# changelog

author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
changelog:
  - Resolves: rhbz#645449 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Related: rhbz#644072 - Rebase SSSD to 1.5
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  - Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Related:  rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - Also add the updated ding-libs to the BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-4
changelog:
  - Resolves: rhbz#674172 - Group members are not sanitized in nested group
  - processing
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
changelog:
  - Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named
  -                         "default"
  - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate
  -                         password
  - Resolves: rhbz#674141 - Traceback call messages displayed while
  -                         "sss_obfuscate" command is executed as a non-root
  -                         user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
changelog:
  - Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login
  - Resolves: rhbz#675284 - "no matching rule" message logged on all successful
  -                         requests
  - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for
  -                         authentication


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678410 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#678593 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678777 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#677318 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups
  - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Related: rhbz#680440 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683431 - sssd consumes 100% CPU
  - Related: rhbz#680440  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Resolves: rhbz#683860 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#689886 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690131 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the
  -                         gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#699530 - Users with a local group as their primary GID are
  -                         denied access by the simple access provider
  - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a
  -                         member of any group
  - Resolves: rhbz#703624 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-36
changelog:
  - Resolves: rhbz#698723 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Resolves: rhbz#707513 - Unable to authenticate users when username
  -                         contains "\0"


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man
  -                         page


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#709342 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are
  -                         being logged multiple times when the provider comes
  -                         back online
  - Resolves: rhbz#707997 - The IPA provider does not work with IPv6
  - Resolves: rhbz#677327 - [RFE] Support overriding attribute value
  - Resolves: rhbz#692090 - SSSD is not populating nested groups in
  -                         Active Directory


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-41
changelog:
  - Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#713438 - sssd shuts down if inotify crashes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-42
changelog:
  - Resolves: rhbz#711416 - During the change password operation the ccache is
  -                         not replaced by a new one if the old one isn't
  -                         active anymore
  - Resolves: rhbz#715609 - Certificate validation fails with message
  -                         "Connection error: TLS: hostname does not match CN
  -                         in peer certificate"
  - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Honor TTL values when resolving hostnames


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-53
changelog:
  - Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host
                            groups
  - Resolves: rhbz#740501 - SSSD not functional after "self" reboot
  - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be
                            case-insensitive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-55
changelog:
  - Resolves: rhbz#738621 - Lookup fails for non-primary usernames with
                            multi-valued uid
  - Resolves: rhbz#738629 - Group lookups doesn't return it's member for
                            sometime when the member has multi-valued uid
  - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber
                            to integer
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-56
changelog:
  - Resolves: rhbz#742278 - Rework the example config
  - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was
                            initialized
  - Resolves: rhbz#742526 - SSSD's man pages are missing information
  - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-67
changelog:
  - Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758157 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-2.beta2
changelog:
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3
  - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
                            a dependancy
  - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers
  - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and
                            netgroup search base correctly
  - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb
                            AS requests
  - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision
  - Resolves: rhbz#785904 - [RFE] SSSD should have --version option
  - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider
  - Resolves: rhbz#785898 - Enable midway cache refresh by default
  - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for
                            a non-existing netgroup
  - Resolves: rhbz#785884 - Honour TTL when resolving host names
  - Resolves: rhbz#785883 - check DNS records before updates
  - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead
                            of guessing
  - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line
  - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config
                            file too much
  - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server
                            has been reinitialized
  - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc
  - Resolves: rhbz#773660 - Kerberos errors should go to syslog
  - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native
                            IPA netgroups code
  - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF
                            source host group in an hbacrule
  - Resolves: rhbz#771702 - sssd_pam crashes during change password operation
                            against a IPA server
  - Resolves: rhbz#771361 - case_sensitive function not working as intended for
                            ldap
  - Resolves: rhbz#768935 - Crash when applying settings
  - Resolves: rhbz#766941 - The full dyndns update message should be logged into
                            debug logs
  - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory
                            value
  - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab
                            principal name
  - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files
  - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug
                            levels on the fly
  - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional
  - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal
                            netgroup representation
  - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option
  - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control
  - Resolves: rhbz#753876 - [RFE] Add support for the services map
  - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after
                            group name change in MSAD
  - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle
                            for some (configurable) time
  - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD
  - Related:  rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#742052 - id -G group resolution takes extremely long
  - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange
  - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases
  - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or
                            insensitive
  - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users
  - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control
                            disabled for openldap
  - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login
  - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 during auth when password for the user is
                            not set


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-3.beta2
changelog:
  - Handle filtering python Provides in a safer way
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD
  - Resolves: rhbz#788979 - sssd crashes during initgroups against a user
                            belonging to nested rfc2307bis group


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-5
changelog:
  - Resolves: rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#785871 - wrong build dependency on nscd
  - Resolves: rhbz#785873 - IPA host search base cannot be set
  - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group
                            lookups
  - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more
                            sparingly
  - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64
  - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user
                            entries
  - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or
                            memberNisNetgroup entries are deleted from a
                            netgroup
  - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load
  - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is
                            logged at each login
  - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-7
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Use a patch and install the script to python_sitelib
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-8
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Fix typo in the patch
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-9
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Remove old copy from the spec file
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-10
changelog:
  - Fix explicit requires to use openldap instead of openldap-libs
  - Related:  rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-11
changelog:
  - Do not auto-upgrade debug levels
  - Tool still available for manual use
  - Reverts:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#798881 - Install-time warnings
  - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also
                            the dns_discovery_domain
  - Resolves: rhbz#798655 - Password logins failing due to a process with high
                            UID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-12
changelog:
  - Resolves: rhbz#801407 - sssd_nss gets hung processing identical search
                            requests
  - Resolves: rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies
  - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials
  - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to
                            true
  - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work
  - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false
  - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam
                            can use
  - Resolves: rhbz#799971 - sssd_be crashes on shutdown
  - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested
                            group structure
  - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy
                            provider configured
  - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd
                            is configured as proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-15
changelog:
  - Update translations
  - Resolves: rhbz#802372 - Pick up latest translation files for SSSD
  - Resolves: rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Related:  rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-17
changelog:
  - Related:  rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica
                            using IP address
  - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with
                            case_sensitive=false
  - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set
  - Resolves: rhbz#805034 - accessing an undefined variable might cause crash
  - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-18
changelog:
  - Resolves: rhbz#804057 - Initial service lookups having name with uppercase
                            alphabets doesn't work
  - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names
                            doesn't work when case_sensitive=false
  - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple
                            realms in a single keytab
  - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false
  - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name
                            resolution times out
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-20
changelog:
  - Related: rhbz#805452  - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-21
changelog:
  - Resolves: rhbz#808458 - Authconfig crashes when sets krb realm
  - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is
                            running
  - Resolves: rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-22
changelog:
  - Fix typo in patch for SSH umask
  - Related:  rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-33
changelog:
  - Resolves: rhbz#840089 - Update the shadowLastChange attribute
                            with days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-1.rc1
changelog:
  - Rebase to 1.9.0 RC1
  - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4
  - Bump the selinux-policy version number to pull in required fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2
changelog:
  - Fix the "ca" translation of the sssd-simple manual page
  - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5
changelog:
  - Do not send SIGKILL to service right after sending SIGTERM
  - Resolves: #771975
  - Fix the initial sudo smart refresh
  - Resolves: #869013
  - Implement password authentication for users from trusted domains
  - Resolves: #869071
  - LDAP child crashed with a wrong keytab
  - Resolves: #869150
  - The sssd_nss process grows the memory consumption over time
  - Resolves: #869443


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-6
changelog:
  - Resolves: rhbz#871576 - sssd does not resolve group names from AD
  - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file
                            in the pam responder
  - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider
                            directive


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-7
changelog:
  - Resolves: rhbz#873032 - Move sss_cache to the main subpackage
  - Resolves: rhbz#829740 - Init script reports complete before sssd is actually
                            working
  - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in
                            ldap_uri
  - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly
  - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                            if the sssd is not running
  - Resolves: rhbz#872110 - User appears twice on looking up a nested group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-9
changelog:
  - Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an
                            option for the [sssd] section


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-10
changelog:
  - Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type
  - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                           if the sssd is not running


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-12
changelog:
  - Resolves: rhbz#870278 -  ipa client setup should configure host properly
                             in a trust is in place


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-16
changelog:
  - Resolves: rhbz#875738 - offline authentication failure always returns
                            System Error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-19
changelog:
  - Resolves: rhbz#877130 - LDAP provider fails to save empty groups
  - Related: rhbz#869466 - check the return value of waitpid()


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-20
changelog:
  - Resolves: rhbz#877126 - subdomains code does not save the proper
                            user/group name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-21
changelog:
  - Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire
                            ldap connections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-22
changelog:
  - Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart
                            after sbus failure


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-25
changelog:
  - Resolves: rhbz#878262 - ipa password auth failing for user principal
                            name when shorter than IPA Realm name
  - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately
                            from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-26
changelog:
  - Resolves: rhbz#874673 - user id lookup fails using proxy provider
  - Fix a possibly uninitialized variable in the LDAP provider
  - Related: rhbz#877130


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-27
changelog:
  - Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken
                            configurations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-28
changelog:
  - Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code
                            skips a built-in group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-31
changelog:
  - Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an
                            empty hostent during the DNS update
  - Do not version libsss_sudo, it's not supposed to be linked against, but
    dlopened (Related: rhbz#761573)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-32
changelog:
  - Resolves: rhbz#875677 - password expiry warning message doesn't appear
                            during auth
  - Fix potential NULL dereference when skipping built-in AD groups
    (Related: rhbz#874616)
  - Add missing parameter to DEBUG message (Related: rhbz#829742)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-34
changelog:
  - Resolves: rhbz#877974 - updating top-level group does not reflect ghost
                            members correctly
  - Resolves: rhbz#880159 - delete operation is not implemented for ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-35
changelog:
  - Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup
                            midpoint refresh to be always set to 10 seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-36
changelog:
  - Resolves: rhbz#883336 - sssd crashes during start if id_provider is
                            not mentioned


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-37
changelog:
  - Resolves: rhbz#884480 - user is not removed from group membership during
                            initgroups
  - Fix incorrect synchronization in mmap cache (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-38
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider
  - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client
    libraries (Related: #870060)
  - Move sss_ssh_knownhosts documentation to the correct section
    (Related: #870060)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-39
changelog:
  - Resolves: rhbz#882221 - Offline sudo denies access with expired
                            entry_cache_timeout
  - Fix several bugs found by Coverity and clang:
  - Check the return value of diff_gid_lists (Related: #869071)
  - Move misplaced sysdb assignment (Related: #827606)
  - Remove dead assignment (Related: #827606)
  - Fix copy-n-paste error in the memberof plugin (Related: #877974)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-40
changelog:
  - Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work
  - Fix the error handler in sss_mc_create_file (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-42
changelog:
  - Resolves: rhbz#885105 - sudo denies access with disabled
                            ldap_sudo_use_host_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-43
changelog:
  - Resolves: rhbz#880176 - memberUid required for primary groups to match
                            sudo rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-44
changelog:
  - Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory
                            cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-45
changelog:
  - Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd
                            failed. Timer expired


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-46
changelog:
  - Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same
                            hostname


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-47
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-48
changelog:
  - Resolves: rhbz#880956 - Primary server status is not always reset after
                            failover to backup server happened
  - Silence a compilation warning in the memberof plugin (Related: rhbz#877974)
  - Do not steal resolv result on error (Related: rhbz#882076)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-49
changelog:
  - Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule
                            another first full refresh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-50
changelog:
  - Resolves: rhbz#870045 - always reread the master map from LDAP
  - Resolves: rhbz#876531 - sss_cache does not work for automount maps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-52
changelog:
  - Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11
  - Include more debugging during the sysdb upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-53
changelog:
  - Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the
                            enumeration is taking too long


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-54
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed database
                            update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-57
changelog:
  - Resolves: rhbz#886091 - Disallow root SSH public key authentication
  - Add default section to switch statement (Related: rhbz#884666)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-58
changelog:
  - Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable
                            tickets from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-62
changelog:
  - Resolves: rhbz#886848 - user id lookup fails for case sensitive users
                            using proxy provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-64
changelog:
  - Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition
                            with OpenLDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-66
changelog:
  - Resolves: rhbz#874579 - sssd caching not working as expected for selinux
                            usermap contexts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-67
changelog:
  - Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD
                            Users for commands like id and getent


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-68
changelog:
  - Resolves: rhbz#887961 - AD provider: getgrgid removes nested group
                            memberships


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-71
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-72
changelog:
  - Resolves: rhbz#894997 - sssd_be crashes looking up members with groups
                            outside the nesting limit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-84
changelog:
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-85
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-86
changelog:
  - Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended
                            ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-88
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-90
changelog:
  - Resolves: #953165 - Enabling enumeration causes sssd_be process to
                        utilize 100% of the CPU


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-91
changelog:
  - Resolves: #967636 - SSSD frequently fails to return automount maps
                        from LDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-93
changelog:
  - Resolves: #987479 - libsss_sudo should depend on sudo package with
                        sssd support


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-94
changelog:
  - Call restorecon on memcache files to force the right context on upgrades
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-95
changelog:
  - Mention that enumeration should be discouraged
  - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-96
changelog:
  - Resolves: #988525 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-97
changelog:
  - Resolves: #986379 - sss_cache -N/-n should invalidate the hash table
                        in sssd_nss


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-98
changelog:
  - Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login
                        delays when client is under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-99
changelog:
  - Clarify the min_id/max_id limits further
  - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-101
changelog:
  - Resolves: #976273 - [RFE] Add a new override_homedir expansion for the
                        "original value"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-104
changelog:
  - Resolves: #971435 - Enhance sssd init script so that it would source
                        a configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-106
changelog:
  - Format patch to configure sysv script differently
  - RHEL-6 patch(1) apparently doesn't like the output of git format-patch
   -M -C and doesn't properly copy files on renames
  - Resolves: #971435 - Enhance sssd init script so that it would source a
    configuration.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-108
changelog:
  - Set correct state of SRV servers on resolving error
  - Resolves: #954275 - sssd fails connect to IPA server during boot when
                        spanning tree is enabled in network router.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-109
changelog:
  - Use permissive control when adding ghost users
  - Resolves: #928797 - cyclic group memberships may not work depending on
                        order of operations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-112
changelog:
  - Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors
                        when clearing cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-113
changelog:
  - Resolves: #916997 - getgrnam / getgrgid for large user groups
                        is too slow due to range retrieval functionality


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-114
changelog:
  - Resolves: #914433 - sssd pam write_selinux_login_file creating the temp
                        file for SELinux data failed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-115
changelog:
  - Apply a forgotten dependency for patch #254
  - Related: #916997 - getgrnam / getgrgid for large user groups
                       is too slow due to range retrieval functionality
  - Add two fixes for better handling of faulty SRV processing
  - Related: #954275 - sssd fails connect to IPA server during boot when
                       spanning tree is enabled in network router.
  - Remove enumerate=true from example in man page
  - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-117
changelog:
  - Resolves: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-119
changelog:
  - Resolves: #948830 - sssd do too many disk writes causing delay in
                        "getent netgroup allmachines-netgroup" nested netgroups.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-130
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1020905 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-131
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1025813 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-132
changelog:
  - Resolves: #1038098 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-134
changelog:
  Resolves: #1036168 - sssd can't retrieve auto.master when using the
                       "default_domain_suffix"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5.1-3
changelog:
  - Backport the InfoPipe patches needed for Sat6 integration
  - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-2
changelog:
  - Resolves: rhbz#1104145 - public key validator is too strict and does not
                             allow newlines anywhere in the public key string,
                             not even at the end


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-3
changelog:
  - Resolves: rhbz#1110369 - sssd is started before messagebus, making
                             sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-5
changelog:
  - Fix potential NULL dereference in IFP code
  - Related: rhbz#1110369 - sssd is started before messagebus, making
                            sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-7
changelog:
  - Resolves: rhbz#1042922 - [RFE] Add fallback to sudoRunAs when sudoRunAsUser
                             is not defined and no ldap_sudorule_runasuser mapping
                             has been defined in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-9
changelog:
  - Resolves: rhbz#1122158 - ad: group membership is empty when id mapping
                             is off and tokengroups are enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-11
changelog:
  - Resolves: rhbz#1109188 - dereferencing control failure against openldap
                             server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-12
changelog:
  - Resolves: rhbz#1111317 - [RFE] Add option for sssd to replace space with
                             specified character in LDAP group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-13
changelog:
  - Resolves: rhbz#1122873 -  Failover does not always happen from SRV
                              to hostname resolution(via /etc/hosts)
  - Remove spurious systemctl call on %postun


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-14
changelog:
  - Resolves: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-19
changelog:
  - Resolves: rhbz#1127757 - sssd can't retrieve sudo rules when using the
                             "default_domain_suffix" option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-20
changelog:
  - Resolves: rhbz#1127278 -  Auth fails when space in username is
                              replaced with character set by
                              override_default_whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-31
changelog:
  - Resolves: rhbz#1141814 - Password expiration policies are not being
                             enforced by SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-32
changelog:
  - Resolves: rhbz#1160713 - TokenGroups for LDAP provider breaks in corner
                             cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-33
changelog:
  - Resolves: rhbz#1154042 - RHEL6.6 sssd (1.11) doesn't return all group
                             memberships against an IPA server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-1
changelog:
  - Resolves: rhbz#1168347 - Rebase sssd to 1.12.x
  - The rebase resolves the following RHEL bugzillas
  - Resolves: rhbz#1172865 - sssd.conf(5) man page gives bad advice about
                             domains parameter
  - Resolves: rhbz#1172494 - PAC: krb5_pac_verify failures should not
                             be fatal (backport fix from upstream)
  - Resolves: rhbz#1171782 - [RFE]: SSSD should preserve case for user
                             uid field
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used
  - Resolves: rhbz#1168377 - [RFE] User's home directories and shells are
                             not taken from AD when there is an IPA trust with AD
  - Resolves: rhbz#1168363 - [RFE] Add domains= option to pam_sss
  - Resolves: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                             solution to the trust solution
  - Resolves: rhbz#1161564 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1148582 - inconsistent group information when multiple
                             ad domain sections are configured in sssd
  - Resolves: rhbz#1140909 - sssd.conf man page missing subdomains_provider
                             ad support
  - Resolves: rhbz#1139878 - SSSD connection terminated after failing
                             anonymous bind to IBM Tivoli Directory Server
  - Resolves: rhbz#1135838 - Man sssd-ldap shows parameter
                             ldap_purge_cache_timeout with "Default: 10800
                             (12 hours)"
  - Resolves: rhbz#1135432 - Dereference code errors out when dereferencing
                             entries protected by ACIs
  - Resolves: rhbz#1134942 - sssd does not recognize Windows server 2012
                             R2's LDAP as AD
  - Resolves: rhbz#1123291 - automount segfaults in sss_nss_check_header
  - Resolves: rhbz#1088402 - [RFE] Allow login through SSSD using multiple
                             attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-2
changelog:
  - Do not mark the selinux_child helper as setuid, we don't support rootless
    SSSD in 6.7
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-3
changelog:
  -  Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                             warning even if alternate authentication method
                             is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-4
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query
  - Rebuild against latest krb5, add a versioned BuildRequires
  - Resolves: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-5
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-7
changelog:
  - Resolves: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-9
changelog:
  - Initialize a pointer in ldap_child to NULL
  - Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-10
changelog:
  - Resolves: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-11
changelog:
  - Resolves: rhbz#1098147 - [RFE] Implement background refresh for users,
                             groups or other cache objects


