves: rhbz#1395403
  - Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
  Resolves: rhbz#1397117
  - Allow consolekit_t domain to manage consolekit_log_t dirs
  Resolves: rhbz#1397802


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-306
changelog:
  - Allow hostname_t domain to manage cluster_tmp_t files
  Resolves: rhbz#1400234
  - Allow ipsec_mgmt_t domain use nsswitch
  Resolves:rhbz#1401611
  - Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
  Resolves:rhbz#1397117


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307.1
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1462824
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464145


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-308
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1461064


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-54.el6_0.1
changelog:
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #636488
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  Resolves: #636489


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-54.el6_0.2
changelog:
  - Allow mount to communicate with gfs_controld
  - Allow certmonger to search through directories that contain certs
  Resolves: #642607


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-54.el6_0.4
changelog:
  - Fix to sandbox
  	* selinux-policy fixes for policycoreutils sandbox changes
  		- Fix seunshare to use more secure handling of /tmp
  		- Change to allow sandbox to run on nfs homedirs, add start python script


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-93.el6_1.1
changelog:
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  - Make vhostd device MLS trusted
  - Allow secadm to manage selinux config files


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Jakub Čajka <jcajka@redhat.com> - 1.1.12-1
changelog:
  - Update to 1.1.12
  - Resolves: #739119 - [6.6 FEAT] servicelog package update - ppc64 
  - Resolves: #1088404 - RHEL6.5 - servicelog: Grant permission to link with librtas library


author: Dan Walsh <dwalsh@redhat.com> - 2.2.86-1
changelog:
  - Fix permission on icons
  - Add man pages for setroubleshoot and sedispatch
  - Fix desktop file
  Resolves: #594352


author: Dan Walsh <dwalsh@redhat.com> - 2.2.91-1
changelog:
  - Fix os.exists call in setroubleshoot
  - Update po
  - Use -s flag in python to prevent using user site directory


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py
  - Make work on RHEL6
  Resolves: #541634
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.38-1
changelog:
  - Remove dependancy on X from sedispatch
  - Setroubleshoot-server no longer requires X
  Resolves: #541634


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.38-2
changelog:
  - Needs to require libreport-gtk and pygtk2-libglade
  - sealert analyze option can not be used with another option
  - Fix setroubleshootd man page


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.47-4
changelog:
  - Make sealert working if description contains parenthesis
  - Remove -H from man page
  Resolves:#788196


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.47-13.1
changelog:
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  Resolves: rhbz#1349435


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.
  - Fix requires to include pygtk2-libglade


author: <dwalsh@redhat.com> - 3.0.45-1
changelog:
  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: <dwalsh@redhat.com> - 2.1.57-1
changelog:
  - Change httpd_write_content plugin to use httpd_sys_rw_content_t instead of httpd_sys_content_rw_t
  - Update translations


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-5
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-6
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)
  - reserve uidgid pair 113:113 for usbmuxd


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-9
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi
  - update name of group reserved by cyrus-imapd to saslauth


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-11
changelog:
  - reserve uidgid pair 109:109 for rhevm (#652287)
  - add double quotes arround sourced profile.d scripts -
    allow special characters in script names(#661645)
  - use printf instead of echo in bashrc scripts(#620408)
  - change detection of interactive shell in profile for ksh(#616117)
  - respect profile.d script defined umask even in interactive
    login shells(#661681)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-20.1
changelog:
  - reserve uid 189 for hacluster (#998923)
  - reserve gid 189 for haclient (#998923)
  - reserve 160:160 for swift (openstack-swift) (#998912)
  - reserve 161:161 for glance (openstack-glance) (#998912)
  - reserve 162:162 for nova (openstack-nova) (#998912)
  - reserve 163:163 for keystone (openstack-keystone) (#998912)
  - reserve 164:164 for quantum (openstack-quantum) (#998912)
  - reserve 165:165 uidgid pair for cinder (#998912)
  - reserve 166:166 uidgid pair for ceilometer (#998912)
  - reserve 187:187 for heat (openstack-heat) (#998912)
  - reserve 185:185 for jboss-as (#998912)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-21
changelog:
  - reserve uid 189 for hacluster (#872208)
  - reserve gid 189 for haclient (#872208)
  - reserve 160:160 for swift (openstack-swift) (#991502)
  - reserve 161:161 for glance (openstack-glance) (#991502)
  - reserve 162:162 for nova (openstack-nova) (#991502)
  - reserve 163:163 for keystone (openstack-keystone) (#991502)
  - reserve 164:164 for quantum (openstack-quantum) (#991502)
  - reserve 165:165 uidgid pair for cinder (#991502)
  - reserve 166:166 uidgid pair for ceilometer (#991502)
  - reserve 187:187 for heat (openstack-heat) (#991502)
  - reserve 185:185 for jboss-as (#991502)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-22
changelog:
  - reserve 142:142 for activemq (#1086921)
  - reserve 167:167 for ceph (ceph-common) (#1221042)
  - change reservation for 185:185 from jboss-as to jboss (#1192412)


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Eduardo Habkost <ehabkost@redhat.com> - sgabios-0-0.3.20110621svn.el6
changelog:
  - Change package summary to not mention trademarks unnecessarily
  - Update info about tarball-generation command
  - Related: bz#712993


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - support ACLs under skel directory
  - refer to PAM in /etc/login.defs
  - userdel option to remove Linux login <-> SELinux login mapping
  - useradd special exit value if SELinux user mapping is invalid
  - usermod special exit value if SELinux user mapping is invalid
  - fix gshadow functions from shadow utils
  - fix find_new_uid/gid for big UID/GID_MAX
  - don't show users who were not logged in lastlog
    Resolves: #586796 #629277 #639900 
    Resolves: #639975 #639976 #667593 #672510
    Resolves: #693377 #706321


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-19.1
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Andrew Beekhof <andrew@beekhof.net> - 1.6.5-0.1.git833ca18
changelog:
  - Incorporate review feedback
    + Add calls to ldconfig
    + Fix package group
    + Resolve rpmlint warnings
    + Added LICENSE, NOTICE and AUTHORS to the doc list
    + Document how the tarball was generated
    + Update version number to be a .5 pre-release snapshot


author: Minto Joseph <mvaliyav at redhat.com> - 2.4-4
changelog:
  - Cleaned up the spec file as per new font packaging guidelines
  - Replaced padauk-src.ttf and padaukbold-src.ttf with Padauk.ttf and Padauk-Bold.ttf [490583]
  - Renamed the package to sil-padauk-fonts


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #694623)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-2
changelog:
  - add explicit build-time and install-time dependencies on 389-ds-base 1.2.10,
    so that we know we build with transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-3
changelog:
  - backport fix for a slow memory leak (#840926)
  - tweak configure to disable explicit (wrong) transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-4
changelog:
  - backport fix for request argument memory leaks in NIS server (#967468)
  - backport fix for dispatching for multiple connected clients in the NIS
    plugin (#923336)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-6
changelog:
  - backport fix to not ignore modifications that affect whether or not an
    entry shows up in a compat map (#1056648)
  - backport fix to avoid potential crashes on domain or map removal (#1043639)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.40-7
changelog:
  - Add '!!' in front of encrypted password in NIS maps 
    if account in question is locked (#1298478)


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.42-1
changelog:
  - updated to 5.42 (#698317)
  - improve 3ware raid controller support (#697235)
  - fix SCSI log page sanity check (#784925)