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-12
changelog:
  - Fix Coverity warning in ldap_child
  - Add better debugging
  - Related: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-13
changelog:
  - Resolves: rhbz#1200093 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-14
changelog:
  - Fix internal error codes broken when fixing rhbz#1036745
  - Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                            warning even if alternate authentication method
                            is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-15
changelog:
  - Fix PAM responder initgroups cache for subdomain users
  - Log extop failures better
  - Related: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                            solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-16
changelog:
  - Fix warning in SELinux code
  - Handle setups with empty default and no SELinux maps
  - Related: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                            context on client is staff_u
  - Resolves: rhbz#1202305 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605
  - Resolves: rhbz#1201847 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-18
changelog:
  - Resolves: rhbz#1202728 - sssd-ad requires samba3, but ipa-server-trust-ad
                             requires samba4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-20
changelog:
  - Cherry-pick unit test changes from upstream to allow cherry-picking
    sssd-1-12 patches
  - Remove unused LDAP provider code to avoid static analyser warnings
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-21
changelog:
  - Handle TTL=0 in SRV queries correctly
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-22
changelog:
  - Fix a typo in DEBUG message
  - Related: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                            account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-23
changelog:
  - Resolves: rhbz#1205716 - Installing sssd-common-1.12.4-18.el6 might
                             install with wrong user account (root)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-25
changelog:
  - Resolves: rhbz#1206121 - ldap_access_order=ppolicy: Explicitly mention in
                             manpage that unsupported time specification will
                             lead to sssd denying access


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-27
changelog:
  - BuildRequire the proper libkrb5 version for correct localauth plugin build
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-28
changelog:
  - Resolves: rhbz#1207720 - id lookup resolves "Domain Local" group and
                             errors appear in domain log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-29
changelog:
  - Package the localauth plugin
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-30
changelog:
  - Related: rhbz#1211728 - Only set the selinux context if the context
                            differs from the local one


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-31
changelog:
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-32
changelog:
  - Resolves: rhbz#1212017 - Sudo responder does not respect filter_users
                             and filter_groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-33
changelog:
  - Resolves: rhbz#1213716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-34
changelog:
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-35
changelog:
  - Resolves: rhbz#1213940 - Overridde with --login fails trusted adusers
                             group membership resolution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-36
changelog:
  - Resolves: rhbz#1212387 - sssd_be segfault id_provider = ad
                             src/providers/ad/ad_gpo.c:843


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-37
changelog:
  - Resolves: rhbz#1217328 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-38
changelog:
  - Include several upstream fixes related to ID views
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1213947 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-39
changelog:
  - Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and
                             gets avc denial when ssh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-40
changelog:
  - Resolves: rhbz#1219844 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-41
changelog:
  - Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled
                             subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-42
changelog:
  - Resolves: rhbz#1215765 - sssd nss responder gets wrong number of
                             secondary groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-45
changelog:
  - Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't
                             return all groups on first attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-48
changelog:
  - Resolves: rhbz#1251349 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.1-1
changelog:
  - Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8
  - The rebase also resolves the following bugzillas:
  - Resolves: rhbz#1270029 - [RFE] Add a way to lookup users based on CAC
                             identity certificates
  - Resolves: rhbz#1270027 - [RFE] Support for smart cards 
  - Resolves: rhbz#1269422 - [FEAT] UID and GID mapping on individual clients
  - Resolves: rhbz#1269421 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#1265429 - If the site discovery fails, ad-site option is
                             not taken into account.
  - Resolves: rhbz#1254193 - Fix for cyclic dependencies between
                             sssd-{krb5,}-common
  - Resolves: rhbz#1247997 - [IPA/IdM] sudoOrder not honored as expected
  - Resolves: rhbz#1237142 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1232632 - Kerberos-based providers other than krb5 do
                             not queue requests
  - Resolves: rhbz#1227804 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache
  - Resolves: rhbz#1227685 - sssd with ldap backend throws error domain log
  - Resolves: rhbz#1221365 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1196204 - sssd cache holding gid values for nss, but not
                             the alpha group name representation
  - Resolves: rhbz#1194039 - [RFE] User's home directories are not
                             taken from AD when there is an IPA trust with AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-1
changelog:
  - Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8
  - Squash in packaging review changes by lslebodn@redhat.com


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-2
changelog:
  - Silence compilation warnings and Coverity issues
  - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-3
changelog:
  - Resolves: rhbz#1285852 - sssd: [sysdb_add_user] (0x0400): Error: 17
                             (File exists)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-4
changelog:
  - Resolves: rhbz#1266108 - Check next certificate on smart card if first
                             is not valid
  - Also enable OCSP checks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-5
changelog:
  - The p11_child doesn't have to run privileged anymore, remove the
    setuid bit
  - Related: rhbz#1270027 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.2-7
changelog:
  - Don't own files as the SSSD user
  - Resolves: rhbz#1289482 - warning: user sssd does not exist - using root


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3
  - Remove setuid bit from proxy_child, RHEL-6 doesn't support running
    SSSD as a non-privileged user
  - Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-2
changelog:
  - Fix memory leak in the NFS plugin
  - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8
  - Resolves: rhbz#1296620 - Properly remove OriginalMemberOf attribute in
                             SSSD cache if user has no secondary groups anymore
  - Resolves: rhbz#1283898 - MAN: Clarify that subdomains always use service
                             discovery


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1298634 - Cannot retrieve users after upgrade from 1.12
                             to 1.13


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-7
changelog:
  - Resolves: rhbz#1290761 - [RFE] Support Automatic Renewing of Kerberos
                             Host Keytabs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-8
changelog:
  - Resolves: rhbz#1262981 - sssd dereference processing failed : Input/output
                             error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-10
changelog:
  - Resolves: rhbz#1298253 - Screen lock prompts for smartcard user password
                             and not smartcard pin when logged in using smartcard
                             pin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-12
changelog:
  - Resolves: rhbz#1295883 - refresh_expired_interval stops sss_cache
                             from working


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-13
changelog:
  - Update sssd-ldap man page for the recent ID mapping changes
  - Related: rhbz#1268902 - SSSD doesn't set the ID mapping range automatically


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on
                              sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                              trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                             account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-15
changelog:
  - Require a newer selinux-policy to avoid issues when prompting for SC PIN
  - Related: rhbz#1299066 - smartcard login does not prompt for pin when
                            ocsp checking is enabled (default config)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-16
changelog:
  - Resolves: rhbz#1308939 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-17
changelog:
  - Backport of a more minimal dependency patch to avoid changes to AD
    provider behaviour
  - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                            account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-18
changelog:
  - Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe
                             with 1.11.6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-20
changelog:
  - Actually apply patches from previous build
  - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-21
changelog:
  - Resolves: rhbz#1313940 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-23
changelog:
  - Resolves: rhbz#1336453 - sssd_be doesn't terminate forked child process
                             if adcli is not installed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-24
changelog:
  - Resolves: rhbz#1335400 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-29
changelog:
  - Resolves: rhbz#1338619 - segmentation fault in sssd after upgrade to
                             sssd-1.13.3-22.el6.x86_64 when upgrading cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-30
changelog:
  - Resolves: rhbz#1369079 - sssd runs out of available child slots and
                             starts queuing requests in proxy mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-33
changelog:
  - Resolves: rhbz#1377782 - sssd is looking at a server in the GC of a
                             subdomain, not the root domain.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-36
changelog:
  - Resolves: rhbz#1327272 - local overrides: issues with sub-domain users
                             and mixed case names


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-38
changelog:
  - Resolves: rhbz#1329648 - Protocol error with IPA on RHEL-6
  - Resolves: rhbz#1329647 - IPA view: view name not stored properly with
                             default FreeIPA installation


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-39
changelog:
  - Resolves: rhbz#1299994 - ssh client checks only the first certificate
                             on a smartcard when the card has multiple certs
  - Resolves: rhbz#1300421 - Screen locks and smart card is removed - must
                             show a message to insert the correct smartcard
  - Resolves: rhbz#1372681 - ssh with Smartcards - skip invalid certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-45
changelog:
  - Resolves: rhbz#1324428 - [RFE] Discover forest's root SID even if
                             subdomains_provider = none


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-46
changelog:
  - Resolves: rhbz#1369921 - Members of nested netgroups configured in IdM
                             cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-49
changelog:
  - Require the matching version of ding-libs
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-50
changelog:
  - Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                            cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-51
changelog:
  - Revert the ding-libs requirement
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-54
changelog:
  - Apply several more smartcard-related patches.
  - Related: rhbz#1300421 - Screen locks and smart card is removed - must
                            show a message to insert the correct smartcard


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.2-49
changelog:
  - Add missing defattrs in specfile
  - Fix upstream tarball url in specfile
  - Cleanup unapplied patch
  - related: #543948


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.1-56
changelog:
  - Update to 3.5.1
  - Security update that resolves CVE-2010-0728
  - Remove cifs.upcall and mount.cifs entirely
  - related: #556558


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-89
changelog:
  - Fix printcap handling and cups spooler interaction
  - resolves: #709070
  - Fix spoolss form index mixup (wrong papersize)
  - resolves: #703393


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.8-91
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #709641


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-131
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845760
  - Fix printing regression with builtin forms.
  - resolves: #860967


author: - Andreas Schneider <asn@redhat.com> - 3.6.8-136
changelog:
  - Fix loading the imap hash module.
  - resolves: #864045
  - Fix raw printing support.
  - related: #857942


author: - Alexander Bokovoy <abokovoy@redhat.com> - 3.6.8-137
changelog:
  - Use alternatives to configure winbind_krb5_locator.so.
  - Move wbinfo and ntlm_auth to the correct package so samba4 can
    correctly handle conflicts.
  - resolves: #864950


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-152
changelog:
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #961932
  - Fix the username map optimization.
  - resolves: #952268
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955683
  - Fix write operations as guest with security = share
  - resolves: #953025
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949613
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948623
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #927383


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-153
changelog:
  - Fix overwrite of errno in check_parent_exists().
  - resolves: #966489
  - Fix dir code using dirfd() without vectoring trough VFS calls.
  - resolves: #971283


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-1
changelog:
  - resolves: #1003921 - Rebase Samba to 3.6.22.
  - resolves: #1035332 - Fix force user with 'security = user'.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-1
changelog:
  - resolves: #1073356 - Fix CVE-2013-4496, CVE-2012-6150 and CVE-2013-6442.
  - resolves: #1018038 - Fix CVE-2013-4408.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-2
changelog:
  - resolves: #1022534 - Do not build Samba with fam support.
  - resolves: #1059301 - Fix nbt query with many components.
  - resolves: #1057332 - Fix force user with guest account.
  - resolves: #1021706 - Fix %G substitution in 'template homedir'.
  - resolves: #1040472 - Fix group expansion in service path.
  - resolves: #1069570 - Fix memory leak reading printer list.
  - resolves: #1067607 - Fix wbinfo -i with one-way trusts.
  - resolves: #1050887 - Fix 100% CPU utilization in winbindd when trying to
                         free memory in winbindd_reinit_after_fork.
  - resolves: #1029000 - Fix 'force user' with 'security = ads'.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-15
changelog:
  - resolves: #1165750 - Fix guid retrieval for published printers.
  - resolves: #1163383 - Fix 'net ads join -k' with existing keytab entries.
  - resolves: #1195456 - Fix starting daemons on read only filesystems.
  - resolves: #1138552 - Fix CPU utilization when re-reading the printcap info.
  - resolves: #1144916 - Fix smbclient NTLMv2 authentication.
  - resolves: #1164336 - Document 'sharesec' command for
                         'access based share enum' option.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails
  - resolves: #1222985 - Fix segfault with 'mangling method = hash' option


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1232021 - Do not overwrite smb.conf manpage
  - resolves: #1216060 - Document netbios name length limitations
  - resolves: #1234249 - Fix 'map to guest = Bad Uid' option
  - resolves: #1219570 - Fix 'secuirtiy = server' (obsolete) share access
  - resolves: #1211657 - Fix stale cache entries if a printer gets renamed


author: Andreas Schneider <asn@redhat.com> - 3.6.23-23
changelog:
  - resolves: #1290707 - CVE-2015-5299
  - related: #1290707 - CVE-2015-5296
  - related: #1290707 - CVE-2015-5252
  - related: #1290707 - CVE-2015-5330


author: Andreas Schneider <asn@redhat.com> - 3.6.23-24
changelog:
  - resolves: #1271763 - Fix segfault in NTLMv2_generate_names_blob()
  - resolves: #1261265 - Add '--no-dns-updates' option for 'net ads join'


author: Andreas Schneider <asn@redhat.com> - 3.6.23-29
changelog:
  - resolves: #1322687 - Fix CVE-2015-5370
  - resolves: #1322687 - Fix CVE-2016-2110
  - resolves: #1322687 - Fix CVE-2016-2111
  - resolves: #1322687 - Fix CVE-2016-2112
  - resolves: #1322687 - Fix CVE-2016-2115
  - resolves: #1322687 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Chris Leech <christopher.leech@intel.com> - 0.9.7-1
changelog:
  - Updated to 0.9.7
  - Added a private copy of dcbnl.h until kernel-headers includes it.
    Export patch is making it's way to the upstream kernel via net-2.6,
    expected in 2.6.29-rc7


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.7-3
changelog:
  - added devel files again to support fcoe-utils package
  - added kernel >= 2.6.29 to Requires, deleted dcbnl.h, since it is
    aviable in kernel 2.6.29-rc7
  - changed config dir from /etc/sysconfig/dcbd to /etc/dcbd
  - updated init script: added mandatory Short description tag,
    deleted default runlevels, which should start the script


author: Karsten Hopp <karsten@redhat.com> 0.9.15-4
changelog:
  - buildrequire libconfig-devel >= 1.3.2, it doesn't build with 1.3.1 due to
    the different config_lookup_string api


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741
  - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Build nss without softoken, freebl, or util sources in the build source tree
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - make derEncodingsMatch work with encrypted keys
  - rename a patch, dropped the experimental moniker from it
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Fix the numbering and naming of the patches
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Install man pages for the nss security tools
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Improve support for ECDSA algorithm via pluggable ECC
  - Document the purpose of the iquote.patch
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-10
changelog:
  - Prevent users from disabling the internal crypto module
  - Resolves: Bug 1059176 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Restore use of indentation patch until another bug is resolved
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-3
changelog:
  - Fix pem module trashing of private keys on failed login
  - Resolves: Bug 1002205 - PEM module trashes private keys if login fails


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1123092 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Resolves: Bug 1131311 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824
  - Temporarily disable some tests until expired PayPalEE.cert is renewed


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.3
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Require softokn build 22 to ensure runtime compatibility.
  - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel
    to allow same or newer.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.27.1
  - Remove nss-646045.patch, which is not necessary
  - Remove p-disable-md5-590364-reversed.patch,
    which is no-op here, because the patched code is removed later in
    %setup
  - Remove disable_hw_gcm.patch, which is no-op here, because the
    patched code is removed later in %setup.  Also remove
    NSS_DISABLE_HW_GCM setting, which was only required for RHEL 5
  - Add Bug-1001841-disable-sslv2-libssl.patch and
    Bug-1001841-disable-sslv2-tests.patch, which completedly disable
    EXPORT ciphersuites.  Ported from RHEL 7
  - Remove disable-export-suites-tests.patch, which is covered by
    Bug-1001841-disable-sslv2-tests.patch
  - Remove nss-ca-2.6-enable-legacy.patch, as we decided to not allow
    1024 legacy CA certificates
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove nss-init-ss-sec-certs-null.patch, which appears to be no-op,
    as it clears memory area allocated with PORT_ZAlloc()
  - Remove nss-disable-sslv2-libssl.patch,
    nss-disable-sslv2-tests.patch, sslauth-no-v2.patch, and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch as SSLv2 is
    already disabled in upstream
  - Remove fix-nss-test-filtering.patch, which is fixed in upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel6.config


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-36
changelog:
  - add ldap backend (#455350)
  - skip sshd init's rsa1 creation in fips mode (#672870)
  - improve audit session key destroy (#642792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-105
changelog:
  - Fix ControlPersist option with ProxyCommand (#1160487)
  - Backport fix of ssh-keygen with error : gethostname: File name too long (#1161454)
  - Backport show remote address instead of UNKNOWN after timeout at password prompt (#1161449)
  - Fix printing of extensions in v01 certificates (#1093869)
  - Fix confusing audit trail for unsuccessful logins (#1127312)
  - Don't close fds for internal sftp sessions (#1085710)
  - Fix config parsing quotes (backport) (#1134938)
  - Enable logging in chroot into separate file (#1172224)
  - Fix auditing when using combination of ForcedCommand and PTY (#1131585)
  - Fix ssh-copy-id on non-sh remote shells (#1135521)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-106
changelog:
  - Add missing ControlPersist option to man ssh (#1197763)
  - Add sftp option to force mode of created files (#1191055)
  - Do not load RSA1 keys in FIPS mode (#1197072)
  - Add missing support for ECDSA in ssh-keyscan (#1196331)
  - Fix coverity/gcc issues (#1196063)
  - Backport wildcard functionality for PermitOpen in sshd_config file (#1159055)
  - Ability to specify an arbitrary LDAP filter in ldap.conf (#1119506)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-7
changelog:
  - backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
    changing wait timeout to 2 seconds by default


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - don't try to load System.map (and spit error messages if it does not
    exist) if ps or top are not going to use it, both to speed things up
    and remove the ugly messages when they don't make sense.
  - in top, print the possible error messages using standard top SHOWMESSAGE
    (because it will be now printed out when already in terminal mode).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - procps-2.0.7
  - integrated all patches except for signames patch, which is broken
    and unnecessary
  - See NEWS for changes between 2.0.6 and 2.0.7
  - Added patch to correctly install desktop file.  Oops.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-23
changelog:
  - Fix unsigned/signed bug. Closes #60998.
  - Update threadbadhack to correctly propagate process time to the main thread.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-24
changelog:
  - Fix saving of sort, fixes #32757
  - Fix printing size, fixes #48224
  - Fix float decimal point input #58163


author: Colin Walters <walters@redhat.com> 3.2.1-4
changelog:
  - Add little patch to make w/who work when getattr access
    to /proc/<pid> for the user's login process is denied


author: Alan Cox <alan@redhat.com> 3.2.1-6
changelog:
  - Removed broken SELinux patch to w
  - Added a better alternative whereby we get less data but don't fall for
    vanished processes when SELinux is running


author: Karel Zak <kzak@redhat.com> 3.2.3-6
changelog:
  - update FAQ
  - update spec description
  - fix text in .noproc patch
  - fix segv fault if cpu number exceeding 38 (#137159)


author: Karel Zak <kzak@redhat.com> 3.2.5-1
changelog:
  - update to new upstream 3.2.5
  - recreate selinux patch
  - remove errno, slabinfo21 and fullpath patches -- all fixed by upstream


author: Karel Zak <kzak@redhat.com> 3.2.5-4
changelog:
  - fix #144459 - sysctl reports error: unknown error <...> reading key '<key>'
    (now sysctl doesn't read data from write-only /proc/sys files)


author: Karel Zak <kzak@redhat.com> 3.2.5-7
changelog:
  - improve procps-3.2.5-sysctl-writeonly.patch
  - fix #161449 - "top" ignores user and system toprc
  - fix #161559 - top segfaults when resizing console
  - fix #160796 - vmstat crashes when accessing LVM partition
  - fix #161303 - 'top' failed when remove cpus


author: Karel Zak <kzak@redhat.com> 3.2.6-4
changelog:
  - fix #191493 - watch -n doesn't handle large integers properly
  - fix #186017 - top "Cpu0" line never updates on single processor machine
                  (bugfix added to the 'remcpu' patch)
  - fix #168444 - memory usage conflicts with /proc/meminfo
  - fix #174619 - top reports wrong values for CPU(s) in batch mode
  - fix #185299 - cpu steal time support


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Karel Zak <kzak@redhat.com> 3.2.7-10
changelog:
  - fix #212637 - sysctl using deprecated syscall
  - fix #140975 - top corrupts screen when sorting on first column


author: Karel Zak <kzak@redhat.com> 3.2.7-11
changelog:
  - fix #234546 - 'w' doesn't give correct information about what's being run.
  - fix #228870 - process `sysctl' is using deprecated sysctl
  - cleanup spec file


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-12
changelog:
  - fix #183029 - watch ignores multibyte characters
  - fix #222251 - STIME column can jitter
  - fix array overflow in sysctl


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-17
changelog:
  - fix #185994 - top "Cpu0" line never updates when using
    "Single Cpu = Off" option on single processor machine


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-18
changelog:
  - fix displaying the CPU column as integer (related #354001)
  - don't install slabtop -- there's no /proc/slabinfo


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-21
changelog:
  - rebase patches
  - clear screen in top when switching windows
  - fix #435453 - errors with man -t formatting of ps man page


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-22
changelog:
  - fix #472783 vmstat -p <partition name> not working
  - extended diskstat parameters to unsigned long to avoid overflow


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-24
changelog:
  - slabtop -o should display the info once and then exit (RHEL bug #475963)
  - added timestamp to vmstat with new option -t (#476134)


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-4
changelog:
  - fix #554674 -  vmstat command with -n and -m does not display header even once
  - fix #554721 -  procps states a bug is hit when receiving a signal
  - fix #479703 -  [RFE] Additional option for 'top'


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-5
changelog:
  - fix #564371 -  Enhance top to display in MB vs KB
  - fix #565971 -  double free or corruption in ps


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-9
changelog:
  - fix #581547 - add vmstat -w option for wider output
  - fix #583629 - pmap does not display RSS values for a pid
  - fix #583625 - document that usernames exceeding column width are substituted with user ID


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.4.el6
changelog:
  - kvm-virtio-Remove-duplicate-macro-definition-for-max.-vi.patch [bz#543825]
  - kvm-virtio-console-qdev-conversion-new-virtio-serial-bus.patch [bz#543825]
  - kvm-virtio-serial-bus-Maintain-guest-and-host-port-open-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-a-port-name-property-for-port-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-support-for-buffering-guest-ou.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-ability-to-hot-unplug-ports.patch [bz#543825]
  - kvm-virtio-serial-Add-a-virtserialport-device-for-generi.patch [bz#543825]
  - kvm-Move-virtio-serial-to-Makefile.hw.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.5.el6
changelog:
  - Remove unneeded/unsupported features: [bz#555336]
    - make default options explicit
    - remove sdl support
    - remove sb16 emulation
    - remove oss support
    - remove curses support
    - disable curl support
    - disable bluez support
    - enable -Werror
    - limit block drivers support
    - add host_cdrom block device
  - Resolves: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.9.el6
changelog:
  - Disable -Werror again, as there are still warnings on the build
  - Related: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.11.el6
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#556459]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#556459]
  - kvm-qemu-img-rebase.patch [bz#556459]
  - Resolves: bz#556459
    (RFE - In-place backing file format change)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.12.el6
changelog:
  - kvm-virtio-serial-bus-Remove-guest-buffer-caching-and-th.patch [bz#543825]
  - kvm-virtio-serial-Make-sure-we-don-t-crash-when-host-por.patch [bz#543825]
  - kvm-virtio-serial-Use-MSI-vectors-for-port-virtqueues.patch [bz#543825]
  - kvm-virtio-serial-bus-Match-upstream-whitespace.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.13.el6
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#557435]
  - kvm-Add-missing-newline-at-the-end-of-options-list.patch [bz#558412]
  - kvm-vnc-Fix-artifacts-in-hextile-decoding.patch [bz#558414]
  - kvm-QMP-Drop-wrong-assert.patch [bz#558415]
  - kvm-vmware_vga-Check-cursor-dimensions-passed-from-guest.patch [bz#558435]
  - kvm-virtio-pci-thinko-fix.patch [bz#558438]
  - kvm-QMP-Don-t-free-async-event-s-data.patch [bz#558465]
  - kvm-vnc_refresh-return-if-vd-timer-is-NULL.patch [bz#558466]
  - kvm-osdep.c-Fix-accept4-fallback.patch [bz#558477]
  - kvm-QMP-Emit-asynchronous-events-on-all-QMP-monitors.patch [bz#558619]
  - kvm-vnc_refresh-calling-vnc_update_client-might-free-vs.patch [bz#558846]
  - Resolves: bz#557435
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#558412
    (-help output not terminated by newline)
  - Resolves: bz#558414
    (Artifacts in hextile decoding)
  - Resolves: bz#558415
    (Assert triggers on qmp commands returning lists)
  - Resolves: bz#558435
    (vmware-svga buffer overflow copying cursor data)
  - Resolves: bz#558438
    (virtio status bits corrupted if guest deasserts bus mastering bit)
  - Resolves: bz#558465
    (Double-free of qmp async messages)
  - Resolves: bz#558466
    (Possible segfault on vnc client disconnect)
  - Resolves: bz#558477
    (Incorrect handling of EINVAL from accept4())
  - Resolves: bz#558619
    (QMP: Emit asynchronous events on all QMP monitors)
  - Resolves: bz#558846
    (fix use-after-free in vnc code)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.14.el6
changelog:
  - kvm-MCE-Fix-bug-of-IA32_MCG_STATUS-after-system-reset.patch [bz#558416]
  - kvm-Fix-CPU-topology-initialization.patch [bz#558432]
  - kvm-loader-more-ignores-for-rom-intended-to-be-loaded-by.patch [bz#558467]
  - kvm-pc-add-machine-type-for-0.12.patch [bz#558470]
  - kvm-virtio-console-Rename-virtio-serial.c-back-to-virtio.patch [bz#559089]
  - kvm-virtio-serial-bus-Fix-bus-initialisation-and-allow-f.patch [bz#559503]
  - Resolves: bz#558416
    (Machine check exception injected into qemu reinjected after every reset)
  - Resolves: bz#558432
    (CPU topology not taking effect)
  - Resolves: bz#558467
    (roms potentially loaded twice)
  - Resolves: bz#558470
    (Incorrect machine types)
  - Resolves: bz#559089
    (Rename virtio-serial.c to virtio-console.c as is upstream.)
  - Resolves: bz#559503
    (virtio-serial: fix multiple devices intialisation)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.15.el6
changelog:
  - kvm-VNC-Use-enabled-key-instead-of-status.patch [bz#549759]
  - kvm-VNC-Make-auth-key-mandatory.patch [bz#549759]
  - kvm-VNC-Rename-client-s-username-key.patch [bz#549759]
  - kvm-VNC-Add-family-key.patch [bz#549759]
  - kvm-VNC-Cache-client-info-at-connection-time.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_CONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_DISCONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_INITIALIZED-event.patch [bz#549759]
  - kvm-block-avoid-creating-too-large-iovecs-in-multiwrite_.patch [bz#558730]
  - Resolves: bz#549759
    (A QMP event notification on VNC client connect/disconnect events)
  - Resolves: bz#558730
    (qemu may create too large iovecs for the kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.17.el6
changelog:
  - kvm-Fix-QEMU_WARN_UNUSED_RESULT.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#560623]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#560623]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#560623]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#560623]
  - kvm-net-Make-inet_strfamily-public.patch [bz#562181]
  - kvm-net-inet_strfamily-Better-unknown-family-report.patch [bz#562181]
  - kvm-vnc-Use-inet_strfamily.patch [bz#562181]
  - Resolves: bz#560623
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))
  - Resolves: bz#562181
    (Small VNC related cleanup)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.18.el6
changelog:
  - kvm-roms-minor-fixes-and-cleanups.patch [bz#558818]
  - kvm-fw_cfg-rom-loader-tweaks.patch [bz#558818]
  - kvm-roms-rework-rom-loading-via-fw.patch [bz#558818]
  - kvm-pci-allow-loading-roms-via-fw_cfg.patch [bz#558818]
  - kvm-pc-add-rombar-to-compat-properties-for-pc-0.10-and-p.patch [bz#558818]
  - Resolves: bz#558818
    (rom loading)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.19.el6
changelog:
  - kvm-virtio_blk-Factor-virtio_blk_handle_request-out.patch [bz#560942]
  - kvm-virtio-blk-Fix-restart-after-read-error.patch [bz#560942]
  - kvm-virtio-blk-Fix-error-cases-which-ignored-rerror-werr.patch [bz#560942]
  - Resolves: bz#560942
    (virtio-blk error handling doesn't work reliably)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.20.el6
changelog:
  - kvm-QMP-Add-QEMU-s-version-to-the-greeting-message.patch [bz#557930]
  - kvm-QMP-Introduce-the-qmp_capabilities-command.patch [bz#557930]
  - kvm-QMP-Enforce-capability-negotiation-rules.patch [bz#557930]
  - kvm-QMP-spec-Capability-negotiation-updates.patch [bz#557930]
  - kvm-json-escape-u0000-.-u001F-when-outputting-json.patch [bz#559667]
  - kvm-json-fix-PRId64-on-Win32.patch [bz#563878]
  - kvm-qjson-Improve-debugging.patch [bz#563875]
  - kvm-Monitor-remove-unneeded-checks.patch [bz#563876]
  - kvm-QError-Don-t-abort-on-multiple-faults.patch [bz#559635]
  - kvm-QMP-Don-t-leak-on-connection-close.patch [bz#559645]
  - kvm-QMP-Emit-Basic-events.patch [bz#558623]
  - Resolves: bz#557930
    (QMP: Feature Negotiation support)
  - Resolves: bz#558623
    (QMP: Basic async events are not emitted)
  - Resolves: bz#559635
    (QMP: assertion on multiple faults)
  - Resolves: bz#559645
    (QMP: leak when a QMP connection is closed)
  - Resolves: bz#559667
    (QMP: JSON parser doesn't escape some control chars)
  - Resolves: bz#563875
    (QJSON: Improve debugging)
  - Resolves: bz#563876
    (Monitor: remove unneeded checks)
  - Resolves: bz#563878
    (QJSON: Fix PRId64 handling)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.21.el6
changelog:
  - kvm-net-add-API-to-disable-enable-polling.patch [bz#562958]
  - kvm-virtio-rename-features-guest_features.patch [bz#562958]
  - kvm-qdev-add-bit-property-type.patch [bz#562958]
  - kvm-qdev-fix-thinko-leading-to-guest-crashes.patch [bz#562958]
  - kvm-virtio-add-features-as-qdev-properties-fixup.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.22.el6
changelog:
  - kvm-QMP-BLOCK_IO_ERROR-event-handling.patch [bz#547501]
  - kvm-block-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-ide-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-scsi-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-virtio-blk-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-add-rhel-machine-types.patch [bz#558838]
  - kvm-QMP-Fix-query-balloon-key-change.patch [bz#568739]