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Rex Dieter <rdieter@fedoraproject.org> - 2.2.3-2
changelog:
  - %files: drop ownership of %_datadir/dbus-1.0/interfaces (#334681)
  - %files: track shlib sonames
  - make -apidocs noarch


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
    Resolves: bz659467
  - Collect /etc/dhcp in dhcp.py plugin
    Resolves: bz676522
  - Collect dmsetup ls --tree output in devicemapper.py
    Resolves: bz675559
  - Collect lsblk output in filesys.py
    Resolves: bz679433


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
  Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-17.el6_2.1
changelog:
  - Add forbidden paths for new location of gluster private keys
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs
    Resolves: bz801328


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-17.el6_2.3
changelog:
  - Add nfs statedump collection to gluster module
    Resolves: bz801328
  - Use wildcard to match possible libvirt log paths
    Resolves: bz817921


author: Adam Stokes <ajs at redhat dot com> = 1.8-18
changelog:
  - Option to enable selinux fixfiles check
  - Start of replacing Thread module with multiprocessing
  - Update translations
  - More checks against conf file versus command line opts


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 2.1-0
changelog:
  - Resolves: bz585923
  - Resolves: bz585942
  - Resolves: bz586409
  - Resolves: bz586389
  - Resolves: bz548096
  - Resolves: bz557828
  - Resolves: bz563637
  - Resolves: bz584253
  - Resolves: bz462823
  - Resolves: bz528881
  - Resolves: bz566170
  - Resolves: bz578787
  - Resolves: bz581817
  - Resolves: bz581826
  - Resolves: bz584695
  - Resolves: bz568637
  - Resolves: bz584767
  - Resolves: bz586370


author: Adam Stokes <ajs at redhat dot com> = 2.2-0
changelog:
  - Resolves: bz581921
  - Resolves: bz584253
  - Resolves: bz562651
  - Resolves: bz566170
  - Resolves: bz586450
  - Resolves: bz588223
  - Resolves: bz559737
  - Resolves: bz586405
  - Resolves: bz598978
  - Resolves: bz584763


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18.el6
changelog:
  - Collect fence_virt.conf in cluster module
    Resolves: bz760995
  - Fix collection of /proc/net directory tree
    Resolves: bz730641
  - Gather output of cpufreq-info when present
    Resolves: bz760424
  - Fix brctl showstp output when bridges contain multiple interfaces
    Resolves: bz751273
  - Add /etc/modprobe.d to kernel module
    Resolves: bz749919
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz782589
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz749262
  - Collect stderr output from external commands
    Resolves: bz739080
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
    Resolves: bz784862
  - Fix installed-rpms formatting for long package names
    Resolves: bz767827
  - Add symbolic links for truncated log files
    Resolves: bz766583
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz771501
  - Use correct paths for tomcat6 in RHN module
    Resolves: bz749279
  - Obscure root password if present in anacond-ks.cfg
    Resolves: bz790402
  - Do not accept embedded forward slashes in RHN usernames
    Resolves: bz771393
  - Add new sunrpc module to collect rpcinfo for gluster systems
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19.el6
changelog:
  - Collect additional diagnostic information for realtime systems
    Resolves: bz789096
  - Improve sanitization of RHN user and case number in report name
    Resolves: bz771393
  - Fix verbose output and debug logging
    Resolves: bz782339 
  - Add basic support for CloudForms data collection
    Resolves: bz752666
  - Add support for Subscription Asset Manager diagnostics
    Resolves: bz752670


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22.el6
changelog:
  - Correct aeolus debug invocation in CloudForms module
    Resolves: bz752666
  - Update gluster module for gluster-3.3
    Resolves: bz784061
  - Add additional command output to gluster module
    Resolves: bz768641
  - Add support for collecting gluster configuration and logs
    Resolves: bz752549


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-24.el6
changelog:
  - Fix katello and aeolus command string syntax
    Resolves: bz752666
  - Remove stray hunk from gluster module patch
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29.el6
changelog:
  - Collect the swift configuration directory in gluster module
    Resolves: bz822442
  - Update IPA module and related plug-ins
    Resolves: bz812395


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-38.el6_4.1
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz985242
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz985244


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-60.el6
changelog:
  - [mongodb] backport new plugin from upstream
  - [activemq] backport new plugin from upstream
  - [openshift] sync plugin with upstream
  - [plugin] backport collectExtOutputs and addCopySpecs
  - Make OpenShift module collect domain information
  - Add 'gear' option to OpenShift module
  - Add OpenShift module
    Resolves: bz1039755
  - [plugin] backport addCopySpecLimit tailit parameter
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-61.el6
changelog:
  - [powerpc] backport plugin from upstream
    Resolves: bz977190
  - [devicemapper] set locking_type=0 when calling lvm2 commands
    Resolves: bz1102282
  - [nfsserver] collect 'exportfs -v'
    Resolves: bz985512
  - [openshift] improve password redaction
    Resolves: bz1039755
  - [openshift] don't collect all of /etc/openshift
    Resolves: bz1039755


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-62.el6
changelog:
  - Restrict ldap and ds plugin paths to avoid collecting secrets
    Resolves: bz994628
  - Add certutil output to ldap and ds plugins to summarize certs
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-65.el6
changelog:
  - [grub] Fix grub.conf path for grub-1.x versions
    Resolves: bz1076388
  - [ds] Fix logging exception when plugin force-enabled
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-68.el6
changelog:
  - [ds] add collection of ds admin server configuration
    Resolves: bz994628
  - [ldap] ensure /etc/openldap/ content is collected
    Resolves: bz994628
  - [plugintools] preserve permissions on directories
    Resolves: bz1069786


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
    Resolves: bz622407
  - Add sssd plugin to collect configuration and logs
    Resolves: bz624162
  - Collect /etc/anacrontab in system plugin
    Resolves: bz622527
  - Correct handling of redhat-release for el6
    Resolves: bz622528


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
    Resolves: bz624162
  - Add support for collecting entitlement certificates in rhn.py
    Resolves: bz678665


author: Shane Bradley <sbradley@redhat.com> = 3.2-19
changelog:
  - [cluster] Ensure cluster sets 'make' to False when calling get_cmd_output_path().
    Resolves: bz1190723


author: Shane Bradley <sbradley@redhat.com> = 3.2-26
changelog:
  - [cluster] Scrub password from crm_report data.
    Resolves: bz1206581
  - [networking] Use the correct options for nmcli.
    Resolves: bz1206661


author: Shane Bradley <sbradley@redhat.com> = 3.2-32
changelog:
  - [general] Better handling of --name and --ticket-number options.
    Resolves: bz1232945
  - [policies] run PackageManager query_command under timeout


author: Shane Bradley <sbradley@redhat.com> = 3.2-37
changelog:
  - [utilities] Support glob expansion in command arguments
    Resolves: bz1276652
  - [rpm] Move extra rpm fields to a separate file
    Resolves: bz1267677


author: Shane Bradley <sbradley@redhat.com> = 3.2-38
changelog:
  - [openshift] Obfuscate LDAP bind passwords
    Resolves: bz1227462
  - [multipath] Add output of "multipathd show config" in sosreport
    Resolves: bz1289558
  - [archive] remove hand-rolled compression shell out.
    Resolves: bz1232940


author: Shane Bradley <sbradley@redhat.com> = 3.2-39
changelog:
  - [ipa] Improvements to plugin.
    Resolves: bz1203947
  - [networking] Blacklist Cisco CDP paths
    Resolves: bz1276262


author: Shane Bradley <sbradley@redhat.com> = 3.2-40
changelog:
  - [processor] Capture output of cpufreq-info
    Resolves: bz1275202
  - [archive] Check that compress utility exists
    Resolves: bz1310183


author: Shane Bradley <sbradley@redhat.com> = 3.2-49
changelog:
  - [sosreport] The reports were not generated.
    Resolves: bz1299892