  - Resolves: bz#547501
    (RFE: a QMP event notification for disk  I/O errors with werror/rerror flags)
  - Resolves: bz#558838
    (add rhel machine types)
  - Resolves: bz#568739
    (QMP: Fix 'query-balloon' key)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.23.el6
changelog:
  - kvm-ide-device-version-property.patch [bz#558835]
  - kvm-pc-add-driver-version-compat-properties.patch [bz#558835]
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#567602]
  - Resolves: bz#558835
    (ide/scsi drive versions)
  - Resolves: bz#567602
    (qemu-img rebase subcommand got Segmentation fault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.24.el6
changelog:
  - kvm-path.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-hw-pc.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-slirp-misc.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-savevm.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-bochs.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-Introduce-qemu_write_full.patch [bz#567099]
  - kvm-force-to-test-result-for-qemu_write_full.patch [bz#567099]
  - kvm-block-cow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vmdk.o-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vvfat.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow2.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-net-slirp.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-usb-linux.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-vl.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-monitor.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-linux-user-mmap.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-check-pipe-return-value.patch [bz#567099]
  - kvm-fix-qemu-kvm-_FORTIFY_SOURCE-compilation.patch [bz#567099]
  - kvm-Enable-_FORTIFY_SOURCE-2.patch [bz#567099]
  - kvm-qcow2-Fix-image-creation-regression.patch [bz#567099]
  - kvm-cow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-slirp-check-system-success.patch [bz#567099]
  - kvm-qcow2-return-errno-instead-of-1.patch [bz#567099]
  - kvm-qcow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-make-vmdk_snapshot_create-return-errno.patch [bz#567099]
  - kvm-vmdk-fix-double-free.patch [bz#567099]
  - kvm-vmdk-share-cleanup-code.patch [bz#567099]
  - kvm-block-print-errno-on-error.patch [bz#567099]
  - kvm-documentation-qemu_write_full-don-t-work-with-non-bl.patch [bz#567099]
  - kvm-virtio-serial-pci-Allow-MSI-to-be-disabled.patch [bz#567035]
  - kvm-pc-Add-backward-compatibility-options-for-virtio-ser.patch [bz#567035]
  - kvm-virtio-serial-don-t-set-MULTIPORT-for-1-port-dev.patch [bz#567035]
  - kvm-qdev-Add-a-DEV_NVECTORS_UNSPECIFIED-enum-for-unspeci.patch [bz#567035]
  - kvm-virtio-pci-Use-DEV_NVECTORS_UNSPECIFIED-instead-of-1.patch [bz#567035]
  - kvm-kbd-leds-infrastructure.patch [bz#569767]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#569767]
  - kvm-kbd-leds-usb-kbd.patch [bz#569767]
  - kvm-kbd-keds-vnc.patch [bz#569767]
  - kvm-migration-Clear-fd-also-in-error-cases.patch [bz#570174]
  - Resolves: bz#567035
    (Backport changes for virtio-serial from upstream: disabling MSI, backward compat.)
  - Resolves: bz#567099
    (Allow _FORTIFY_SOURCE=2 & --enable-warning)
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.25.el6
changelog:
  - kvm-qemu-memory-notifiers.patch [bz#562958]
  - kvm-tap-add-interface-to-get-device-fd.patch [bz#562958]
  - kvm-add-API-to-set-ioeventfd.patch [bz#562958]
  - kvm-notifier-event-notifier-implementation.patch [bz#562958]
  - kvm-virtio-add-notifier-support.patch [bz#562958]
  - kvm-virtio-add-APIs-for-queue-fields.patch [bz#562958]
  - kvm-virtio-add-set_status-callback.patch [bz#562958]
  - kvm-virtio-move-typedef-to-qemu-common.patch [bz#562958]
  - kvm-virtio-pci-fill-in-notifier-support.patch [bz#562958]
  - kvm-vhost-vhost-net-support.patch [bz#562958]
  - kvm-tap-add-vhost-vhostfd-options.patch [bz#562958]
  - kvm-tap-add-API-to-retrieve-vhost-net-header.patch [bz#562958]
  - kvm-virtio-net-vhost-net-support.patch [bz#562958]
  - kvm-qemu-kvm-add-vhost.h-header.patch [bz#562958]
  - kvm-irqfd-support.patch [bz#562958]
  - kvm-msix-add-mask-unmask-notifiers.patch [bz#562958]
  - kvm-virtio-pci-irqfd-support.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.26.el6
changelog:
  - kvm-add-spice-into-the-configure-file.patch [bz#549757]
  - kvm-spice-core-bits.patch [bz#549757]
  - kvm-spice-add-keyboard.patch [bz#549757]
  - kvm-spice-add-mouse.patch [bz#549757]
  - kvm-spice-simple-display.patch [bz#549757]
  - kvm-move-x509-file-name-defines-to-qemu-x509.h.patch [bz#549757]
  - kvm-spice-tls-support.patch [bz#549757]
  - kvm-spice-configure-listening-addr.patch [bz#549757]
  - kvm-spice-add-qxl-device.patch [bz#549757]
  - Resolves: bz#549757
    (Provide SPICE support  / -spice command line argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.27.el6
changelog:
  - kvm-spice-add-tablet.patch [bz#574211]
  - kvm-spice-simple-display-wake-spice-server-only-when-idl.patch [bz#574212]
  - kvm-spice-qxl-switch-back-to-vga-mode-on-register-access.patch [bz#574214]
  - kvm-spice-qxl-ring-access-security-fix.patch [bz#568820]
  - kvm-vnc-support-password-expire.patch [bz#525935]
  - kvm-spice-vnc-add-__com.redhat_set_password-monitor-comm.patch [bz#525935]
  - kvm-spice-add-audio-support.patch [bz#574222]
  - kvm-spice-make-image-compression-configurable.patch [bz#574225]
  - kvm-spice-configure-channel-security.patch [bz#574225]
  - kvm-spice-configure-renderer.patch [bz#574225]
  - kvm-spice-send-connect-disconnect-monitor-events.patch [bz#558957]
  - kvm-spice-qxl-update-vga-help-text-indicating-qxl-is-the.patch [bz#574853]
  - kvm-spice-notifying-spice-when-migration-starts-and-ends.patch [bz#574849]
  - kvm-spice-add-__com.redhat_spice_migrate_info-monitor-co.patch [bz#574849]
  - Resolves: bz#525935
    (RFE: expire vnc password)
  - Resolves: bz#558957
    (A QMP event notification on SPICE client connect/disconnect events)
  - Resolves: bz#568820
    (EMBARGOED CVE-2010-0431 qemu: Insufficient guest provided pointers validation [rhel-6.0])
  - Resolves: bz#574211
    (spice: add tablet support)
  - Resolves: bz#574212
    (spice:wake spice server only when idle)
  - Resolves: bz#574214
    (qxl: switch qxl from native into vga mode on vga register access)
  - Resolves: bz#574222
    (spice: add audio support)
  - Resolves: bz#574225
    (spice: add config options)
  - Resolves: bz#574849
    (spice: client migration support)
  - Resolves: bz#574853
    (spice/qxl: add qxl to -vga help text)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.28.el6
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#567940]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#567940]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#567940]
  - kvm-spice-virtual-machine-channel-replacement-for-remove.patch [bz#576488]
  - Resolves: bz#567940
    (qcow2 corruption with I/O error during refcount block allocation)
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.29.el6
changelog:
  - kvm-scsi-device-version-property.patch [bz#558835]
  - kvm-scsi-disk-fix-buffer-overflow.patch [bz#558835]
  - Resolves: bz#558835
    (ide/scsi drive versions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.30.el6
changelog:
  - kvm-New-API-for-asynchronous-monitor-commands.patch [bz#574939]
  - kvm-Revert-QMP-Fix-query-balloon-key-change.patch [bz#574939]
  - kvm-virtio-Add-memory-statistics-reporting-to-the-balloo.patch [bz#574939]
  - Resolves: bz#574939
    (Memory statistics support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.31.el6
changelog:
  - kvm-Transparent-Hugepage-Support-3.patch [bz#574525]
  - kvm-monitor-Don-t-check-for-mon_get_cpu-failure.patch [bz#574642]
  - kvm-QError-New-QERR_OPEN_FILE_FAILED.patch [bz#574642]
  - kvm-monitor-convert-do_memory_save-to-QError.patch [bz#574642]
  - kvm-monitor-convert-do_physical_memory_save-to-QError.patch [bz#574642]
  - kvm-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#574642]
  - kvm-monitor-convert-do_cpu_set-to-QObject-QError.patch [bz#574642]
  - kvm-monitor-Use-QERR_INVALID_PARAMETER-instead-of-QERR_I.patch [bz#575800]
  - kvm-Revert-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#575800]
  - kvm-json-parser-Fix-segfault-on-malformed-input.patch [bz#575800]
  - kvm-fix-i-format-handling-in-memory-dump.patch [bz#575800]
  - kvm-Don-t-set-default-monitor-when-there-is-a-mux-ed-one.patch [bz#575800]
  - kvm-monitor-Document-argument-type-M.patch [bz#575821]
  - kvm-QDict-New-qdict_get_double.patch [bz#575821]
  - kvm-monitor-New-argument-type-b.patch [bz#575821]
  - kvm-monitor-Use-argument-type-b-for-migrate_set_speed.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_speed-to-QObject.patch [bz#575821]
  - kvm-monitor-New-argument-type-T.patch [bz#575821]
  - kvm-monitor-Use-argument-type-T-for-migrate_set_downtime.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_downtime-to-QObject.patch [bz#575821]
  - kvm-block-Emit-BLOCK_IO_ERROR-before-vm_stop-call.patch [bz#575912]
  - kvm-QMP-Move-STOP-event-into-do_vm_stop.patch [bz#575912]
  - kvm-QMP-Move-RESET-event-into-qemu_system_reset.patch [bz#575912]
  - kvm-QMP-Sync-with-upstream-event-changes.patch [bz#575912]
  - kvm-QMP-Drop-DEBUG-event.patch [bz#575912]
  - kvm-QMP-Revamp-the-qmp-events.txt-file.patch [bz#575912]
  - kvm-QMP-Introduce-RTC_CHANGE-event.patch [bz#547534]
  - kvm-QMP-Introduce-WATCHDOG-event.patch [bz#557083]
  - kvm-spice-add-more-config-options.patch [bz#576561]
  - Resolves: bz#547534
    (RFE: a QMP event notification for RTC clock changes)
  - Resolves: bz#557083
    (QMP events for watchdog events)
  - Resolves: bz#574525
    (Align qemu-kvm guest memory for transparent hugepage support)
  - Resolves: bz#574642
    (QMP: Convert do_cpu_set() to QObject)
  - Resolves: bz#575800
    (Monitor: Backport a collection of fixes)
  - Resolves: bz#575821
    (QMP: Convert migrate_set_speed, migrate_set_downtime to QObject)
  - Resolves: bz#575912
    (QMP: Backport event related fixes)
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.32.el6
changelog:
  - kvm-Revert-spice-add-more-config-options.patch [bz#576561]
    (need to wait for spice patches to be included on spice-server)
  - Related: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.33.el6
changelog:
  - kvm-Fix-kvm_load_mpstate-for-vcpu-hot-add.patch [bz#569613]
  - kvm-qemu-kvm-enable-get-set-vcpu-events-on-reset-and-mig.patch [bz#569613]
  - kvm-Synchronize-kvm-headers.patch [bz#569613]
  - kvm-Increase-VNC_MAX_WIDTH.patch [bz#569613]
  - kvm-device-assignment-default-requires-IOMMU.patch [bz#569613]
  - kvm-Do-not-allow-vcpu-stop-with-in-progress-PIO.patch [bz#569613]
  - kvm-fix-savevm-command-without-id-or-tag.patch [bz#569613]
  - kvm-Do-not-ignore-error-if-open-file-failed-serial-dev-t.patch [bz#569613]
  - kvm-segfault-due-to-buffer-overrun-in-usb-serial.patch [bz#569613]
  - kvm-fix-inet_parse-typo.patch [bz#569613]
  - kvm-virtio-net-fix-network-stall-under-load.patch [bz#569613]
  - kvm-don-t-dereference-NULL-after-failed-strdup.patch [bz#569613]
  - kvm-net-Remove-unused-net_client_uninit.patch [bz#569613]
  - kvm-net-net_check_clients-runs-too-early-to-see-device-f.patch [bz#569613]
  - kvm-net-Fix-bogus-Warning-vlan-0-with-no-nics-with-devic.patch [bz#569613]
  - kvm-net-net_check_clients-checks-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-info-network-shows-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-Monitor-command-set_link-finds-only-VLAN-clients.patch [bz#569613]
  - kvm-ide-save-restore-pio-atapi-cmd-transfer-fields-and-i.patch [bz#569613]
  - kvm-cirrus-Properly-re-register-cirrus_linear_io_addr-on.patch [bz#569613]
  - Related: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.34.el6
changelog:
  - kvm-Monitor-Introduce-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-simple-handlers-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cont-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_eject-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cpu_set-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_block_set_passwd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_getfd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_closefd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_add-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_remove-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_memory_save-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_physical_memory_save-to-cmd_new_r.patch [bz#563491]
  - kvm-Monitor-Convert-do_info-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_change-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-to-mon_set_password-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-mon_spice_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Rename-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Debugging-support.patch [bz#563491]
  - kvm-Monitor-Drop-the-print-disabling-mechanism.patch [bz#563491]
  - kvm-Monitor-Audit-handler-return.patch [bz#563491]
  - kvm-Monitor-Debug-stray-prints-the-right-way.patch [bz#563491]
  - kvm-Monitor-Report-more-than-one-error-in-handlers.patch [bz#563491]
  - Resolves: bz#563491
    (QMP: New internal error handling mechanism)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.35.el6
changelog:
  - kvm-QError-New-QERR_DEVICE_NOT_ENCRYPTED.patch [bz#563641]
  - kvm-Wrong-error-message-in-block_passwd-command.patch [bz#563641]
  - kvm-Monitor-Introduce-RFQDN_REDHAT-and-use-it.patch [bz#578493]
  - kvm-QMP-Fix-Spice-event-names.patch [bz#578493]
  - Resolves: bz#563641
    (QMP: Wrong error message in block_passwd command)
  - Resolves: bz#578493
    (QMP: Fix spice event names)
  - ksm.init: touch max_kernel_pages only if it exists [bz#561907]
  - Resolves: bz#561907
  - ksmtuned: add debug information [bz#576789]
  - Resolves: bz#576789


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.36.el6
changelog:
  - kvm-char-Remove-redundant-qemu_chr_generic_open-call.patch [bz#558236]
  - kvm-add-close-callback-for-tty-based-char-device.patch [bz#558236]
  - kvm-Restore-terminal-attributes-for-tty-based-monitor.patch [bz#558236]
  - kvm-Restore-terminal-monitor-attributes-addition.patch [bz#558236]
  - Resolves: bz#558236
    (qemu-kvm monitor corrupts tty on exit)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.37.el6
changelog:
  - kvm-balloon-Fix-overflow-when-reporting-actual-memory-si.patch [bz#578912]
  - kvm-json-parser-Output-the-content-of-invalid-keyword.patch [bz#576544]
  - Resolves: bz#576544
    (Error message doesn't contain the content of invalid keyword)
  - Resolves: bz#578912
    (Monitor: Overflow in 'info balloon')


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.38.el6
changelog:
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#537164]
  - kvm-read-only-BDRV_O_FLAGS-cleanup.patch [bz#537164]
  - kvm-read-only-Added-drives-readonly-option.patch [bz#537164]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#537164]
  - kvm-read-only-No-need-anymoe-for-bdrv_set_read_only.patch [bz#537164]
  - kvm-read_only-Ask-for-read-write-permissions-when-openin.patch [bz#537164]
  - kvm-read-only-Read-only-device-changed-to-opens-it-s-fil.patch [bz#537164]
  - kvm-read-only-qemu-img-Fix-qemu-img-can-t-create-qcow-im.patch [bz#537164]
  - kvm-block-clean-up-bdrv_open2-structure-a-bit.patch [bz#537164]
  - kvm-block-saner-flags-filtering-in-bdrv_open2.patch [bz#537164]
  - kvm-block-flush-backing_hd-in-the-right-place.patch [bz#537164]
  - kvm-block-fix-cache-flushing-in-bdrv_commit.patch [bz#537164]
  - kvm-block-more-read-only-changes-related-to-backing-file.patch [bz#537164]
  - kvm-read-only-minor-cleanup.patch [bz#537164]
  - kvm-read-only-Another-minor-cleanup.patch [bz#537164]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#537164]
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#580028]
  - kvm-qemu-io-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-nbd-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-img-Fix-error-message.patch [bz#579974]
  - kvm-Replace-calls-of-old-bdrv_open.patch [bz#579974]
  - Resolves: bz#537164
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#579974
    (Get segmentation fault when creating qcow2 format image on block device with "preallocation=metadata")
  - Resolves: bz#580028
    ('qemu-img re-base' broken on block devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.39.el6
changelog:
  - kvm-virtio-blk-revert-serial-number-support.patch [bz#564101]
  - kvm-block-add-topology-qdev-properties.patch [bz#564101]
  - kvm-virtio-blk-add-topology-support.patch [bz#564101]
  - kvm-scsi-add-topology-support.patch [bz#564101]
  - kvm-ide-add-topology-support.patch [bz#564101]
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#580140]
  - Resolves: bz#564101
    ([RFE] topology support in the virt block layer)
  - Resolves: bz#580140
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.40.el6
changelog:
  - cpu-model-config-1.patch [bz#569661]
  - cpu-model-config-2.patch [bz#569661]
  - cpu-model-config-3.patch [bz#569661]
  - cpu-model-config-4.patch [bz#569661]
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.42.el6
changelog:
  - kvm-net-remove-NICInfo.bootable-field.patch [bz#561078]
  - kvm-net-remove-broken-net_set_boot_mask-boot-device-vali.patch [bz#561078]
  - kvm-boot-remove-unused-boot_devices_bitmap-variable.patch [bz#561078]
  - kvm-check-kvm-enabled.patch [bz#580109]
  - kvm-qemu-rename-notifier-event_notifier.patch [bz#580109]
  - kvm-virtio-API-name-cleanup.patch [bz#580109]
  - kvm-vhost-u_int64_t-uint64_t.patch [bz#580109]
  - kvm-virtio-pci-fix-coding-style.patch [bz#580109]
  - kvm-vhost-detect-lack-of-support-earlier-style.patch [bz#580109]
  - kvm-configure-vhost-related-fixes.patch [bz#580109]
  - kvm-vhost-fix-features-ack.patch [bz#580109]
  - kvm-vhost-net-disable-mergeable-buffers.patch [bz#580109]
  - Resolves: bz#561078
    ("Cannot boot from non-existent NIC" when using virt-install --pxe)
  - Resolves: bz#580109
    (vhost net lacks upstream fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.43.el6
changelog:
  - kvm-qemu-option-Make-qemu_opts_foreach-accumulate-return.patch [bz#579470]
  - kvm-qdev-Fix-exit-code-for-device.patch [bz#579470]
  - kvm-qdev-Add-help-for-device-properties.patch [bz#579470]
  - kvm-qdev-update-help-on-device.patch [bz#579470]
  - kvm-qdev-Add-rudimentary-help-for-property-value.patch [bz#579470]
  - kvm-qdev-Free-opts-on-failed-do_device_add.patch [bz#579470]
  - kvm-qdev-Improve-diagnostics-for-bad-property-values.patch [bz#579470]
  - kvm-qdev-Catch-attempt-to-attach-more-than-one-device-to.patch [bz#579470]
  - kvm-usb-Remove-disabled-monitor_printf-in-usb_read_file.patch [bz#579470]
  - kvm-savevm-Fix-loadvm-to-report-errors-to-stderr-not-the.patch [bz#579470]
  - kvm-pc-Fix-error-reporting-for-boot-once.patch [bz#579470]
  - kvm-pc-Factor-common-code-out-of-pc_boot_set-and-cmos_in.patch [bz#579470]
  - kvm-tools-Remove-unused-cur_mon-from-qemu-tool.c.patch [bz#579470]
  - kvm-monitor-Separate-default-monitor-and-current-monitor.patch [bz#579470]
  - kvm-block-Simplify-usb_msd_initfn-test-for-can-read-bdrv.patch [bz#579470]
  - kvm-monitor-Factor-monitor_set_error-out-of-qemu_error_i.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-from-monitor.c-to-own-.patch [bz#579470]
  - kvm-error-Simplify-error-sink-setup.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-into-their-own-header.patch [bz#579470]
  - kvm-error-New-error_printf-and-error_vprintf.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qdev_d.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qbus_f.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-scsi_h.patch [bz#579470]
  - kvm-error-Replace-qemu_error-by-error_report.patch [bz#579470]
  - kvm-error-Rename-qemu_error_new-to-qerror_report.patch [bz#579470]
  - kvm-error-Infrastructure-to-track-locations-for-error-re.patch [bz#579470]
  - kvm-error-Include-the-program-name-in-error-messages-to-.patch [bz#579470]
  - kvm-error-Track-locations-in-configuration-files.patch [bz#579470]
  - kvm-QemuOpts-Fix-qemu_config_parse-to-catch-file-read-er.patch [bz#579470]
  - kvm-error-Track-locations-on-command-line.patch [bz#579470]
  - kvm-qdev-Fix-device-and-device_add-to-handle-unsuitable-.patch [bz#579470]
  - kvm-qdev-Factor-qdev_create_from_info-out-of-qdev_create.patch [bz#579470]
  - kvm-qdev-Hide-no_user-devices-from-users.patch [bz#579470]
  - kvm-qdev-Hide-ptr-properties-from-users.patch [bz#579470]
  - kvm-monitor-New-monitor_cur_is_qmp.patch [bz#579470]
  - kvm-error-Let-converted-handlers-print-in-human-monitor.patch [bz#579470]
  - kvm-error-Polish-human-readable-error-descriptions.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_BAD.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_IN_USE.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_NOT_FOUND.patch [bz#579470]
  - kvm-qdev-convert-setting-device-properties-to-QError.patch [bz#579470]
  - kvm-qdev-Relax-parsing-of-bus-option.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_MULTIPLE_BUSSES.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_NO_BUS.patch [bz#579470]
  - kvm-qdev-Convert-qbus_find-to-QError.patch [bz#579470]
  - kvm-error-New-error_printf_unless_qmp.patch [bz#579470]
  - kvm-error-New-QERR_BAD_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NO_HOTPLUG.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_INIT_FAILED.patch [bz#579470]
  - kvm-error-New-QERR_NO_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-Revert-qdev-Use-QError-for-device-not-found-error.patch [bz#579470]
  - kvm-error-Convert-do_device_add-to-QError.patch [bz#579470]
  - kvm-qemu-option-Functions-to-convert-to-from-QDict.patch [bz#579470]
  - kvm-qemu-option-Move-the-implied-first-name-into-QemuOpt.patch [bz#579470]
  - kvm-qemu-option-Rename-find_list-to-qemu_find_opts-exter.patch [bz#579470]
  - kvm-monitor-New-argument-type-O.patch [bz#579470]
  - kvm-monitor-Use-argument-type-O-for-device_add.patch [bz#579470]
  - kvm-monitor-convert-do_device_add-to-QObject.patch [bz#579470]
  - kvm-error-Trim-includes-after-Move-qemu_error-friends.patch [bz#579470]
  - kvm-error-Trim-includes-in-qerror.c.patch [bz#579470]
  - kvm-error-Trim-includes-after-Infrastructure-to-track-lo.patch [bz#579470]
  - kvm-error-Make-use-of-error_set_progname-optional.patch [bz#579470]
  - kvm-error-Link-qemu-img-qemu-nbd-qemu-io-with-qemu-error.patch [bz#579470]
  - kvm-error-Move-qerror_report-from-qemu-error.-ch-to-qerr.patch [bz#579470]
  - Resolves: bz#579470
    (QMP: device_add support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.44.el6
changelog:
  - kvm-spice-add-more-config-options-readd.patch [bz#576561]
  - BuildRequires spice-server-devel >= 0.4.2-10.el6 because of API changes
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.45.el6
changelog:
  - kvm-Documentation-Add-monitor-commands-to-function-index.patch [bz#559670]
  - kvm-error-Put-error-definitions-back-in-alphabetical-ord.patch [bz#559670]
  - kvm-error-New-QERR_DUPLICATE_ID.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_create-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_INVALID_PARAMETER_VALUE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_set-to-QError.patch [bz#559670]
  - kvm-error-Drop-extra-messages-after-qemu_opts_set-and-qe.patch [bz#559670]
  - kvm-error-Use-QERR_INVALID_PARAMETER_VALUE-instead-of-QE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_validate-to-QError.patch [bz#559670]
  - kvm-error-Convert-net_client_init-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_DEVICE_IN_USE.patch [bz#559670]
  - kvm-monitor-New-commands-netdev_add-netdev_del.patch [bz#559670]
  - kvm-qdev-Convert-qdev_unplug-to-QError.patch [bz#582325]
  - kvm-monitor-convert-do_device_del-to-QObject-QError.patch [bz#582325]
  - kvm-block-Fix-error-code-in-multiwrite-for-immediate-fai.patch [bz#582575]
  - kvm-block-Fix-multiwrite-memory-leak-in-error-case.patch [bz#582575]
  - Resolves: bz#559670
    (No 'netdev_add' command in monitor)
  - Resolves: bz#582325
    (QMP: device_del support)
  - Resolves: bz#582575
    (Backport bdrv_aio_multiwrite fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.46.el6
changelog:
  - kvm-spice-add-auth-info-to-monitor-events.patch [bz#581540]
  - Resolves: bz#581540
    (SPICE graphics event does not include auth details)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.47.el6
changelog:
  - kvm-Request-setting-of-nmi_pending-and-sipi_vector.patch [bz#569613]
  - Resolves: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.48.el6
changelog:
  - kvm-virtio-serial-save-load-Ensure-target-has-enough-por.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-nr_ports-on-src-and-d.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-we-have-hot-plugged-p.patch [bz#574296]
  - kvm-virtio-serial-save-load-Send-target-host-connection-.patch [bz#574296]
  - kvm-virtio-serial-Use-control-messages-to-notify-guest-o.patch [bz#574296]
  - kvm-virtio-serial-whitespace-match-surrounding-code.patch [bz#574296]
  - kvm-virtio-serial-Remove-redundant-check-for-0-sized-wri.patch [bz#574296]
  - kvm-virtio-serial-Update-copyright-year-to-2010.patch [bz#574296]
  - kvm-virtio-serial-Propagate-errors-in-initialising-ports.patch [bz#574296]
  - kvm-virtio-serial-Send-out-guest-data-to-ports-only-if-p.patch [bz#574296]
  - kvm-iov-Introduce-a-new-file-for-helpers-around-iovs-add.patch [bz#574296]
  - kvm-iov-Add-iov_to_buf-and-iov_size-helpers.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-buffers-for-cont.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-input-from-the-g.patch [bz#574296]
  - kvm-virtio-serial-Apps-should-consume-all-data-that-gues.patch [bz#574296]
  - kvm-virtio-serial-Discard-data-that-guest-sends-us-when-.patch [bz#574296]
  - kvm-virtio-serial-Implement-flow-control-for-individual-.patch [bz#574296]
  - kvm-virtio-serial-Handle-output-from-guest-to-unintialis.patch [bz#574296]
  - kvm-virtio-serial-bus-wake-up-iothread-upon-guest-read-n.patch [bz#574296]
  - kvm-Bail-out-when-VCPU_CREATE-fails.patch [bz#587227]
  - Resolves: bz#574296
    (Fix migration for virtio-serial after port hot-plug/hot-unplug operations)
  - Resolves: bz#587227
    (Fix segfault when creating more vcpus than allowed.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.49.el6
changelog:
  - kvm-block-Free-iovec-arrays-allocated-by-multiwrite_merg.patch [bz#586572]
  - Resolves: bz#586572
    (virtio-blk multiwrite merge memory leak)
  - Force spice to be enabled and fix BuildRequires to use spice-server-devel
  - Resolves: bz#588904
    (qemu-kvm builds without spice support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.50.el6
changelog:
  - kvm-vl.c-fix-BZ-588828-endless-loop-caused-by-non-option.patch [bz#588828]
  - Resolves: bz#588828
    (endless loop when parsing of command line with bare image argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.51.el6
changelog:
  - kvm-fdc-fix-drive-property-handling.patch [bz#584902]
  - Resolves: bz#584902
    (Cannot associate drive with a floppy device using -global)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.52.el6
changelog:
  - kvm-qemu-img-use-the-heap-instead-of-the-huge-stack-arra.patch [bz#585837]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#585837]
  - Resolves: bz#585837
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.53.el6
changelog:
  - kvm-virtio-blk-Fix-use-after-free-in-error-case.patch [bz#578448]
  - kvm-block-Fix-multiwrite-error-handling.patch [bz#578448]
  - kvm-Fix-boot-once-option.patch [bz#579692]
  - kvm-QError-New-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QMP-Use-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QError-Improve-QERR_QMP_BAD_INPUT_OBJECT-desc.patch [bz#573578]
  - kvm-QMP-Check-arguments-member-s-type.patch [bz#573578]
  - kvm-QMP-Introduce-RESUME-event.patch [bz#590102]
  - kvm-pci-irq_state-vmstate-breakage.patch [bz#588133]
  - Resolves: bz#573578
    (Segfault when migrating via QMP command interface)
  - Resolves: bz#578448
    (qemu-kvm segfault when nfs restart(without using werror&rerror))
  - Resolves: bz#579692
    (qemu-kvm "-boot once=drives" couldn't function properly)
  - Resolves: bz#588133
    (RHEL5.4 guest can lose virtio networking during migration)
  - Resolves: bz#590102
    (QMP: Backport RESUME event)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.54.el6
changelog:
  - kvm-qemu-config-qemu_read_config_file-reads-the-normal-c.patch [bz#588756]
  - kvm-qemu-config-Make-qemu_config_parse-more-generic.patch [bz#588756]
  - kvm-blkdebug-Basic-request-passthrough.patch [bz#588756]
  - kvm-blkdebug-Inject-errors.patch [bz#588756]
  - kvm-Make-qemu-config-available-for-tools.patch [bz#588756]
  - kvm-blkdebug-Add-events-and-rules.patch [bz#588756]
  - kvm-qcow2-Trigger-blkdebug-events.patch [bz#588756]
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#588762]
  - kvm-qcow2-rename-two-QCowAIOCB-members.patch [bz#588762]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#588762]
  - kvm-qcow2-Remove-request-from-in-flight-list-after-error.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#588762]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#588762]
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#588762]
  - kvm-Add-qemu-error.o-only-once-to-target-list.patch [bz#591061]
  - kvm-block-Fix-bdrv_commit.patch [bz#589439]
  - kvm-fix-80000001.EDX-supported-bit-filtering.patch [bz#578106]
  - kvm-fix-CPUID-vendor-override.patch [bz#591604]
  - Resolves: bz#578106
    (call trace when boot guest with -cpu host)
  - Resolves: bz#588756
    (blkdebug is missing)
  - Resolves: bz#588762
    (Backport qcow2 fixes)
  - Resolves: bz#589439
    (Qcow2 snapshot got corruption after commit using block device)
  - Resolves: bz#591061
    (make fails to build after make clean)
  - Resolves: bz#591604
    (cannot override cpu vendor from the command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.55.el6
changelog:
  - kvm-turn-off-kvmclock-when-resetting-cpu.patch [bz#588884]
  - kvm-virtio-blk-Avoid-zeroing-every-request-structure.patch [bz#593369]
  - Resolves: bz#588884
    (Rebooting a kernel with kvmclock enabled, into a kernel with kvmclock disabled, causes random crashes)
  - Resolves: bz#593369
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.56.el6
changelog:
  - kvm-dmg-fix-open-failure.patch [bz#580363]
  - kvm-block-get-rid-of-the-BDRV_O_FILE-flag.patch [bz#580363]
  - kvm-block-Convert-first_drv-to-QLIST.patch [bz#580363]
  - kvm-block-separate-raw-images-from-the-file-protocol.patch [bz#580363]
  - kvm-block-Split-bdrv_open.patch [bz#580363]
  - kvm-block-Avoid-forward-declaration-of-bdrv_open_common.patch [bz#580363]
  - kvm-block-Open-the-underlying-image-file-in-generic-code.patch [bz#580363]
  - kvm-block-bdrv_has_zero_init.patch [bz#580363]
  - kvm-block-Do-not-export-bdrv_first.patch [bz#590998]
  - kvm-block-Convert-bdrv_first-to-QTAILQ.patch [bz#590998]
  - kvm-block-Add-wr_highest_sector-blockstat.patch [bz#590998]
  - Resolves: bz#580363
    (Error while creating raw image on block device)
  - Resolves: bz#590998
    (qcow2 high watermark)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.57.el6
changelog:
  - kvm-stash-away-SCM_RIGHTS-fd-until-a-getfd-command-arriv.patch [bz#582684]
  - Resolves: bz#582684
    (Monitor: getfd command is broken)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.58.el6
changelog:
  - kvm-Fix-segfault-after-device-assignment-hot-remove.patch [bz#582874]
  - Resolves: bz#582874
    (Guest hangs during restart after hot unplug then hot plug physical NIC card)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.59.el6
changelog:
  - kvm-pci-cleanly-backout-of-pci_qdev_init.patch [bz#590884]
  - kvm-ide-Fix-ide_dma_cancel.patch [bz#593287]
  - Resolves: bz#590884
    (bogus 'info pci' state when hot-added assigned device fails to initialize)
  - Resolves: bz#593287
    (Failed asserting during ide_dma_cancel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.60.el6
changelog:
  - kvm-spice-vmc-add-copyright.patch [bz#576488]
  - kvm-spice-vmc-remove-debug-prints-and-defines.patch [bz#576488]
  - kvm-spice-vmc-add-braces-to-single-line-if-s.patch [bz#576488]