  - [npm/nodejs] Add plugins npm and nodejs.
    The patch contained plugin classes that are not in rhel-6
    which were removed.
    Resolves: bz1368547


author: Filip Krska <fkrska@redhat.com> = 3.2-54.el6_9.1
changelog:
  [networking] iptables: check module version and do ipv6
    Resolves: bz1451784
    [cluster] Scrub passwords in pcs config
    Resolves: bz1427589


author: Filip Krska <fkrska@redhat.com> = 3.2-57
changelog:
  [policies] get package list without a timeout
    [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1506596


author: Filip Krska <fkrska@redhat.com> = 3.2-63
changelog:
  [archive] compress tarball without a timeout
    Resolves: bz1439943
    [policies] stop execution on Ctrl+C during user input
    Resolves: bz1567054


author: Filip Krska <fkrska@redhat.com> = 3.2-63.1
changelog:
  [archive] Force decoding if content is bytes
    [reporting] deal with UTF-8 characters
    Resolves: bz1599234


author: Filip Krska <fkrska@redhat.com> = 3.2-63.3
changelog:
  [smartcard] Stop collecting pkcs11_inspect debug
    Resolves: bz1567063
    [satellite] don't collect /root/ssl-build
    Resolves: bz1667018


author: Richard Hughes <rhughes@redhat.com> - 2.28.0-3
changelog:
  - Apply a patch from upstream to inhibit gnome-session, rather than
    gnome-power-manager. This fixes a warning on rawhide when using sound-juicer.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Tomas Hoger <thoger@redhat.com> - 1.2-0.7.beta3
changelog:
  - Security update: Add mode checks to speex_packet_to_header() to protect
    applications using speex library and not having proper checks
    (CVE-2008-1686, #441239, https://trac.xiph.org/changeset/14701)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2.el6_0.5
changelog:
  - Add fixes from upstream git for a number of serious bugs:
    - ctrl / alt getting stuck
    - a client hang
    - a client crash
    - showing nothing but a white screen in fullscreen mode
    Related: rhbz#644840


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-8
changelog:
  - Add fixes from upstream git for a number of serious bugs:
    - ctrl / alt getting stuck
    - a client hang
    - a client crash
    - showing nothing but a white screen in fullscreen mode
    Related: rhbz#644258


author: Hans de Goede <hdegoede@redhat.com> - 0.7.1-1
changelog:
  - New upstream release 0.7.1
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
    Related: rhbz#641829


author: Hans de Goede <hdegoede@redhat.com> - 0.7.2-1
changelog:
  - Rebase to new upstream release 0.7.2
    Resolves: rhbz#671383
  - This fixes:
  - Blinking keyb leds in spice client causes capslock to turn on / off
    all the time in other windows
    Resolves: rhbz#626975
  - jpeg messages encoding is transfered as 4 and not 1, breaking client
    Resolves: rhbz#670238
  - fix warnings from AC_COMPILE_IFELSE
    Resolves: rhbz#670271
  - Clearer error message when subject-host differs from server
    Resolves: rhbz#670274
  - long arguments are incorrectly parsed when an equal sign is used
    Resolves: rhbz#670276


author: Uri Lublin <uril@redhat.com> - 0.7.2-3
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server (not part of this package -- in spice-server)
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client
    - track number of expected reader insertions
  Resolves: #641829


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-1
changelog:
  - Rebase to new upstream release 0.8.0
  Resolves: rhbz#671383
  - Exit with error instead of crash for --controller with no SPICE_XPI_SOCKET
  Resolves: rhbz#644292
  - Use _exit rather then exit on X errors
  Resolves: rhbz#680763
  - Fix keyb modifiers not syncing from guest to client
  Resolves: rhbz#679467


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)
  Resolves: rhbz#675767


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-6
changelog:
  - add upstream patch for bug #692833
  Resolves: rhbz#692833
  - add upstream patch for bug #732423 client: don't crash when booting a
    Xinerama setup
  Resolves: rhbz#732433
  - removed old patch from CVS (it was already removed from spec)


author: Uri Lublin <uril@redhat.com> - 0.8.2-7
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - added BuildRequires: autoconf automake libtool and using them.
  - applied server patches too
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#725009


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-8
changelog:
  - added upstream patches for various RHEL bugs
    - client: add xinerama support
  Resolves: rhbz#695323
    - client/x11: fix mode setting in MultyMonScreen::restore
  Resolves: rhbz#693431
    - Don't use "hw:0,0" for recording with alsa
  Resolves: rhbz#711810
    - Handle Application::set_hotkeys failure
  Resolves: rhbz#750030


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-10
changelog:
  - sync RHEV (windows client) patches which are upstream
    - fix USB sharing when starting SPICE fullscreen (windows client only)
  Resolves: rhbz#791269
    - fix menu issues when USB sharing is enabled (windows client only)
  Resolves: rhbz#791271
    - fix issues with AltGr when keyboard layout is non-us (windows client
      only)
  Resolves: rhbz#791274


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-12
changelog:
  - handle ENABLE_SMARTCARD messages from the controller
    Resolves: rhbz#641828
  - handle SEND_CAD messages from the controller
    Resolves: rhbz#750856


author: Uri Lublin <uril@redhat.com> - 0.8.2-1
changelog:
  - Rebase to upstream spice-0.8.2, including:
    + Bug fixes (RHBZ): 712938, 710461, 673973, 667689, 692976, 712941
  Resolves: rhbz#723687


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-7.1
changelog:
  - added upstream patches for various zstream RHEL bugs
    - client: add xinerama support
  Resolves: rhbz#771323
    - Don't use "hw:0,0" for recording with alsa
  Resolves: rhbz#790892


author: Uri Lublin <uril@redhat.com> - 0.4.2-3
changelog:
  - Remove BuildRequires: pkgconfig
   - Move Requires: pkgconfig to -devel subpackage.
  Related: #543948


author: Hans de Goede <hdegoede@redhat.com> - 0.11-2
changelog:
  - Fix a crash triggered when trying to view a usbredir enabled vm from
    virt-manager
    Related: rhbz#758100


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-3
changelog:
  - Fix cursor is displayed on each guest screen when mouse is in server mode
    Resolves: rhbz#804308
  - Fix --spice-color-depth=16 does not seem to work.
    Resolves: rhbz#802898
  - Fix cannot leave full-screen when mouse is grabbed in server mode mouse
    Resolves: rhbz#804307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-6
changelog:
  - Fix blue-tinted video with old Spice server
    Resolves: rhbz#807389
  - Fix segfault during switch-host migration
    Resolves: rhbz#807410
  - Fix switch-host migration failure with SSL
    Resolves: rhbz#802574
  - Fix crash during migration while playing video
    Resolves: rhbz#808567
  - Requires gtk2 >= 2.18.9-10
    Resolves: rhbz#809033