  - kvm-spice-vmc-s-SpiceVirtualChannel-SpiceVMChannel-g.patch [bz#576488]
  - kvm-spice-vmc-s-spice_virtual_channel-spice_vmc-g.patch [bz#576488]
  - kvm-spice-vmc-all-variables-of-type-SpiceVMChannel-renam.patch [bz#576488]
  - kvm-spice-vmc-remove-meaningless-cast-of-void.patch [bz#576488]
  - kvm-spice-vmc-add-spice_vmc_ring_t-fix-write-function.patch [bz#576488]
  - kvm-spice-vmc-don-t-touch-guest_out_ring-on-unplug.patch [bz#576488]
  - kvm-spice-vmc-VirtIOSerialPort-vars-renamed-to-vserport.patch [bz#576488]
  - kvm-spice-vmc-add-nr-property.patch [bz#576488]
  - kvm-spice-vmc-s-SPICE_VM_CHANNEL-SPICE_VMC-g.patch [bz#576488]
  - kvm-spice-vmc-add-vmstate.-saves-active_interface.patch [bz#576488]
  - kvm-spice-vmc-rename-guest-device-name-to-com.redhat.spi.patch [bz#576488]
  - kvm-spice-vmc-remove-unused-property-name.patch [bz#576488]
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.61.el6
changelog:
  - Add "file" format to bdrv whitelist
  - Resolves: bz#593909
    (VM can not start by using qemu-kvm-0.12.1.2-2.56.el6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.62.el6
changelog:
  - kvm-block-add-logical_block_size-property.patch [bz#566785]
  - kvm-virtio-serial-bus-fix-ports_map-allocation.patch [bz#591176]
  - kvm-Move-cpu-model-config-file-to-agree-with-rpm-build-B.patch [bz#569661]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)
  - Resolves: bz#591176
    (migration fails since virtio-serial-bus is using uninitialized memory)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.63.el6
changelog:
  - kvm-fix-undefined-shifts-by-32.patch [bz#590922]
  - kvm-qemu-char.c-drop-debug-printfs-from-qemu_chr_parse_c.patch [bz#590922]
  - kvm-Fix-corner-case-in-chardev-udp-parameter.patch [bz#590922]
  - kvm-pci-passthrough-zap-option-rom-scanning.patch [bz#590922]
  - kvm-UHCI-spurious-interrupt-fix.patch [bz#590922]
  - kvm-Fix-SIGFPE-for-vnc-display-of-width-height-1.patch [bz#590922]
  - kvm-spice-vmc-remove-ringbuffer.patch [bz#589670]
  - kvm-spice-vmc-add-dprintfs.patch [bz#589670]
  - Resolves: bz#589670
    (spice: Ensure ring data is save/restored on migration)
  - Related: bz#590922
    (backport qemu-kvm-0.12.4 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.64.el6
changelog:
  - kvm-qemu-kvm-fix-crash-on-reboot-with-vhost-net.patch [bz#585940]
  - Related: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.65.el6
changelog:
  - kvm-qcow2-Fix-creation-of-large-images.patch [bz#577106]
  - kvm-vnc-sync-lock-modifier-state-on-connect.patch [bz#569767]
  - kvm-json-lexer-Initialize-x-and-y.patch [bz#589952]
  - kvm-json-lexer-Handle-missing-escapes.patch [bz#589952]
  - kvm-qjson-Handle-f.patch [bz#589952]
  - kvm-json-lexer-Drop-buf.patch [bz#589952]
  - kvm-json-streamer-Don-t-use-qdict_put_obj.patch [bz#589952]
  - kvm-block-fix-sector-comparism-in-multiwrite_req_compare.patch [bz#596119]
  - kvm-block-Fix-multiwrite-with-overlapping-requests.patch [bz#596119]
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#577106
    (Abort/Segfault when creating qcow2 format image with 512b cluster size)
  - Resolves: bz#589952
    (QMP breaks when issuing any command with a backslash)
  - Resolves: bz#596119
    (Possible corruption after block request merge)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.66.el6
changelog:
  - kvm-device-assignment-use-stdint-types.patch [bz#595495]
  - kvm-device-assignment-Don-t-use-libpci.patch [bz#595495]
  - kvm-device-assignment-add-config-fd-qdev-property.patch [bz#595495]
  - Resolves: bz#595495
    (Fail to hotplug pci device to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.67.el6
changelog:
  - kvm-qemu-address-todo-comment-in-exec.c.patch [bz#595301]
  - Resolves: bz#595301
    (QEMU terminates without warning with virtio-net and SMP enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.68.el6
changelog:
  - kvm-virtio-blk-fix-barrier-support.patch [bz#595813]
  - Resolves: bz#595813
    (virtio-blk doesn't handle barriers correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.69.el6
changelog:
  - Changes to make-release script with no resulting changes on binary package
  - kvm-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#595287]
  - Resolves: bz#595287
    (virtio net/vhost net speed enhancements from upstream kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.70.el6
changelog:
  - kvm-virtio-invoke-set_features-on-load.patch [bz#595263]
  - kvm-virtio-net-return-with-value-in-void-function.patch [bz#595263]
  - kvm-vhost-net-fix-reversed-logic-in-mask-notifiers.patch [bz#585940]
  - kvm-hpet-Disable-for-Red-Hat-Enterprise-Linux.patch [bz#595130]
  - ksmtuned: typo MemCached -> Cached [bz#597005]
  - kvm-virtio-net-stop-vhost-backend-on-vmstop.patch [bz#598896]
  - kvm-msix-fix-msix_set-unset_mask_notifier.patch [bz#598896]
  - Resolves: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)
  - Resolves: bz#595130
    (Disable hpet by default)
  - Resolves: bz#595263
    (virtio net lacks upstream fixes as of may 24)
  - Resolves: bz#597005
    (ksmtune: typo: MemCached -> Cached)
  - Resolves: bz#598896
    (migration breaks networking with vhost-net)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.71.el6
changelog:
  - kvm-device-assignment-fix-failure-to-exit-on-shared-IRQ.patch [bz#585310]
  - kvm-doc-Fix-host-forwarding-monitor-command-documentatio.patch [bz#588719]
  - kvm-doc-Fix-acl-monitor-command-documentation.patch [bz#588719]
  - kvm-doc-Heading-for-monitor-command-cpu-got-lost-restore.patch [bz#588719]
  - kvm-doc-Clean-up-monitor-command-function-index.patch [bz#588719]
  - kvm-fix-info-cpus-halted-state-reporting.patch [bz#593769]
  - kvm-sysemu-Export-no_shutdown.patch [bz#559618]
  - kvm-Monitor-Return-before-exiting-with-quit.patch [bz#559618]
  - kvm-QMP-Add-Downstream-extension-of-QMP-to-spec.patch [bz#566291]
  - kvm-Revert-PCI-Convert-pci_device_hot_add-to-QObject.patch [bz#580365]
  - kvm-Revert-monitor-Convert-do_pci_device_hot_remove-to-Q.patch [bz#580365]
  - kvm-drive-allow-rerror-werror-and-readonly-for-if-none.patch [bz#565609 bz#593256]
  - kvm-qdev-properties-Fix-u-intXX-parsers.patch [bz#596093]
  - kvm-vnc-factor-out-vnc_desktop_resize.patch [bz#590070]
  - kvm-vnc-send-desktopresize-event-as-reply-to-set-encodin.patch [bz#590070]
  - kvm-vnc-keep-track-of-client-desktop-size.patch [bz#590070]
  - kvm-vnc-don-t-send-invalid-screen-updates.patch [bz#590070]
  - kvm-vnc-move-size-changed-check-into-the-vnc_desktop_res.patch [bz#590070]
  - kvm-check-for-active_console-before-using-it.patch [bz#591759]
  - Resolves: bz#559618
    (QMP: Fix 'quit' to return success before exiting)
  - Resolves: bz#565609
    (Unable to use werror/rerror with  -drive syntax using if=none)
  - Resolves: bz#566291
    (QMP: Support vendor extensions)
  - Resolves: bz#580365
    (QMP: pci_add/pci_del conversion should be reverted)
  - Resolves: bz#585310
    (qemu-kvm does not exit when device assignment fails due to IRQ sharing)
  - Resolves: bz#588719
    (Fix monitor command documentation)
  - Resolves: bz#590070
    (QEMU misses DESKTOP-RESIZE event if it is triggered during client connection initialization)
  - Resolves: bz#591759
    (Segmentation fault when using vnc to view guest without vga card)
  - Resolves: bz#593256
    (Unable to set readonly flag for floppy disks)
  - Resolves: bz#593769
    ("info cpus" doesn't show halted state)
  - Resolves: bz#596093
    (16bit integer qdev properties are not parsed correctly.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.72.el6
changelog:
  - kvm-Monitor-Make-RFQDN_REDHAT-public.patch [bz#586349]
  - kvm-QMP-Add-error-reason-to-BLOCK_IO_ERROR-event.patch [bz#586349]
  - kvm-virtio-net-truncating-packet.patch [bz#591494]
  - kvm-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#600203]
  - kvm-device-assignment-don-t-truncate-MSIX-capabilities-t.patch [bz#596315]
  - kvm-If-a-USB-keyboard-is-unplugged-the-keyboard-eventhan.patch [bz#561433]
  - Resolves: bz#561433
    (Segfault when keyboard is removed)
  - Resolves: bz#586349
    (BLOCK_IO_ERROR event does not provide the errno that caused it.)
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#596315
    (device assignment truncates MSIX table size)
  - Resolves: bz#600203
    (vhost net new userspace on old kernel: 95: falling back on userspace virtio)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.73.el6
changelog:
  - kvm-net-Fix-hotplug-with-pci_add.patch [bz#599460]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.74.el6
changelog:
  - kvm-raw-posix-Detect-CDROM-via-ioctl-on-linux.patch [bz#593758]
  - kvm-block-Remove-special-case-for-vvfat.patch [bz#593758]
  - kvm-block-Make-find_image_format-return-raw-BlockDriver-.patch [bz#593758]
  - kvm-block-Add-missing-bdrv_delete-for-SG_IO-BlockDriver-.patch [bz#593758]
  - kvm-block-Assume-raw-for-drives-without-media.patch [bz#593758]
  - Resolves: bz#593758
    (qemu fails to start with -cdrom /dev/sr0 if no media inserted)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.75.el6
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#598407]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#598507]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#598507]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#598507]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#598507]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#598507]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#598507]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#598507]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Avoid-shadowing-variable-in-alloc_clusters_nor.patch [bz#598507]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#598507]
  - kvm-make-release-make-mtime-owner-group-consistent.patch
  - Resolves: bz#598407
    (qcow2 corruption bug in refcount table growth)
  - Resolves: bz#598507
    (Backport qcow2 error path fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.76.el6
changelog:
  - kvm-fix-vnc-memory-corruption-with-width-1400.patch [bz#602724]
  - kvm-net-Fix-VM-start-with-net-none.patch [bz#599460]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-drive_add-command-for-Red-Hat-Enterpr.patch [bz#602590]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)
  - Resolves: bz#602590
    (Disable pci_add, pci_del, drive_add)
  - Resolves: bz#602724
    (VNC disconnect segfault on KVM video consoles)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.77.el6
changelog:
  - kvm.modules: autoload vhost-net module too [bz#596891]
  - Resolves: bz#596891
    (vhost-net module should be loaded automatically)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.78.el6
changelog:
  - kvm-block-read-only-open-cdrom-as-read-only-when-using-m.patch [bz#602026]
  - kvm-acpi_piix4-save-gpe-and-pci-hotplug-slot-status.patch [bz#598022]
  - kvm-Don-t-check-for-bus-master-for-old-guests.patch [bz#596014]
  - kvm-Make-IDE-drives-defined-with-device-visible-to-cmos_.patch [bz#597147]
  - Resolves: bz#596014
    (hot add virtio-blk-pci via device_add lead to virtio network lost)
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)
  - Resolves: bz#598022
    (Hot-added device is not visible in guest after live-migration.)
  - Resolves: bz#602026
    (Cannot change cdrom by "change device filename [format] " in (qemu) command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.79.el6
changelog:
  - kvm-Make-geometry-of-IDE-drives-defined-with-device-visi.patch [bz#597147]
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.80.el6
changelog:
  - don't package kvmtrace anymore
  - Resolves: bz#605426
    (obsolete kvmtrace binary is still being packaged)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.81.el6
changelog:
  - kvm-virtio-Enable-the-PUBLISH_USED-feature-by-default-fo.patch [bz#602417]
  - kvm-do-not-enter-vcpu-again-if-it-was-stopped-during-IO.patch [bz#595647]
  - Resolves: bz#595647
    (Windows guest with qxl driver can't get into S3 state)
  - Resolves: bz#602417
    (Enable VIRTIO_RING_F_PUBLISHED bit for all virtio devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.82.el6
changelog:
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#581789]
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#596609]
  - kvm-Make-netdev_del-delete-the-netdev-even-when-it-s-in-.patch [bz#596274]
  - kvm-device-assignment-msi-PBA-is-long.patch [bz#605359]
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#604210]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#604210]
  - kvm-qcow2-Fix-error-handling-during-metadata-preallocati.patch [bz#604210]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#607200]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#607200]
  - kvm-virtio-serial-Fix-compat-property-name.patch [bz#607263]
  - kvm-rtc-Remove-TARGET_I386-from-qemu-config.c-enables-dr.patch [bz#606733]
  - Resolves: bz#581789
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#596274
    (QMP: netdev_del sometimes fails claiming the device is in use)
  - Resolves: bz#596609
    (Live migration failed when migration during boot)
  - Resolves: bz#604210
    (Segmentation fault when check  preallocated qcow2 image on lvm.)
  - Resolves: bz#605359
    (Fix MSIX regression from bz595495)
  - Resolves: bz#606733
    (Unable to set the driftfix parameter)
  - Resolves: bz#607200
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#607263
    (Unable to launch QEMU with -M pc-0.12 and  virtio serial)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.83.el6
changelog:
  - kvm-add-some-tests-for-invalid-JSON.patch [bz#585009]
  - kvm-implement-optional-lookahead-in-json-lexer.patch [bz#585009]
  - kvm-remove-unnecessary-lookaheads.patch [bz#585009]
  - kvm-per-machine-type-smbios-Type-1-smbios-values.patch [bz#605704]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#607688]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#607688]
  - kvm-block-allow-filenames-with-colons-again-for-host-dev.patch [bz#599122]
  - Resolves: bz#585009
    (QMP: input needs trailing  char)
  - Resolves: bz#599122
    (Unable to launch QEMU with a guest disk filename containing a ':')
  - Resolves: bz#605704
    (qemu-kvm: set per-machine-type smbios strings)
  - Resolves: bz#607688
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.84.el6
changelog:
  - kvm-Add-KVM-paravirt-cpuid-leaf.patch [bz#606084]
  - Resolves: bz#606084
    (Allow control of kvm cpuid option via -cpu flag)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.85.el6
changelog:
  - kvm-Remove-usage-of-CONFIG_RED_HAT_DISABLED.patch [bz#605638]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#605638]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#605638]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#607244]
  - kvm-QError-Introduce-QERR_DEVICE_INIT_FAILED_2.patch [bz#596279]
  - kvm-dev-assignment-Report-IRQ-assign-errors-in-QMP.patch [bz#596279]
  - Resolves: bz#596279
    (QMP: does not report the real cause of PCI device assignment failure)
  - Resolves: bz#605638
    (Remove unsupported monitor commands from qemu-kvm)
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.86.el6
changelog:
  - kvm-net-delete-QemuOpts-when-net_client_init-fails.patch [bz#603851]
  - kvm-QMP-Fix-error-reporting-in-the-async-API.patch [bz#587382]
  - kvm-QMP-Remove-leading-whitespace-in-package.patch [bz#580648]
  - kvm-Add-optional-dump-of-default-config-file-paths-v2-BZ.patch [bz#601540]
  - Resolves: bz#580648
    (QMP: Bad package version in greeting message)
  - Resolves: bz#587382
    (QMP: balloon command may not report an error)
  - Resolves: bz#601540
    (qemu requires ability to verify location of cpu model definition file..)
  - Resolves: bz#603851
    (QMP: Can't reuse same 'id' when netdev_add fails)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.87.el6
changelog:
  - kvm-qxl-drop-check-for-depths-32.patch [bz#597198]
  - kvm-spice-handle-16-bit-color-depth.patch [bz#597198 bz#600205]
  - kvm-device-assignment-Don-t-deassign-when-the-assignment.patch [bz#597968]
  - kvm-block-fix-physical_block_size-calculation.patch [bz#566785]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-Intel-models.patch [bz#601517]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#597198
    (qxl: 16bpp vga mode is broken.)
  - Resolves: bz#597968
    (Should not allow one physical NIC card to be assigned to one guest for many times)
  - Resolves: bz#600205
    (Live migration cause qemu-kvm Segmentation fault (core dumped)by using "-vga std")
  - Resolves: bz#601517
    (x2apic needs to be present in all new Intel cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.88.el6
changelog:
  - kvm-Exit-if-incoming-migration-fails.patch [bz#570174]
  - kvm-Factorize-common-migration-incoming-code.patch [bz#570174]
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.89.el6
changelog:
  - kvm-device-assignment-be-more-selective-in-interrupt-dis.patch [bz#605361]
  - Resolves: bz#605361
    (82576 physical function device assignment doesn't work with win7)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.90.el6
changelog:
  - kvm-device-assignment-Avoid-munmapping-the-real-MSIX-are.patch [bz#572043]
  - kvm-device-assignment-Cleanup-on-exit.patch [bz#572043]
  - Resolves: bz#572043
    (Guest gets segfault when do multiple device hot-plug and hot-unplug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.91.el6
changelog:
  - kvm-doc-Update-monitor-info-subcommands.patch [bz#582262]
  - kvm-Fix-typo-in-balloon-help.patch [bz#582262]
  - kvm-monitor-Reorder-info-documentation.patch [bz#582262]
  - kvm-QMP-Introduce-commands-documentation.patch [bz#582262]
  - kvm-QMP-Sync-documentation-with-RHEL6-only-changes.patch [bz#582262]
  - kvm-Monitor-Drop-QMP-documentation-from-code.patch [bz#582262]
  - kvm-hxtool-Fix-line-number-reporting-on-SQMP-EQMP-errors.patch [bz#582262]
  - kvm-monitor-New-command-__com.redhat_drive_add.patch [bz#581963]
  - kvm-Fix-driftfix-option.patch [bz#611229]
  - Resolves: bz#581963
    (QMP: missing drive_add command in JSON mode)
  - Resolves: bz#582262
    (QMP: Missing commands doc)
  - Resolves: bz#611229
    (-rtc cmdline changes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.92.el6
changelog:
  - build-time-only fix: fix the tarball-generation make-release script for newer git versions
    (kvm-make-release-fix-mtime-on-rhel6-beta.patch)
  - Related: bz#581963 bz#582262 bz#611229