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-7
changelog:
  - Handle grab-broken event
    Resolves: rhbz#807292
  - Fix segfault with large clipboard copy-paste
    Resolves: rhbz#809145
  - Fix cursor not hidden
    Resolves: rhbz#810588
  - Fix segfault when closing while recording
    Resolves: rhbz#810247
  - Add USB support to controller
    Resolves: rhbz#807296
  - Add WAN support to controller
    Resolves: rhbz#787449


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-3
changelog:
  - Add info message when USB dialog is empty
    Resolves: rhbz#804187
  - Properly reset usb channels after non-seamless migration
    Resolves: rhbz#861332
  - Fix read error handling for USB redirection
    Related: rhbz#842354
  - Auto-discover already plugged-in USB devices
    Resolves: rhbz#820964
  - Add support for disabling Ctrl+Alt+Del
    Resolves: rhbz#807771


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-4
changelog:
  - Fix application of Patch2, it includes the git commit log which
    contained a diff hunk which %patch happily applied, which caused
    https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
    Related: rhbz#804187


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.14-5
changelog:
  - Apply color conversion when creating image
    Resolves: rhbz#843134
  - Show correct ungrab key combination in spicy
    Resolves: rhbz#851090
  - Fix sending 00 scancodes to guests
    Resolves: rhbz#868237
  - Improve open_host() debugging message
    Resolves: rhbz#858232
  - Empty host subject from qemu should only validate hostname
    Resolves: rhbz#858228
  - Fix disabling mouse acceleration on X11
    Resolves: rhbz#867885
  - use more explicit SSL error message
    Resolves: rhbz#846666


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-6
changelog:
  - Don't ask for root/admin password when users want to redirect USB
    devices
    Resolves: rhbz#859392


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-3
changelog:
  - Add versioned Requires for glib2/gtk2 as spice-gtk is using symbols
    which were added in these versions
    Resolves: rhbz#980400
  - If software smartcard support is already initialized when creating a
    smartcard channel, don't consider this as a fatal error
    Resolves: rhbz#815639
  - Convert text line-endings if necessary
    Resolves: rhbz#752350


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-4
changelog:
  - Adjust BuildRequires to make sure new enough glib/gtk+ are used
    at build time as glib 2.26 is needed for proxy support
    Resolves: rhbz#948618


author: Alon Levy <alevy@redhat.com> 0.20-11
changelog:
  - Fix failed RELRO test on spice-client-glib.
    Resolves: rhbz#998529 (previous version failed RELRO rpmdiff test)


author: Marc-Andre Lureau <marcandre.lureau@gmail.com> 0.20-11.1
changelog:
  - Fix crash when audio stream isn't started yet.
    Resolves: rhbz#1090000
  - Fix memory leak of primary surface.
    Resolves: rhbz#1090001


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-4
changelog:
  - Remove CAD rhel-only patches. Resolves: rhbz#1108628
  - Add rhel-only SPICE_NOSCALE. Resolves: rhbz#1054757
  - Check that clipboard request does not belong to remote. Resolves: rhbz#1108642


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Pavel Grunt <pgrunt@redhat.com> 0.26-8
changelog:
  - Make grab session related
    Resolves: rhbz#1330652
  - Improve messages in usb redirection dialog
    Resolves: rhbz#1298772
  - Use proxy only when needed
    Resolves: rhbz#1306311


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Initial EPEL release based on the rawhide .spec cleaned up from the parts
    that are not useful for EPEL (because the needed dependencies are not available)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Added spice-gtk-0.6-add-generated-files.patch to be able to build without
    perl-Text-CSV
  - Initial import of spice-gtk in RHEL CVS based on the EPEL .spec
  - Related: rhbz#708417


author: Uri Lublin <uril@redhat.com> - 0.8.1-2
changelog:
  - Support for spice client semi-seemless migration.
  - Update to upstream spice-protocol 0.8.2 release without rebasing
  - Added "BuildRequires: autoconf automake" for using autoreconf
    Resolves: rhbz#738262


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-2
changelog:
  - Add controller message for smartcard support
    Related: rhbz#787447
  - Add controller messages for WAN support
    Resolves: rhbz#787447
  - Add controller messages for USB support
    Resolves: rhbz#807295


author: Uri Lublin <uril@redhat.com> 0.12.2-1
changelog:
  - Rebase to upstream spice-protocol 0.12.2, which adds:
    0.12.2:
    + Add A8 surface capability in display channel.
    + Add to qxl device support for:
      = client present
      = client capabilities
      = client monitors configuration
    0.12.1:
    + Support seamless migration.
    + New QXLComposite message for better X support.
    + Support arbitrary scancode message INPUTS_KEY_SCANCODE.
    0.12.0:
    + Add support for arbitrary resolution on Windows QXL with
      QXL_ESCAPE_SET_CUSTOM_DISPLAY
    + Add support for arbitrary resolution and multiple monitor per
      display channel with QXLMonitorsConfig and co
    + build cleanup
    Resolves: rhbz#842352
    Resolves: rhbz#846910


author: Yonit Lublin <yhalperi@redhat.com> 0.12.6-1
changelog:
  - Rebase to upstream spice-protocol 0.12.6, which adds:
    0.12.6
    + Add adaptive video streaming support:
      control playback latency and receive playback
      reports from the client.
    + Add agent capabilities for signaling guest line ending.
    0.12.5
    + Add agent file xfer success status
    + Add a client-disconnected agent message
    0.12.4
    + Add agent file copy support.
    + Add agent sparse monitors capability.
    + Add controller proxy message.
    0.12.3
    +Add a generic "port" channel


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Add utf8 controller menu text patch from upstream git
  - Add smartcard channel patch from upstream git


author: Hans de Goede <hdegoede@redhat.com> - 0.10.1-1
changelog:
  - Rebase to upstream 0.10.1
  Resolves: rhbz#758089
  - This release adds support for usbredirection
  Resolves: rhbz#758091
  - This release fixes a bug in smartcard error handling
  Resolves: rhbz#741259


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-4
changelog:
  - add more logging for expired/invalid tickets
    Resolves: rhbz#787669
  - add more logging about use of certificates
    Resolves: rhbz#787678


author: Yonit Halperin <yhalperi@redhat.com> - 0.10.1-6
changelog:
  - Fix glitches in youtube movies
      + support video streams with frames of different sizes
    Resolves: rhbz#813826


author: Yonit Halperin <yhalperi@redhat.com> 0.10.1-9
changelog:
  - Fix memory leak during video streaming
    Resolves rhbz#821334
  - Fix segfault introduced when fixing rhbz#813826
    Related: rhbz#813826


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Yonit Halperin <yhalperi@redhat.com> - 0.12.0-12.el6_4.1
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#956984
    Resolves: rhbz#961427


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-13
changelog:
  - Fix " qemu-kvm: spicevmc.c:324: spicevmc_red_channel_alloc_msg_rcv_buf:
    Assertion `!state->recv_from_client_buf' failed." assertion during migration
    Resolves: rhbz#1264113


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-13.1
changelog:
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-13.2
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Victor Toso <victortoso@redhat.com> - 0.12.4-15
changelog:
  - Avoid spice assertion when changing sized stream
    Resolves: rhbz#1274575
  - Make red_client_{ref,unref} thread safe to avoid crash
    Resolves: rhbz#1361946


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16.2
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Uri Lublin <uril@redhat.com> - 0.4.2-10
changelog:
  - spice: server: new-api (4 more patches)
       + streaming-video, agent-mouse, playback-compression.
  Related: #571286


author: Uri Lublin <uril@redhat.com> - 0.4.2-13
changelog:
  - remove Requires and BuildRequires mesa-libGLU-devel
    + open-gl is now disabled.
  - bumped release to -13 due to tag issue
  Related: #482556


author: Uri Lublin <uril@redhat.com> - 0.4.2-15
changelog:
  - Fix unsafe accesses
    + fix unsafe guest data accessing.
    + fix unsafe free() call.
    + fix unsafe cursor items handling.
    + add missing overflow check.
  Resolves: #568811


author: Uri Lublin <uril@redhat.com> - 0.7.2-2
changelog:
  - Rebase to spice upstream release 0.7.2
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.7.2-4
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client (not part of this package)
    - track number of expected reader insertions
  Resolves: #674937


author: Uri Lublin <uril@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream 0.7.3:
    + Mostly smart-card updates:
      - including all the changes in 0.7.2.4
    + Some gcc warning cleanups.
  - Fix permissions of spice-server.pc
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.0-1
changelog:
  - Rebase to upstream 0.8.0
    + Includes "Fix segfault on migration" patch
    + Some spice-client bug fixes.
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.1-1
changelog:
  - Rebase to upstream 0.8.1, including
   + Make copy/paste support configurable
   + Some server/vdagent bugs fixed
  Resolves: #710200


author: Uri Lublin <uril@redhat.com> - 0.8.2-1
changelog:
  - Rebase to upstream 0.8.2, including
   + sasl support (fdo bz 34795)
   + support guest async io
   + support guest suspend and hibernate
   + add symbol versioning to libspice-server.so
   + prevent running an old spice-server with a newer qemu
   + Bug fixes (RHBZ): 714801, 713474, 674532, 653545
   + BuildRequires spice-protocol >= 0.8.1 and cyrus-sasl-devel
  Resolves: #723676


author: Uri Lublin <uril@redhat.com> - 0.8.2-3
changelog:
  - Drop unnecessary X11 and alsa requires from spice-server.pc
    + Fix a rpmdiff warning
  Related: rhbz#723676
  - server/red_dispatcher: fix wrong resolution set for tablet
  Resolves: rhbz#726973


author: Uri Lublin <uril@redhat.com> - 0.8.2-4
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - client patches are not applied.
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#738266


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-6
changelog:
  - Fix setting of the guest resolution from a multi monitor client
    Resolves: rhbz#680227
  - Limit build archs to i686 and x86_64
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-7
changelog:
  - Daemonize per user session vdagent process on startup, this avoids a long
    delay after logging in
  - Fix mouse not working with the agent installed
    Resolves: rhbz#688257


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-8
changelog:
  - Fix chunk demultiplexing when chunks from messages for different ports
    get intermixed
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-1
changelog:
  - New upstream release 0.8.1
    Resolves: rhbz#722477
  - Fixes vdagent not auto restarting when vdagentd gets restarted
    Resolves: rhbz#681797
  - Fixes vdagent crash when copying large (multiple megabytes) amount of data
    from the client clipboard to the guest clipboard
    Resolves: rhbz#690164


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-3
changelog:
  - Fix resolution sync not working when connecting with a multi monitor client
    to a single monitor guest
    Resolves: rhbz#748760


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
    Resolves: rhbz#842355
  - This switches to syslog for logging, adding timestamps, etc. to the logs
    Resolves: rhbz#747894
  - This adds support for dynamically adding monitors and resolutions
    Resolves: rhbz#842298


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-2
changelog:
  - Silence session agent error logging when not running in a vm
    Resolves: rhbz#999804
  - Release guest clipboard ownership on client disconnect
    Resolves: rhbz#1003977


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-5
changelog:
  - Add support for TIMESTAMP/STRING selection types, this fixes copy and paste
    issues with some applications (vncviewer for example).
    Resolves: rhbz#1117764


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-6
changelog:
  - randr: Make resolution changing more robust
    Resolves: rhbz#1206117, rhbz#1130080 and rhbz#1209550


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-8
changelog:
  - Cannot get same result enablng second monitor after it was disabled using
    Guest's "Display Preference"
    Resolves: rhbz#1086657


author: Victor Toso <victortoso@redhat.com> 0.14.0-12
changelog:
  - Do not allow file-transfer on locked session
    Resolves: rhbz#1323630
  - Do not allow file-transfer on login screen
    Resolves: rhbz#1323640


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-5
changelog:
  - Allow having a sparse monitor config (ie monitor 1 and 3 active)
    Resolves: rhbz#894036
  - Fix session spice-vdagent crash on system spice-vdagentd restart
    Resolves: rhbz#894365
  - Don't log a warning when there are less qxl devices then monitors
    Resolves: rhbz#895004
  - Restore old monitor config when failing to set a new monitor config
    Resolves: rhbz#881020


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - Rebase to spice-vdagent-0.14.0 release
  - Drop all patches (all upstream)
    Resolves: rhbz#951596
  - Advertise Unix line-endings for clipboard data
    Resolves: rhbz#799482
  - Add support for setups with multiple Screens
    Resolves: rhbz#904082
  - Make console-kit integration runtime configurable
    Resolves: rhbz#904084


author: Uri Lublin <uril@redhat.com> 2.4-2
changelog:
  - add npplat.h to Makefile.am sources
  - add nsISpicec.xpt to Makefile.am EXTRA_DIST
  - add version to plugin name string
  Resolves: #672761
  - change location & name  of logfile & unix-domain-socket
  Resolves: #630601
  - look for spicec in /usr/bin if not found in /usr/libexec
  Resolves: #672497


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-13
changelog:
  - Fix SendCtrlAltDelete property name so that enabling/disabling
    Ctrl+Alt+Del from the rhev/ovirt portal actually works
    Related: rhbz#752090


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-17
changelog:
  - Add WAN options to spice-xpi plugin
    Resolves: rhbz#747313
  - Add controller messages for new USB redirection
    Resolves: rhbz#807303


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Kyle McMartin <kyle@redhat.com> - 4.0-3
changelog:
  - Add .el6 tag to Release.
  - Use upstream tarball (instead of CVS snapshot.)
    (There's no code difference.)


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.15-4
changelog:
  - Related: rhbz#543948
  - TPROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-1
changelog:
  - Resolves: #564296 - Rebase to new upstream tarball (fixes licensing issues)
  - Resolves: #561743 - CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)
  - fixes rpmlint issues in spec file
  - fixed rpmlint issue initscript file


author: Jiri Skala <jskala@redhat.com> -7:3.1.4-1
changelog:
  - Resolves: #564296 - Rebase squid to stable upstream tarball 3.1.4
  - bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-1
changelog:
  - Resolves: #639365 - Rebase squid to version 3.1.10
  - Resolves: #666533 - small memleak in squid-3.1.4


author: Michal Luscon <mluscon@redhat.con> - 7:3.1.10-8
changelog:
  - Resolves: #844723 - NTLM pass-through authentication does not work
  - Resolves: #832484 - Squid exits when IPv6 is disabled and request contains IPv6 address


author: Michal Luscon <mluscon@redhat.com> - 7:3.1.10-10
changelog:
  - Resolves #798090 - Client timeout uses server-side "read_timeout"
  - Resolves #833086 - Private md5 hash function does not comply FIPS
  - Resolves #782732 - Squid crashes by segfault when it reboots
  - Resolves #797571 - Squid userid is not added to wbpriv group
  - Disable strict-error-checking on account of squid-fips.patch