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.93.el6
changelog:
  - kvm-make-rtc-alatm-work.patch [bz#598836]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#612164]
  - kvm-qcow2-vdi-Change-check-to-distinguish-error-cases.patch [bz#612164]
  - Resolves: bz#598836
    (RHEL 6.0 RTC Alarm unusable in vm)
  - Resolves: bz#612164
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.94.el6
changelog:
  - kvm-Revert-ide-save-restore-pio-atapi-cmd-transfer-field.patch [bz#612481]
  - kvm-vmstate-add-subsections-code.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-pio-operation.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-a-bmdma-transfer.patch [bz#612481]
  - kvm-Initial-documentation-for-migration-Signed-off-by-Ju.patch [bz#612481]
  - kvm-Disable-non-rhel-machine-types-pc-0.12-pc-0.11-pc-0..patch [bz#607263]
  - Resolves: bz#607263
    (Remove -M pc-0.12 support)
  - Resolves: bz#612481
    (Enable migration subsections)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.95.el6
changelog:
  - kvm-Move-CPU-definitions-to-usr-share-.-BZ-610805.patch [bz#610805]
  - kvm-QEMUFileBuffered-indicate-that-we-re-ready-when-the-.patch [bz#609261]
  - kvm-device-assignment-Better-fd-tracking.patch [bz#611715]
  - Resolves: bz#609261
    (Exec outgoing migration is too slow)
  - Resolves: bz#610805
    (Move CPU definitions to /usr/share/...)
  - Resolves: bz#611715
    (qemu-kvm gets no responsive  when do  hot-unplug pass-through device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.96.el6
changelog:
  - fix some errors in ksmd.init [bz#570467]
  - fix some errors in ksmtuned.init [bz#579883]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-AMD-models.-.patch [bz#613884]
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#579883
    (init script doesn't stop ksmd)
  - Resolves: bz#613884
    (x2apic needs to be present in all new AMD cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.97.el6
changelog:
  - kvm-block-Fix-early-failure-in-multiwrite.patch [bz#602209]
  - kvm-block-Handle-multiwrite-errors-only-when-all-request.patch [bz#602209]
  - kvm-migration-respect-exit-status-with-exec.patch [bz#584372]
  - kvm-set-proper-migration-status-on-write-error-v3.patch [bz#584372]
  - kvm-Set-SMBIOS-vendor-to-QEMU-for-RHEL5-machine-types.patch [bz#614377]
  - kvm-Don-t-reset-bs-is_temporary-in-bdrv_open_common.patch [bz#611797]
  - kvm-Change-default-CPU-model-qemu64-to-model-6.patch [bz#614537]
  - kvm-set-model-6-on-Intel-CPUs-on-cpu-x86_64.conf.patch [bz#614537]
  - kvm-vhost-fix-miration-during-device-start.patch [bz#615228]
  - Resolves: bz#584372
    (Fails to detect errors when using exec: based migration)
  - Resolves: bz#602209
    (Core dumped during Guest installation)
  - Resolves: bz#611797
    (qemu does not call unlink() on temp files in snapshot mode)
  - Resolves: bz#614377
    (Windows 7 requires re-activation when migrated from RHEL5 to RHEL6)
  - Resolves: bz#614537
    (Skype crashes on VM.)
  - Resolves: bz#615228
    (oom in vhost_dev_start)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.98.el6
changelog:
  - kvm-ram_blocks-Convert-to-a-QLIST.patch [bz#596328]
  - kvm-Remove-uses-of-ram.last_offset-aka-last_ram_offset.patch [bz#596328]
  - kvm-pc-Allocate-all-ram-in-a-single-qemu_ram_alloc.patch [bz#596328]
  - kvm-qdev-Add-a-get_dev_path-function-to-BusInfo.patch [bz#596328]
  - kvm-pci-Implement-BusInfo.get_dev_path.patch [bz#596328]
  - kvm-savevm-Add-DeviceState-param.patch [bz#596328]
  - kvm-savevm-Make-use-of-DeviceState.patch [bz#596328]
  - kvm-eepro100-Add-a-dev-field-to-eeprom-new-free-function.patch [bz#596328]
  - kvm-virtio-net-Incorporate-a-DeviceState-pointer-and-let.patch [bz#596328]
  - kvm-qemu_ram_alloc-Add-DeviceState-and-name-parameters.patch [bz#596328]
  - kvm-ramblocks-Make-use-of-DeviceState-pointer-and-BusInf.patch [bz#596328]
  - kvm-savevm-Migrate-RAM-based-on-name-offset.patch [bz#596328]
  - kvm-savevm-Use-RAM-blocks-for-basis-of-migration.patch [bz#596328]
  - kvm-savevm-Create-a-new-continue-flag-to-avoid-resending.patch [bz#596328]
  - kvm-qemu_ram_free-Implement-it.patch [bz#596328]
  - kvm-pci-Free-the-space-allocated-for-the-option-rom-on-r.patch [bz#596328]
  - kvm-ramblocks-No-more-being-lazy-about-duplicate-names.patch [bz#596328]
  - kvm-savevm-Reset-last-block-info-at-beginning-of-each-sa.patch [bz#616525]
  - kvm-block-Change-bdrv_commit-to-handle-multiple-sectors-.patch [bz#615152]
  - kvm-Revert-virtio-Enable-the-PUBLISH_USED-feature-by-def.patch [bz#616501]
  - kvm-Revert-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#616501]
  - kvm-Revert-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#616501]
  - kvm-savevm-Fix-memory-leak-of-compat-struct.patch [bz#596328]
  - kvm-virtio-blk-Create-exit-function-to-unregister-savevm.patch [bz#580010]
  - Resolves: bz#580010
    (migration failed after pci_add and pci_del a virtio storage device)
  - Resolves: bz#596328
    ([RHEL6 Beta1] : KVM guest remote migration fails with pci device hotplug.)
  - Resolves: bz#615152
    (rhel 6 performance worse than rhel5.6 when committing 1G  changes recorded in  snapshot in its base image.)
  - Resolves: bz#616501
    (publish used ABI incompatible with future guests)
  - Resolves: bz#616525
    (savevm needs to reset block info on each new save)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.99.el6
changelog:
  - kvm-Documentation-Add-a-warning-message-to-qemu-kvm-help.patch [bz#596232]
  - Resolves: bz#596232
    (Update docs to exclude unsupported options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.100.el6
changelog:
  - kvm-Disable-SCSI.patch [bz#617534]
  - kvm-spice-don-t-force-fullscreen-redraw-on-display-resiz.patch [bz#612074]
  - kvm-KVM_GET_SUPPORTED_CPUID-doesn-t-return-all-host-cpui.patch [bz#616188]
  - kvm-Do-not-try-loading-option-ROM-for-hotplug-PCI-device.patch [bz#612696]
  - Resolves: bz#612074
    (core dumped while live migration with spice)
  - Resolves: bz#612696
    (virsh attach-device crash kvm guest.)
  - Resolves: bz#616188
    (KVM_GET_SUPPORTED_CPUID doesn't return all host cpuid flags..)
  - Resolves: bz#617534
    (Disable SCSI and usb-storage)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.101.el6
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#591494]
  - kvm-avoid-canceling-ide-dma-rediff.patch [bz#617414]
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#617414
    (avoid canceling in flight ide dma)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.102.el6
changelog:
  - kvm-spice-Rename-conflicting-ramblock.patch [bz#617463]
  - kvm-block-default-to-0-minimal-optimal-I-O-size.patch [bz#617271]
  - Resolves: bz#617271
    (RHEL6 qemu-kvm guest gets partitioned at sector 63)
  - Resolves: bz#617463
    (Coredump occorred when enable qxl)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.103.el6
changelog:
  - kvm-migration-Accept-cont-only-after-successful-incoming.patch [bz#581555]
  - Resolves: bz#581555
    (race between qemu monitor "cont" and incoming migration can cause failed restore/migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.104.el6
changelog:
  - kvm-vhost_dev_unassign_memory-don-t-assert-if-removing-f.patch [bz#617085]
  - Resolves: bz#617085
    (core dumped when add netdev to VM with vhost on)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.105.el6
changelog:
  - kvm-device-assignment-Use-PCI-I-O-port-sysfs-resource-fi.patch [bz#615214]
  - kvm-block-Change-bdrv_eject-not-to-drop-the-image.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#615214
    ([VT-d] Booting RHEL6 guest with Intel 82541PI NIC assigned by libvirt cause qemu crash)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.106.el6
changelog:
  - kvm-device-assignment-Leave-option-ROM-space-RW-KVM-does.patch [bz#618788]
  - kvm-block-Fix-bdrv_has_zero_init.patch [bz#616890]
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619414]
  - kvm-Migration-reopen-block-devices-files.patch [bz#618601]
  - Resolves: bz#616890
    ("qemu-img convert" fails on block device)
  - Resolves: bz#618601
    (We need to reopen images after migration)
  - Resolves: bz#618788
    (device-assignment hangs with kvm_run: Bad address)
  - Resolves: bz#619414
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-6.0])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.107.el6
changelog:
  - kvm-Correct-cpuid-flags-and-model-fields-V2.patch [bz#613892 bz#618332]
  - Resolves: bz#613892
    ([SR-IOV]VF device can not start on 32bit Windows2008 SP2)
  - Resolves: bz#618332
    (CPUID_EXT_POPCNT enabled in qemu64 and qemu32 built-in models.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.108.el6
changelog:
  - kvm-Fix-migration-with-spice-enabled.patch [bz#618168]
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#607244]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#607244]
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)
  - Resolves: bz#618168
    (Qemu-kvm in the src host core dump when do migration by using spice)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.109.el6
changelog:
  - kvm-qdev-Reset-hotplugged-devices.patch [bz#607611]
  - kvm-Block-I-O-signals-in-audio-helper-threads.patch [bz#621161]
  - Resolves: bz#607611
    (pci hotplug of e1000, rtl8139 nic device fails for all guests.)
  - Resolves: bz#621161
    (qemu-kvm crashes with I/O Possible message)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.110.el6
changelog:
  - kvm-vhost-Fix-size-of-dirty-log-sync-on-resize.patch [bz#622356]
  - Resolves: bz#622356
    (Live migration failed during reboot due to vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.112.el6
changelog:
  - kvm-qemu-img-rebase-Open-new-backing-file-read-only.patch [bz#624666]
  - Resolves: bz#624666
    (qemu-img re-base broken on RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6
changelog:
  - kvm-disable-guest-provided-stats-on-info-ballon-monitor-.patch [bz#623903]
  - Resolves: bz#623903
    (query-balloon commmand didn't return on pasued guest cause virt-manger hang)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.114.el6
changelog:
  - fix ksmd.init "status" [bz#570467]
  - kvm-virtio-net-Make-tx_timer-timeout-configurable.patch [bz#624767]
  - kvm-virtio-net-Limit-number-of-packets-sent-per-TX-flush.patch [bz#624767]
  - kvm-virtio-net-Rename-tx_timer_active-to-tx_waiting.patch [bz#624767]
  - kvm-virtio-net-Introduce-a-new-bottom-half-packet-TX.patch [bz#624767]
  - kvm-spice-qxl-enable-some-highres-modes.patch [bz#482427]
  - kvm-add-MADV_DONTFORK-to-guest-physical-memory-v2.patch [bz#633699]
  - kvm-virtio-serial-Check-if-virtio-queue-is-ready-before-.patch [bz#596610]
  - kvm-virtio-serial-Assert-for-virtio-queue-ready-before-v.patch [bz#596610]
  - kvm-virtio-serial-Check-if-more-max_ports-specified-than.patch [bz#616703]
  - kvm-virtio-serial-Cleanup-on-device-hot-unplug.patch [bz#624396]
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#635354]
  - kvm-qxl-clear-dirty-rectangle-on-resize.patch [bz#617119]
  - kvm-VGA-Don-t-register-deprecated-VBE-range.patch [bz#625948]
  - kvm-BZ-619168-qemu-should-more-clearly-indicate-internal.patch [bz#619168]
  - kvm-fix-and-on-russian-keymap.patch [bz#639437]
  - Resolves: bz#482427
    (support high resolutions)
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#596610
    ("Guest moved used index from 0 to 61440" if remove virtio serial device before virtserialport)
  - Resolves: bz#616703
    (qemu-kvm core dump with virtio-serial-pci max-port greater than 31)
  - Resolves: bz#617119
    (Qemu becomes unresponsive during unattended_installation)
  - Resolves: bz#619168
    (qemu should more clearly indicate internal detection of this host out-of-memory condition at startup..)
  - Resolves: bz#624396
    (migration failed after hot-unplug virtserialport - Unknown savevm section or instance '0000:00:07.0/virtio-console' 0)
  - Resolves: bz#624767
    (Replace virtio-net TX timer mitigation with bottom half handler)
  - Resolves: bz#625948
    (qemu exits when hot adding rtl8139 nic to win2k8 guest)
  - Resolves: bz#633699
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#635354
    (Can not commit copy-on-write image's data to raw backing-image)
  - Resolves: bz#639437
    (Incorrect russian vnc keymap)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.115.el6
changelog:
  - kvm-spice-qxl-update-modes-ptr-in-post_load.patch [bz#631522]
  - kvm-spice-qxl-make-draw_area-and-vgafb-share-memory.patch [bz#631522]
  - Give a nicer message if retune is called while ksmtuned is off [bz#637976]
  - Resolves: bz#631522
    (spice: prepare qxl for 6.1 update.)
  - Resolves: bz#637976
    (ksmtuned: give a nicer message if retune is called while ksmtuned is off)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.116.el6
changelog:
  - ksmtuned: committed_memory of 0 qemus [bz#609016]
  - kvm-Fix-underflow-error-in-device-assignment-size-check.patch [bz#632054]
  - kvm-check-for-close-errors-on-qcow2_create.patch [bz#641127]
  - Resolves: bz#609016
    (incorrect committed memory on idle host)
  - Resolves: bz#632054
    ([Intel 6.0 Virt] guest bootup fail with intel 82574L NIC assigned)
  - Resolves: bz#641127
    (qemu-img ignores close() errors)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.117.el6
changelog:
  - kvm-savevm-Really-verify-if-a-drive-supports-snapshots.patch [bz#599307]
  - kvm-drop-boot-on-from-help-string.patch [bz#643681]
  - kvm-Fix-parameters-of-prctl.patch [bz#585910]
  - kvm-Ignore-SRAO-MCE-if-another-MCE-is-being-processed.patch [bz#585910]
  - kvm-Add-RAM-physical-addr-mapping-in-MCE-simulation.patch [bz#585910]
  - kvm-Add-savevm-loadvm-support-for-MCE.patch [bz#585910]
  - kvm-Fix-SRAO-SRAR-MCE-injecting-on-guest-without-MCG_SER.patch [bz#585910]
  - Resolves: bz#585910
    ([Intel 6.1 Bug] SRAO MCE in guest kills QEMU-KVM (qemu-kvm component))
  - Resolves: bz#599307
    (info snapshot return "bdrv_snapshot_list: error -95")
  - Resolves: bz#643681
    (Do not advertise boot=on capability to libvirt)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.118.el6
changelog:
  - kvm-net-delay-freeing-peer-host-device.patch [bz#634661]
  - kvm-QMP-Improve-debuggability-of-the-BLOCK_IO_ERROR-even.patch [bz#624607]
  - Resolves: bz#624607
    ([qemu] [rhel6] guest installation stop (pause) on 'eother' event over COW disks (thin-provisioning))
  - Resolves: bz#634661
    ([RHEL6 Snap13]: Hot-unplugging of virtio nic issue in Windows2008 KVM guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.119.el6
changelog:
  - kvm-bz-603413-e1000-secrc-support.patch [bz#603413]
  - kvm-net-properly-handle-illegal-fd-vhostfd-from-command-.patch [bz#581750]
  - kvm-Enable-non-page-boundary-BAR-device-assignment.patch [bz#647307]
  - kvm-Fix-build-failure-with-DEVICE_ASSIGNMENT_DEBUG.patch [bz#647307]
  - kvm-slow_map-minor-improvements-to-ROM-BAR-handling.patch [bz#647307]
  - kvm-device-assignment-Always-use-slow-mapping-for-PCI-op.patch [bz#647307]
  - kvm-e1000-Fix-TCP-checksum-overflow-with-TSO.patch [bz#648333]
  - kvm-device-assignment-Fix-slow-option-ROM-mapping.patch [bz#647307]
  - Resolves: bz#581750
    (Vhost: Segfault when assigning a none vhostfd)
  - Resolves: bz#603413
    (RHEL3.9 guest netdump hung with e1000)
  - Resolves: bz#647307
    (Support slow mapping of PCI Bars)
  - Resolves: bz#648333
    (TCP checksum overflows in qemu's e1000 emulation code when TSO is enabled in guest OS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.120.el6
changelog:
  - kvm-Fix-snapshot-deleting-images-on-disk-change.patch [bz#653582]
  - Resolves: bz#653582
    (Changing media with -snapshot deletes image file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.121.el6
changelog:
  - kvm-monitor-Rename-argument-type-b-to-f.patch [bz#625681]
  - kvm-monitor-New-argument-type-b-bool.patch [bz#625681]
  - kvm-monitor-Use-argument-type-b-for-set_link.patch [bz#625681]
  - kvm-monitor-Convert-do_set_link-to-QObject-QError.patch [bz#625681]
  - Resolves: bz#625681
    (RFE QMP: should have command to disconnect and connect network card for whql testing)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.122.el6
changelog:
  - kvm-cleanup-block-driver-option-handling-in-vl.c.patch [bz#653536]
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#653536]
  - kvm-move-unsafe-to-end-of-caching-modes-in-help.patch [bz#653536]
  - kvm-qemu-img-Eliminate-bdrv_new_open-code-duplication.patch [bz#653536]
  - kvm-qemu-img-Fix-BRDV_O_FLAGS-typo.patch [bz#653536]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#653536]
  - kvm-block-Fix-virtual-media-change-for-if-none.patch [bz#625319]
  - kvm-Check-for-invalid-initrd-file.patch [bz#624721]
  - kvm-qcow-qcow2-implement-bdrv_aio_flush.patch [bz#653972]
  - kvm-block-Remove-unused-s-hd-in-various-drivers.patch [bz#653972]
  - kvm-qcow2-Remove-unnecessary-flush-after-L2-write.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-write_refcount_block_entries.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-update_refcount.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-qcow2_alloc_clusters.patch [bz#653972]
  - kvm-qcow2-Get-rid-of-additional-sync-on-COW.patch [bz#653972]
  - kvm-cutils-qemu_iovec_copy-and-qemu_iovec_memset.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-read-requests.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-write-requests.patch [bz#653972]
  - kvm-kill-empty-index-on-qemu-doc.texi.patch [bz#604992]
  - kvm-add-VMSTATE_BOOL.patch [bz#645342]
  - kvm-Add-Intel-HD-Audio-support-to-qemu.patch [bz#645342]
  - Resolves: bz#604992
    (index is empty in qemu-doc.html)
  - Resolves: bz#624721
    ([qemu] [rhel6] bad error handling when qemu has no 'read' permissions over {kernel,initrd} files [pass boot options])
  - Resolves: bz#625319
    (Failed to update the media in floppy device)
  - Resolves: bz#645342
    (Implement QEMU driver for modern sound device like Intel HDA)
  - Resolves: bz#653536
    (qemu-img convert poor performance)
  - Resolves: bz#653972
    (qcow2: Backport performance related patches)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.123.el6
changelog:
  - kvm-qcow2-Implement-bdrv_truncate-for-growing-images.patch [bz#613893]
  - kvm-qemu-img-Add-resize-command-to-grow-shrink-disk-imag.patch [bz#613893]
  - kvm-qemu-img-Fix-copy-paste-bug-in-documentation.patch [bz#613893]
  - Resolves: bz#613893
    ([RFE] qemu-io enable truncate function for qcow2.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.124.el6
changelog:
  - kvm-Fix-compilation-error-missing-include-statement.patch [bz#608548]
  - kvm-use-qemu_blockalign-consistently.patch [bz#608548]
  - kvm-raw-posix-handle-512-byte-alignment-correctly.patch [bz#608548]
  - kvm-virtio-blk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-scsi-disk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-ide-propagate-the-required-alignment.patch [bz#608548]
  - kvm-Support-marking-a-device-as-non-migratable.patch [bz#635954]
  - kvm-device-assignment-Register-as-un-migratable.patch [bz#635954]
  - Resolves: bz#608548
    (QEMU doesn't respect hardware sector size of underlying block device when doing O_DIRECT)
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.125.el6
changelog:
  - kvm-New-option-fake-machine.patch [bz#658288]
  - spec file code for --enable-fake-machine [bz#658288]
  - Resolves: bz#658288
    (Include (disabled by default) -fake-machine patch on qemu-kvm RPM spec)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.126.el6
changelog:
  - kvm-Fix-build-problem-with-recent-compilers.patch [bz#662633]
  - kvm-vhost-fix-infinite-loop-on-error-path.patch [bz#628634]
  - Resolves: bz#628634
    (vhost_net: untested error handling in vhost_net_start)
  - Resolves: bz#662633
    (Fix build problem with recent compilers)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.127.el6
changelog:
  - kvm-pci-import-Linux-pci_regs.h.patch [bz#624790]
  - kvm-pci-s-PCI_SUBVENDOR_ID-PCI_SUBSYSTEM_VENDOR_ID-g.patch [bz#624790]
  - kvm-pci-use-pci_regs.h.patch [bz#624790]
  - kvm-pci-add-API-to-add-capability-at-a-known-offset.patch [bz#624790]
  - kvm-pci-consolidate-pci_add_capability_at_offset-into-pc.patch [bz#624790]
  - kvm-pci-pci_default_cap_write_config-ignores-wmask.patch [bz#624790]
  - kvm-pci-Remove-pci_enable_capability_support.patch [bz#624790]
  - kvm-device-assignment-Use-PCI-capabilities-support.patch [bz#624790]
  - kvm-pci-Replace-used-bitmap-with-config-byte-map.patch [bz#624790]
  - kvm-pci-Remove-cap.length-cap.start-cap.supported.patch [bz#624790]
  - kvm-device-assignment-Move-PCI-capabilities-to-match-phy.patch [bz#624790]
  - kvm-pci-Remove-capability-specific-handlers.patch [bz#624790]
  - kvm-device-assignment-Make-use-of-config_map.patch [bz#624790]
  - kvm-device-assignment-Fix-off-by-one-in-header-check.patch [bz#624790]
  - kvm-pci-Remove-PCI_CAPABILITY_CONFIG_.patch [bz#624790]
  - kvm-pci-Error-on-PCI-capability-collisions.patch [bz#624790]
  - kvm-device-assignment-Error-checking-when-adding-capabil.patch [bz#624790]