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-22
changelog:
  - Resolves: #1066368 - memory utilization of Squid becomes very large
  - Resolves: #1011952 - cachemgr.cgi doesn't work by default
  - Resolves: #876980 - Init script: missing condrestart in Usage
  - Resolves: #1058207 - Child process of squid exited abnormally and generated core files
  - Resolves: #998809 - assert(!fd_table[fd].closing()) failed in comm_write()


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-2
changelog:
  - Resolves: #735448 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser
  - removed unused patch from cvs


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-11
changelog:
  - Resolves: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-13
changelog:
  - Resolves: #1230753 - insufficient check for running service in condrestart
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-14
changelog:
  - Related: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"
  - Related: #1230753 - insufficient check for running service in condrestart 
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.1
changelog:
  - Resolves: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.2
changelog:
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.3
changelog:
  - Resolved: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-17
changelog:
  - Resolves: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-18
changelog:
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-19
changelog:
  - Resolved: #1334490 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-24
changelog:
  - Resolves: #1235114 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-35
changelog:
  - Resolves: #1114714: When squid returns an ACL tag utilizing an external ACL,
    sometimes the incorrect tag is used for redirection


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-10
changelog:
  - Resolves: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-11
changelog:
  - Related: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-12
changelog:
  - Resolves: #1334500 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid34: various flaws
  - Resolves: #1334507 - CVE-2016-4553 squid34: squid: Cache poisoning 
    issue in HTTP Request handling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-13
changelog:
  - Resolves: #1303053 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-15
changelog:
  - Resolves: #1415874 - squid34 does not fallback protocol from IPv6 to IPv4
    in HTTPS connection even if the fix in bz1303067 is applied


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-1
changelog:
  - Resolves: #1265328 - Add new version (3.4.14) of Squid proxy as
    new component
  - removed old Resolves and Related tags from Changelog


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-4
changelog:
  - Resolves: #1301005 - insufficient check for running service
    in condrestart and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-9.1
changelog:
  - Resolves: #1330574 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-9.2
changelog:
  - Related: #1330574 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-9.3
changelog:
  - Resolves: #1334499 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid34: various flaws
  - Resolves: #1334506 - CVE-2016-4553 squid34: squid: Cache poisoning
    issue in HTTP Request handling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-9.4
changelog:
  - Resolves: #1412733 - CVE-2016-10002 squid34: squid: Information disclosure
    in HTTP request processing


author: Doug Ledford <dledford@redhat.com> - 0.0.4-8.el6
changelog:
  - Update to latest upstream version so we can have an actual URL that works
  - Fix ups for pkgwrangler import and also fix bug reported against rhel5
    version of package (552915)
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 0.0.4-11.el6
changelog:
  - Add the init script even though it isn't enabled by default
  - Fix the init script's usage of srp_daemon.conf
  - Resolves: bz815215, bz815234


author: Doug Ledford <dledford@redhat.com> - 0.0.4-12.el6
changelog:
  - Can't use %{name} macro in the %post and %preun as the service
    name is srpd while the package name is srptools
  - Related: bz815215


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13.el6
changelog:
  - Need to background the srp_daemon.sh script in our init script, as
    srp_daemon.sh doesn't return until killed
  - Resolves: bz816087


author: Honggang Li <honli@redhat.com> - 1.0.3-2
changelog:
  - Adjust startup/shutdown priority to start srpd before netfs service
  - connect remote srp targets before start srpd
  - clean up status actions
  - Resolves: bz1233016


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.1
changelog:
  - Resolves: rhbz#1146198 - Password expiration policies are not being
                             enforced by SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.3
changelog:
  - Resolves: rhbz#1165074 - RHEL6.6 sssd (1.11) doesn't return all group
                             memberships against an IPA server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.4
changelog:
  - Relax the libldb requirements
  - Backport removal of unused signal functions to avoid conflict with Samba
  - Resolves: rhbz#1201666 - Relax the libldb requirements to unblock RH Storage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-38
changelog:
  - Include several upstream fixes related to ID views
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1213947 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-39
changelog:
  - Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and
                             gets avc denial when ssh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-40
changelog:
  - Resolves: rhbz#1219844 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-41
changelog:
  - Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled
                             subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-42
changelog:
  - Resolves: rhbz#1215765 - sssd nss responder gets wrong number of
                             secondary groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-45
changelog:
  - Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't
                             return all groups on first attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.8
changelog:
  - Resolves: rhbz#1305447 - sssd_nss memory usage keeps growing on
                             sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                             trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on
                              sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                              trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                             account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-15
changelog:
  - Require a newer selinux-policy to avoid issues when prompting for SC PIN
  - Related: rhbz#1299066 - smartcard login does not prompt for pin when
                            ocsp checking is enabled (default config)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-16
changelog:
  - Resolves: rhbz#1308939 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-17
changelog:
  - Backport of a more minimal dependency patch to avoid changes to AD
    provider behaviour
  - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                            account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-18
changelog:
  - Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe
                             with 1.11.6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-20
changelog:
  - Actually apply patches from previous build
  - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-21
changelog:
  - Resolves: rhbz#1313940 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.2
changelog:
  - Resolves: rhbz#1342058 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.6
changelog:
  - Explicitly Require the matching version of ding-libs
  - Related: rhbz#1379580 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-49
changelog:
  - Require the matching version of ding-libs
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-50
changelog:
  - Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                            cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-51
changelog:
  - Revert the ding-libs requirement
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-54
changelog:
  - Apply several more smartcard-related patches.
  - Related: rhbz#1300421 - Screen locks and smart card is removed - must
                            show a message to insert the correct smartcard


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1534618 - ABRT crash - /usr/libexec/sssd/sssd_nss
                             [rhel-6.9.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1438360 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                             function is provided by the client app
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                             failed user logins
  - Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
  - Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                             Global scope


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-59
changelog:
  - Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
  - Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-60
changelog:
  - Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.1
changelog:
  - Resolves: rhbz#708352 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf
  - Resolves: rhbz#708353 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.2
changelog:
  - Resolves: rhbz#716905 - sssd shuts down if inotify crashes
  - Resolves: rhbz#716909 - libsss_ldap segfault at login against OpenLDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-66.1
changelog:
  - Resolves: rhbz#758696 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758713 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.1
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1028046 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.2
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1032966 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.3
changelog:
  - Resolves: #1036168 - sssd can't retrieve auto.master when using the
                         "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.4
changelog:
  - Resolves: #1044905 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.9
changelog:
  - Resolves: #996020 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.10
changelog:
  - Resolves: #1003567 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.11
changelog:
  - Resolves: #1022708 - RHEL6 sssd upgrade restorecon workaround for
                         /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-76
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Ondrej Vasik <ovasik@redhat.com> 1.5-7
changelog:
  - Merge review (#226434) changes: convert AN-1.5 to utf-8,
    spec file cosmetic/policy changes, ship README.linux in doc


author: Jeff Law <law@redhat.com> - 4.5.19-1.11.el6_3.1
changelog:
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#849052).


author: Jeff Law <law@redhat.com> - 4.5.19-1.12
changelog:
  - Fix semtimedop decoding for S390/S390x (#759569)
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#837183).


author: Jeff Law <law@redhat.com> - 4.5.19-1.13
changelog:
  - build strace32 on ppc and s390 which can be installed alongside
    strace/strace64 on ppc64 and s390x (#809917)


author: Jeff Law <law@redhat.com> - 4.5.19-1.18
changelog:
  - Fix output string for getsockopt (#862321)
  - Handle MADV_DONTDUMP and MADV_DODUMP (#921548)
  - Do not segfault when sorting by name and name is NULL (# 1044605)


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Rex Dieter <rdieter@fedoraproject.org> 0.7-0.1.RC1
changelog:
  - strigi-0.7-RC1
  - use %_isa where appropriate
  - %files: track lib sonames
  - strigi-daemon.desktop: +Hidden=true (ie, disable autostart by default)


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-5
changelog:
  - Fix first connection failure when configuration pulled from stdin (#927928)
  - Log the negotiated protocol version to the logs (#1275611)


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-6
changelog:
  - Add support for TLSv1.1 and TLSv1.2, change the default for client from
    SSLv3 to all version support
  - Add support for DH and ECDH ciphersuites on server


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 573591: Fix the permissions on some directories (bkearney@redhat.com)
  - 678049: Fix status after CLI register with --autosubscribe.
    (dgoodwin@redhat.com)
  - 676349: python deprecation fixups (jbowes@redhat.com)
  - 676363 - rhsm-compliance-icon has no icon image (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 676371 - Compliance Assistant closes when you're not done
    (cduryee@redhat.com)
  - 676348: make config file and runtime dirs/logs only readable by root
    (jbowes@redhat.com)
  - 676534 - Got message “unable to read /var/lib/rhsm/facts/facts.json” at
    first time register to stage (cduryee@redhat.com)
  - 675777 Date search field has no accessibility handler (cduryee@redhat.com)
  - 675817 - Compliance Assistant needs an Update button for the date
    (cduryee@redhat.com)
  - 675812 - Some tracebacks while beating on subscription-manager-gui
    (cduryee@redhat.com)
  - 675951 compliance asst doesn't word wrap label (cduryee@redhat.com)
  - 670655 can't dismiss error dialog when subscribing to personal subscriptions
    (cduryee@redhat.com)
  - 673050: Using strftime to format update time. (jharris@redhat.com)
  - 674078: send 'right now' for compliance today, too (jbowes@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 678003: Write proxy info for yum repositories we manage.
    (dgoodwin@redhat.com)
  - 678003: Fix a certlib cached connection. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.95.4-1
changelog:
  - Add support for tags. (dgoodwin@redhat.com)
  - 682311: rhsm-compliance icon pegs the cpu at 100% (cduryee@redhat.com)
  - 672821: Latest man pages from deon (bkearney@redhat.com)
  - 679961:  Clearing out all fields in subscription details widget.
    (jharris@redhat.com)
  - 629670: check for warning periods in valid certs, not expired ones
    (jbowes@redhat.com)
  - 676017: Configure the release branch to use production (bkearney@redhat.com)
  - 676371: Better Compliance Assistant refreshing after bind.
    (dgoodwin@redhat.com)
  - Move the translations to be language only, not language plus country
    (bkearney@redhat.com)
  - 678151: prompt for credentials if not supplied as cli args
    (jbowes@redhat.com)
  - 680399: add --auto to subscribe (jbowes@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 672562: request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - Add in the translated po files (bkearney@redhat.com)
  - 677756 add accesibility names to compliance assistant tables
    (alikins@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.5-1
changelog:
  - Resolves: #688192,#688469,#683968,#688550,#685086,#685099,#685145,#685108,#684680,#684285,#676377,#681925,#614453,#682331
  - 688192: don't look for dmi info on machines without dmi (jbowes@redhat.com)
  - 688469: workaround for optparse's lack of i18n/l10n (jbowes@redhat.com)
  - 683968: ensure yum plugins don't log to stdout (jbowes@redhat.com)
  - 688550: ensure i18n configuration is the first thing to happen
    (jbowes@redhat.com)
  - 685086: Fact times were read from the file but not localized before putting
    on the ui (bkearney@redhat.com)
  - 685099: Add in missed translations to the compliance assistant string
    (bkearney@redhat.com)
  - 685145: Remove rogue use of pyOpenSSL (jbowes@redhat.com)
  - 685108: Translation missed for the import dialog (bkearney@redhat.com)
  - 684680: Remove unnecessary gettext text domain calls, and ensure only using
    the rhsm domain (bkearney@redhat.com)
  - 684285: Add a svg library dependency (bkearney@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 681925: subscription-manager masks SIGPIPE when running virt-what, resulting
    in errors in shell commands (cduryee@redhat.com)
  - 614453: fix list cli command for multi entitled products (jbowes@redhat.com)
  - 682331: Latest man pages from Deon (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.6-1
changelog:
  - Resolves: #691137,#691536,#684647,#688592
  - Add the latest l10n strings (jbowes@redhat.com)
  - 691137: set return code from main() for rhsmcertd (jbowes@redhat.com)
  - latest l10n strings (jbowes@redhat.com)
  - 691536: More string updates (jbowes@redhat.com)
  - 691536: update strings replacing compliance with valid (jbowes@redhat.com)
  - 684647: i18n/l10n our .desktop files (jbowes@redhat.com)
  - 688592: Latest strings from the i18n team (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.7-1
changelog:
  - Resolves: #691784, #688419, #691480, #691536, #691788
  - 691784: fix entitlement failure that throws sequence error
    (alikins@redhat.com)
  - 688419: Latest japanese strings (bkearney@redhat.com)
  - 691784: Fix a bug when bare strings were passed to handle_gui_exception
    (alikins@redhat.com)
  - 691784: Fix handling of unsubscribing imported certs while unregistered
    (alikins@redhat.com)
  - 691480: syslog non-compliance on the proper status code (jbowes@redhat.com)
  - 691480: update syslog message for proper cli command name (jbowes@redhat.com)
  - 691536: remove 'compliance' from a11y string, and remove useless glade string
    (jbowes@redhat.com)
  - 691788: Check if entitlement cert is valid before allowing manual import.
    (dgoodwin@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.9-1
changelog:
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)


author: Adrian Likins <alikins@redhat.com>
changelog:
  - Resolves: #702403
  - use z branch now (cduryee@redhat.com)
  - 700601: try really hard to set a meaningful locale (alikins@redhat.com)
  - 683553: subscription-manager-gui is displaying unlimited pools as -1
    (cduryee@redhat.com)
  - Write unique key.pem for each entitlement. (dgoodwin@redhat.com)
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)
  - 699442: dates are being displayed incorrectly everywhere (alikins@redhat.com)
  - 696020: on x86, serial numbers do not like to be long's (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.13-1
changelog:
  - Resolves: #702403
  - 702403: rev the version to get ahead (alikins@redhat.com)
  - use z branch now (cduryee@redhat.com)
  - 700601: try really hard to set a meaningful locale (alikins@redhat.com)
  - 683553: subscription-manager-gui is displaying unlimited pools as -1
    (cduryee@redhat.com)
  - Write unique key.pem for each entitlement. (dgoodwin@redhat.com)
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)
  - 699442: dates are being displayed incorrectly everywhere (alikins@redhat.com)
  - 696020: on x86, serial numbers do not like to be long's (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.15-1
changelog:
  - 711133: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 701374: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)
  - 712130: cli was using product names for ent cert-> product cert matching
    (alikins@redhat.com)
  - 703921: contract selection was not showing dates for pools
    (alikins@redhat.com)
  - 712128: fix bug showing the "you are registered to rhn" dialog
    (alikins@redhat.com)
  - 711133: Handle updates from old style key.pem certs (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.16-1
changelog:
  - Automatic commit of package [subscription-manager] release [0.95.15-1].
    (alikins@redhat.com)
  - 712409: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 701374: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)
  - 712130: cli was using product names for ent cert-> product cert matching
    (alikins@redhat.com)
  - 712408: contract selection was not showing dates for pools
    (alikins@redhat.com)
  - 712128: fix bug showing the "you are registered to rhn" dialog
    (alikins@redhat.com)
  - 712409: Handle updates from old style key.pem certs (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.17-1
changelog:
  - Automatic commit of package [subscription-manager] release [0.95.16-1].
    (alikins@redhat.com)
  - Automatic commit of package [subscription-manager] release [0.95.15-1].
    (alikins@redhat.com)
  - 712409: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 712408: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.7-1
changelog:
  - I18N update. (dgoodwin@redhat.com)
  - Add test case for entitlement certs with no products (alikins@redhat.com)
  - Fix problem with subscribing to products with no product certs
    (alikins@redhat.com)
  - Remove unneeded for loop around getProduct (alikins@redhat.com)
  - Fix typo in partially valid syslog message (jbowes@redhat.com)
  - 733042: Update default rhsm.conf values for production. (dgoodwin@redhat.com)
  - 732499: Fix redeem command error handling. (dgoodwin@redhat.com)
  - Move the project to the public zanata server (bkearney@redhat.com)
  - implement red/yellow/green for the cli (jesusr@redhat.com)
  - Add 'partially valid' status to syslog and nag icon (jbowes@redhat.com)
  - Add a debugging cli arg to rhsmd to force a signal (jbowes@redhat.com)
  - Group All Available subscriptions by stack id (mstead@redhat.com)
  - Add stacking_id grouping to Subscription Assistant (mstead@redhat.com)
  - Update man page. (bkearney@redhat.com)
  - Refactor facts to use the cache manager logic. (dgoodwin@redhat.com)
  - Fix "import" cli with no certs (alikins@redhat.com)
  - Upload info about the installed products on the system. (dgoodwin@redhat.com)
  - Add "partially valid entitlement coverage" status to top-left sm-gui icon.
    (cduryee@redhat.com)
  - Aligned stacking id up with other subscription properties.
    (mstead@redhat.com)
  - Display My Subscriptions as a tree grouped by stacking_id.
    (mstead@redhat.com)
  - Created a MappedTreeStore implementation. (mstead@redhat.com)
  - Created StackingGroupSorter class to sort entitlements into groups based on
    stacking_id (mstead@redhat.com)
  - Make the environemnt output look like all the others (bkearney@redhat.com)
  - Client-side changes for healing (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.8-1
changelog:
  - Fix issues with list --installed/consumed with deletion of certs
    (alikins@redhat.com)
  - Display a dialog box when subscription import was successful.
    (cduryee@redhat.com)
  - In the mysubs tab, title stacked groups by product name (jbowes@redhat.com)
  - Removed icons for virt/phys machines and replaced with text column
    (mstead@redhat.com)
  - 730018: Update for new registered with rhn classic msg (jbowes@redhat.com)
  - 717629: Clear user credentials on registration dialog after register/cancel
    (mstead@redhat.com)
  - 717405: Return to credentials dialog after cancelled registration.
    (mstead@redhat.com)
  - 733658: Check if directory exists before listing files. (mstead@redhat.com)
  - Correction to config command remove logic. Changes for List Formatting and
    Messages. (wpoteat@redhat.com)
  - Support "yellow" icon for partially covered products (cduryee@redhat.com)
  - Make cert_sorter show valid/partially_valid/unentitled mutually exclusive
    (alikins@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.9-1
changelog:
  - 734880: Handle bundled certs in the installed produict status.
    (bkearney@redhat.com)
  - Center the machine type column header. (mstead@redhat.com)
  - Move quantity column to the end. (mstead@redhat.com)
  - Center the Arch column header (mstead@redhat.com)
  - Center tree view table properties. (mstead@redhat.com)
  - Add '* Click to Adjust Quantity' label to places allowing editable
    subscription quantity. (mstead@redhat.com)
  - managerlib was expecting a single ent_cert, but we return a list
    (alikins@redhat.com)
  - Add the coverage tool detritus to .gitignore (alikins@redhat.com)
  - Only autoheal when required (cduryee@redhat.com)
  - 735226: Importing should fail without a valid key and cert
    (bkearney@redhat.com)
  - Add a "refresh" method to cert_sorter (cduryee@redhat.com)
  - Double click or button press (enter, return, space) on row will
    expand/collapse row. (mstead@redhat.com)
  - Update to All Available Subscriptions tab to put stacked subscriptions under
    parent node. (mstead@redhat.com)
  - Display subscription assistant's subscriptions as a tree. (mstead@redhat.com)
  - Add a require_connection callback to commands (bkearney@redhat.com)
  - 730020: Change the help text to show that config can list or set changes
    (bkearney@redhat.com)
  - New icons for red/green (cduryee@redhat.com)
  - Add virt_only attribute to subscription detail pane (cduryee@redhat.com)
  - Use server side consumer autoheal flag. (dgoodwin@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.10-1
changelog:
  - 706853: Do not perform local cleanup if unregister server call fails
    (mstead@redhat.com)
  - 737684: replace through with until in sub assistant (jbowes@redhat.com)
  - 739796: replace certificate column with status (jbowes@redhat.com)
  - 736784: Incorrect use of sys.exit in option checking (wpoteat@redhat.com)
  - 738549: Allow subscription-manager to run without dbus (jbowes@redhat.com)
  - 739714: Fix typo in the clean help text (bkearney@redhat.com)
  - 736424: list --installed only shows installed products (alikins@redhat.com)
  - 718045: Registration dialog remains open on invalid credentials.
    (mstead@redhat.com)
  - 642660: [First Boot] Disable 'Back' button once registered and on
    subscription-manager screen (RHEL6) (mstead@redhat.com)
  - 739595: [Fistboot] Ensure the credentials screen is reset on FB module
    initialization. (mstead@redhat.com)
  - 739227: make healFrequency non-mandatory (cduryee@redhat.com)
  - Applying "indent -linux -pcs -psl -ci8 -cs -cli8 -cp0" to codebase.
    (cduryee@redhat.com)
  - 738549: remove dbus dependency in post/postun steps (cduryee@redhat.com)
  - 737841: Handle dates beyond 2038 on 32-bit systems. (dgoodwin@redhat.com)
  - 707641: CLI auto-subscribe tries to re-use basic auth credentials.
    (wpoteat@redhat.com)
  - 712047: yum prints non-error messages when running in quiet mode
    (cduryee@redhat.com)
  - 736784: Subscription-manager config --remove add config property to rhsm.conf
    if it doesn't exist. (wpoteat@redhat.com)
  - Update translations (bkearney@redhat.com)
  - 735338: Subscription Manager CLI tool does not allow unsubscribe when not
    registered. (wpoteat@redhat.com)
  - 735695: add support for multiple config "--remove" options via cli
    (cduryee@redhat.com)
  - 734606: ImportFileExtractor now creates cert/key files based on serial number
    of the cert. (mstead@redhat.com)
  - 736166: move certs from subscription-manager to python-rhsm
    (cduryee@redhat.com)