  - kvm-device-assignment-pass-through-and-stub-more-PCI-cap.patch [bz#624790]
  - Resolves: bz#624790
    (pass through fails with KVM using Neterion Inc's X3100 Series 10GbE PCIe I/O Virtualized Server Adapter in Multifunction mode.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.128.el6
changelog:
  - kvm-virtio-invoke-set_status-callback-on-reset.patch [bz#623735]
  - kvm-virtio-net-unify-vhost-net-start-stop.patch [bz#623735]
  - kvm-tap-clear-vhost_net-backend-on-cleanup.patch [bz#623735]
  - kvm-tap-make-set_offload-a-nop-after-netdev-cleanup.patch [bz#623735]
  - Resolves: bz#623735
    (hot unplug of vhost net virtio NIC causes qemu segfault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.129.el6
changelog:
  - kvm-let-management-choose-whether-transparent-huge-pages.patch [bz#628308]
  - kvm-tap-generalize-code-for-different-vnet-header-len.patch [bz#616659]
  - kvm-tap-add-APIs-for-vnet-header-length.patch [bz#616659]
  - kvm-vhost_net-mergeable-buffers-support.patch [bz#616659]
  - kvm-vhost-Fix-address-calculation-in-vhost_dev_sync_regi.patch [bz#623552]
  - Resolves: bz#616659
    (mrg buffers: migration breaks between systems with/without vhost)
  - Resolves: bz#623552
    (SCP image fails from host to guest with vhost on when do migration)
  - Resolves: bz#628308
    ([RFE] let management choose whether transparent huge pages are used)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.130.el6
changelog:
  - kvm-Bug-632257-Duplicate-CPU-fea.tures-in-cpu-x86_64.con.patch [bz#632257]
  - kvm-BZ-647308-Support-Westmere-as-a-CPU-model-or-include.patch [bz#647308]
  - kvm-trace-Add-trace-events-file-for-declaring-trace-even.patch [bz#632722]
  - kvm-trace-Support-disabled-events-in-trace-events.patch [bz#632722]
  - kvm-trace-Add-user-documentation.patch [bz#632722]
  - kvm-trace-Trace-qemu_malloc-and-qemu_vmalloc.patch [bz#632722]
  - kvm-trace-Trace-virtio-blk-multiwrite-and-paio_submit.patch [bz#632722]
  - kvm-trace-Trace-virtqueue-operations.patch [bz#632722]
  - kvm-trace-Trace-port-IO.patch [bz#632722]
  - kvm-trace-Trace-entry-point-of-balloon-request-handler.patch [bz#632722]
  - kvm-trace-fix-a-typo.patch [bz#632722]
  - kvm-trace-fix-a-regex-portability-problem.patch [bz#632722]
  - kvm-trace-avoid-unnecessary-recompilation-if-nothing-cha.patch [bz#632722]
  - kvm-trace-Use-portable-format-strings.patch [bz#632722]
  - kvm-trace-Don-t-strip-lines-containing-arbitrarily.patch [bz#632722]
  - kvm-trace-Trace-bdrv_aio_-readv-writev.patch [bz#632722]
  - kvm-trace-remove-timestamp-files-when-cleaning-up.patch [bz#632722]
  - kvm-trace-Format-strings-must-begin-end-with-double-quot.patch [bz#632722]
  - kvm-apic-convert-debug-printf-statements-to-tracepoints.patch [bz#632722]
  - kvm-Add-a-DTrace-tracing-backend-targetted-for-SystemTAP.patch [bz#632722]
  - kvm-Add-support-for-generating-a-systemtap-tapset-static.patch [bz#632722]
  - kvm-trace-Trace-vm_start-vm_stop.patch [bz#632722]
  - spec file changes to enable trace support [bz#632722]
  - Resolves: bz#632257
    (Duplicate CPU fea.tures in cpu-x86_64.conf)
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)
  - Resolves: bz#647308
    (Support Westmere as a CPU model or included within existing models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.131.el6
changelog:
  - fix spec file to require systemtap, or configure won't enable the systemtap
    tapset
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.132.el6
changelog:
  - kvm-BZ-636494-cpu-check-does-not-correctly-enforce-CPUID.patch [bz#636494]
  - kvm-QDict-Introduce-qdict_get_qdict.patch [bz#647447]
  - kvm-monitor-QMP-Drop-info-hpet-query-hpet.patch [bz#647447]
  - kvm-QMP-Teach-basic-capability-negotiation-to-python-exa.patch [bz#647447]
  - kvm-QMP-Fix-python-helper-wrt-long-return-strings.patch [bz#647447]
  - kvm-QMP-update-query-version-documentation.patch [bz#647447]
  - kvm-Revert-QMP-Remove-leading-whitespace-in-package.patch [bz#647447]
  - kvm-QMP-monitor-update-do_info_version-to-output-broken-.patch [bz#647447]
  - kvm-QMP-Remove-leading-whitespace-in-package-again.patch [bz#647447]
  - kvm-QMP-doc-Add-Stability-Considerations-section.patch [bz#647447]
  - kvm-QMP-Update-README-file.patch [bz#647447]
  - kvm-QMP-Revamp-the-Python-class-example.patch [bz#647447]
  - kvm-QMP-Revamp-the-qmp-shell-script.patch [bz#647447]
  - kvm-QMP-Drop-vm-info-example-script.patch [bz#647447]
  - kvm-qemu-char-Introduce-Memory-driver.patch [bz#647447]
  - kvm-QMP-Introduce-Human-Monitor-passthrough-command.patch [bz#647447]
  - kvm-QMP-qmp-shell-Introduce-HMP-mode.patch [bz#647447]
  - kvm-PCI-Export-pci_map_option_rom.patch [bz#667188]
  - kvm-device-assignment-Allow-PCI-to-manage-the-option-ROM.patch [bz#667188]
  - kvm-virtio-serial-bus-bump-up-control-vq-size-to-32.patch [bz#656198]
  - kvm-Move-stdbool.h.patch [bz#635954]
  - kvm-savevm-Fix-no_migrate.patch [bz#635954]
  - kvm-device-assignment-Properly-terminate-vmsd.fields.patch [bz#635954]
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)
  - Resolves: bz#636494
    (-cpu check  does not correctly enforce CPUID items)
  - Resolves: bz#647447
    (QMP:  provide a hmp_passthrough command to allow execution of non-converted commands)
  - Resolves: bz#656198
    (Can only see 16 virtio ports while assigned 30 virtio serial ports on commandLine)
  - Resolves: bz#667188
    (device-assignment leaks option ROM memory)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.133.el6
changelog:
  - kvm-spice-rip-out-all-the-old-non-upstream-spice-bits.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Use-display-types-for-local-display-only.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-pflib-PixelFormat-conversion-library.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-support-for-generic-notifier-lists.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Rewrite-mouse-handlers-to-use-QTAILQ-and-to-have-an-.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-kbd_mouse_has_absolute.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-notifier-for-mouse-mode-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-sdl-use-mouse-mode-notifier.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-input-make-vnc-use-mouse-mode-notifiers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-make-sure-to-send-pointer-type-change-event-on-S.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vmmouse-adapt-to-mouse-handler-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-wacom-tablet-activate-event-handlers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-cursor-add-cursor-functions.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-use-new-cursor-struct-functions-for-vmware-vga-and-s.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-spice-into-the-configure-file-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-bits-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-keyboard-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-mouse-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-simple-display-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-tablet-support.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-tls-support-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-make-compression-configurable.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-channel-security.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-the-listening-address.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-misc-config-options.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-audio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-copyright-to-spiceaudio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-watching-for-write-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-warning-when-building-with-spice-0.6..patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-display-replace-private-lock-with-qemu-mutex.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qxl-device-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-connection-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qmp-query-spice-and-hmp-info-spice-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Revert-vnc-support-password-expire.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-auth-reject-cleanup.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-support-password-expire-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-spice-add-set_passwd-monitor-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-qdev-Track-runtime-machine-modifications.patch [bz#653591]
  - kvm-rtl8139-Use-subsection-to-restrict-migration-after-h.patch [bz#653591]
  - kvm-add-migration-state-change-notifiers.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-vnc-client-migration.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-vnc-spice-fix-never-and-now-expire_time.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-zap-spice-0.4-migration-compatibility-bits.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-add-chardev-v4.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-qxl-locking-fix.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qmp-events-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-monitor-commands-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - Resolves: bz#615947
    (RFE QMP: support of query spice for guest)
  - Resolves: bz#631832
    (manpage is missing spice options)
  - Resolves: bz#632458
    (Guest may core dump when booting with spice and qxl.)
  - Resolves: bz#634153
    (coredumped when enable qxl without spice)
  - Resolves: bz#642131
    (qemu-kvm aborts of 'qemu_spice_display_create_update: unhandled depth: 0 bits')
  - Resolves: bz#647865
    (support 2560x1440 in qxl)
  - Resolves: bz#653591
    ([RHEL6 Snap13]: Hot-unplugging issue noticed with rtl8139nic after migration of KVM guest.)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.134.el6
changelog:
  - kvm-switch-stdvga-to-pci-vgabios.patch [bz#638468]
  - kvm-switch-vmware_vga-to-pci-vgabios.patch [bz#638468]
  - kvm-add-rhel6.1.0-machine-type.patch [bz#638468]
  - kvm-vgabios-update-handle-compatibility-with-older-qemu-.patch [bz#638468]
  - kvm-qemu-io-Fix-error-messages.patch [bz#672187]
  - kvm-wdt_i6300esb-register-a-reset-function.patch [bz#637180]
  - kvm-Watchdog-disable-watchdog-timer-when-hard-rebooting-.patch [bz#637180]
  - kvm-usb-linux-increase-buffer-for-USB-control-requests.patch [bz#672720]
  - kvm-device-assignment-Cap-number-of-devices-we-can-have-.patch [bz#670787]
  - kvm-clear-vapic-after-reset.patch [bz#669268]
  - kvm-add-support-for-protocol-driver-create_options.patch [bz#637701]
  - kvm-qemu-img-avoid-calling-exit-1-to-release-resources-p.patch [bz#637701]
  - kvm-Use-qemu_mallocz-instead-of-calloc-in-img_convert.patch [bz#637701]
  - kvm-img_convert-Only-try-to-free-bs-entries-if-bs-is-val.patch [bz#637701]
  - kvm-Consolidate-printing-of-block-driver-options.patch [bz#637701]
  - kvm-Fix-formatting-and-missing-braces-in-qemu-img.c.patch [bz#637701]
  - kvm-Fail-if-detecting-an-unknown-option.patch [bz#637701]
  - kvm-Make-error-handling-more-consistent-in-img_create-an.patch [bz#637701]
  - kvm-qemu-img-Deprecate-obsolete-6-and-e-options.patch [bz#637701]
  - kvm-qemu-img-Free-option-parameter-lists-in-img_create.patch [bz#637701]
  - kvm-qemu-img-Fail-creation-if-backing-format-is-invalid.patch [bz#637701]
  - kvm-Introduce-strtosz-library-function-to-convert-a-stri.patch [bz#637701]
  - kvm-Introduce-strtosz_suffix.patch [bz#637701]
  - kvm-qemu-img.c-Clean-up-handling-of-image-size-in-img_cr.patch [bz#637701]
  - kvm-qemu-img.c-Re-factor-img_create.patch [bz#637701]
  - kvm-Introduce-do_snapshot_blkdev-and-monitor-command-to-.patch [bz#637701]
  - kvm-Prevent-creating-an-image-with-the-same-filename-as-.patch [bz#637701]
  - kvm-qemu-option-Fix-uninitialized-value-in-append_option.patch [bz#637701]
  - kvm-bdrv_img_create-use-proper-errno-return-values.patch [bz#637701]
  - kvm-block-Use-backing-format-driver-during-image-creatio.patch [bz#637701]
  - kvm-Make-strtosz-return-int64_t-instead-of-ssize_t.patch [bz#637701]
  - kvm-strtosz-use-unsigned-char-and-switch-to-qemu_isspace.patch [bz#637701]
  - kvm-strtosz-use-qemu_toupper-to-simplify-switch-statemen.patch [bz#637701]
  - kvm-strtosz-Fix-name-confusion-in-use-of-modf.patch [bz#637701]
  - kvm-strtosz-Use-suffix-macros-in-switch-statement.patch [bz#637701]
  - kvm-do_snapshot_blkdev-error-on-missing-snapshot_file-ar.patch [bz#637701]
  - kvm-pci-memory-leak-of-PCIDevice-rom_file.patch [bz#672229]
  - Resolves: bz#637180
    (watchdog timer isn't reset when qemu resets)
  - Resolves: bz#637701
    (RFE - support live snapshot of a subset of disks without RAM)
  - Resolves: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)
  - Resolves: bz#669268
    (WinXP hang when reboot after setup copies files to the installation folders)
  - Resolves: bz#670787
    (Hot plug the 14st VF to guest causes guest shut down)
  - Resolves: bz#672187
    (Improper responsive message when shrinking qcow2 image)
  - Resolves: bz#672229
    (romfile memory leak)
  - Resolves: bz#672720
    (getting 'ctrl buffer too small' error on USB passthrough)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.135.el6
changelog:
  - kvm-Bug-625333-qemu-treatment-of-nodefconfig-and-readcon.patch [bz#625333]
  - kvm-ide-Factor-ide_flush_cache-out.patch [bz#670539]
  - kvm-ide-Handle-flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Respect-werror-option-for-flushes.patch [bz#670539]
  - kvm-block-Allow-bdrv_flush-to-return-errors.patch [bz#670539]
  - kvm-ide-Handle-immediate-bdrv_aio_flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Handle-immediate-flush-failure-properly.patch [bz#670539]
  - kvm-vhost-error-code.patch [bz#633394]
  - kvm-vhost-fix-up-irqfd-support.patch [bz#633394]
  - kvm-virtio-pci-mask-notifier-error-handling-fixups.patch [bz#633394]
  - kvm-test-for-ioeventfd-support-on-old-kernels.patch [bz#633394]
  - kvm-virtio-pci-Rename-bugs-field-to-flags.patch [bz#633394]
  - kvm-virtio-move-vmstate-change-tracking-to-core.patch [bz#633394]
  - kvm-virtio-pci-Use-ioeventfd-for-virtqueue-notify.patch [bz#633394]
  - kvm-ioeventfd-error-handling-cleanup.patch [bz#633394]
  - kvm-remove-redhat-disable-THP.patch [bz#635418]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-qdevfy.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-pci-allow-devices-being-tagge.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-piix-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-vga-tag-as-not-hotplugable-v3.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-qxl-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-expose-no_hotplug-.patch [bz#498774]
  - kvm-char-Split-out-tcp-socket-close-code-in-a-separate-f.patch [bz#621484]
  - kvm-char-mark-socket-closed-if-write-fails-with-EPIPE.patch [bz#621484]
  - Resolves: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#625333
    (qemu treatment of -nodefconfig and -readconfig problematic for debug)
  - Resolves: bz#633394
    ([6.1 FEAT] virtio-blk ioeventfd support)
  - Resolves: bz#635418
    (Allow enable/disable ksm per VM)
  - Resolves: bz#670539
    (Block devices don't implement correct flush error handling)
  - Related: bz#635418
    (Allow enable/disable ksm per VM)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.136.el6
changelog:
  - kvm-Introduce-fw_name-field-to-DeviceInfo-structure.patch [bz#643687]
  - kvm-Introduce-new-BusInfo-callback-get_fw_dev_path.patch [bz#643687]
  - kvm-Keep-track-of-ISA-ports-ISA-device-is-using-in-qdev.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-ISA-bus-in-qdev.patch [bz#643687]
  - kvm-Store-IDE-bus-id-in-IDEBus-structure-for-easy-access.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-IDE-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-system-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-pci-bus.patch [bz#643687]
  - kvm-Record-which-USBDevice-USBPort-belongs-too.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-usb-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-scsi-bus.patch [bz#643687]
  - kvm-Add-bootindex-parameter-to-net-block-fd-device.patch [bz#643687]
  - kvm-Change-fw_cfg_add_file-to-get-full-file-path-as-a-pa.patch [bz#643687]
  - kvm-Add-bootindex-for-option-roms.patch [bz#643687]
  - kvm-Add-notifier-that-will-be-called-when-machine-is-ful.patch [bz#643687]
  - kvm-Pass-boot-device-list-to-firmware.patch [bz#643687]
  - kvm-close-all-the-block-drivers-before-the-qemu-process-.patch [bz#635527]
  - kvm-qemu-img-snapshot-Use-writeback-caching.patch [bz#635527]
  - kvm-qcow2-Add-QcowCache.patch [bz#635527]
  - kvm-qcow2-Use-QcowCache.patch [bz#635527]
  - kvm-qcow2-Batch-flushes-for-COW.patch [bz#635527]
  - Commited 'Remove vhost blacklisting' by hand [bz#665299]
  - kvm-add-bootindex-parameter-to-assigned-device.patch [bz#643687]
  - kvm-tap-safe-sndbuf-default.patch [bz#674539]
  - kvm-do-not-pass-NULL-to-strdup.patch [bz#643687]
  - kvm-Use-Makefile-to-install-qemu-kvm-in-correct-location.patch [bz#672441]
  - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch [bz#667976]
  - kvm-vhost-force-vhost-off-for-non-MSI-guests.patch [bz#674562]
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#643687
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#665299
    (load vhost-net by default)
  - Resolves: bz#667976
    (CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication [rhel-6.1])
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#674539
    (slow guests block other guests on the same lan)
  - Resolves: bz#674562
    (disable vhost-net for rhel5 and older guests)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.137.el6
changelog:
  - kvm-Add-support-for-o-octet-bytes-format-as-monitor-para.patch [bz#515775]
  - kvm-block-add-block_resize-monitor-command.patch [bz#515775]
  - kvm-block-tell-drivers-about-an-image-resize.patch [bz#515775]
  - kvm-virtio-blk-tell-the-guest-about-size-changes.patch [bz#515775]
  - kvm-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-usb-ccid-add-CCID-bus.patch [bz#641833]
  - kvm-introduce-libcacard-vscard_common.h.patch [bz#641833]
  - kvm-ccid-add-passthru-card-device.patch [bz#641833]
  - kvm-libcacard-initial-commit.patch [bz#641833]
  - kvm-ccid-add-ccid-card-emulated-device-v2.patch [bz#641833]
  - kvm-ccid-add-docs.patch [bz#641833]
  - kvm-ccid-configure-fix-enable-disable-flags.patch [bz#641833]
  - Note: smartcard spec patch applied by hand [bz#641833]
  - Resolves: bz#515775
    ([RFE] Include support for online resizing of storage and network block devices)
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.138.el6
changelog:
  - kvm-virtio-console-Factor-out-common-init-between-consol.patch [bz#588916]
  - kvm-virtio-console-Remove-unnecessary-braces.patch [bz#588916]
  - kvm-virtio-serial-Use-a-struct-to-pass-config-informatio.patch [bz#588916]
  - kvm-Fold-send_all-wrapper-unix_write-into-one-function.patch [bz#588916]
  - kvm-char-Add-a-QemuChrHandlers-struct-to-initialise-char.patch [bz#588916]
  - kvm-virtio-serial-move-out-discard-logic-in-a-separate-f.patch [bz#588916]
  - kvm-virtio-serial-Make-sure-virtqueue-is-ready-before-di.patch [bz#588916]
  - kvm-virtio-serial-Don-t-copy-over-guest-buffer-to-host.patch [bz#588916]
  - kvm-virtio-serial-Let-virtio-serial-bus-know-if-all-data.patch [bz#588916]
  - kvm-virtio-serial-Add-support-for-flow-control.patch [bz#588916]
  - kvm-virtio-serial-Add-rhel6.0.0-compat-property-for-flow.patch [bz#588916]
  - kvm-virtio-serial-save-restore-new-fields-in-port-struct.patch [bz#588916]
  - kvm-Convert-io-handlers-to-QLIST.patch [bz#588916]
  - kvm-iohandlers-Add-enable-disable_write_fd_handler-funct.patch [bz#588916]
  - kvm-char-Add-framework-for-a-write-unblocked-callback.patch [bz#588916]
  - kvm-char-Update-send_all-to-handle-nonblocking-chardev-w.patch [bz#588916]
  - kvm-char-Equip-the-unix-tcp-backend-to-handle-nonblockin.patch [bz#588916]
  - kvm-char-Throttle-when-host-connection-is-down.patch [bz#588916 bz#621484]
  - kvm-virtio-console-Enable-port-throttling-when-chardev-i.patch [bz#588916]
  - kvm-Add-spent-time-to-migration.patch [bz#643970]
  - kvm-No-need-to-iterate-if-we-already-are-over-the-limit.patch [bz#643970]
  - kvm-don-t-care-about-TLB-handling.patch [bz#643970]
  - kvm-Only-calculate-expected_time-for-stage-2.patch [bz#643970]
  - kvm-Count-nanoseconds-with-uint64_t-not-doubles.patch [bz#643970]
  - kvm-Exit-loop-if-we-have-been-there-too-long.patch [bz#643970]
  - kvm-Maintaing-number-of-dirty-pages.patch [bz#643970]
  - kvm-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.139.el6
changelog:
  - kvm-Revert-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Related: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.140.el6
changelog:
  - spec file: require new vgabios images (stdvga and vmware) [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.141.el6
changelog:
  - spec file: symlink to stdvga and vmware vgabios images [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.142.el6
changelog:
  - kvm-ide-Remove-redundant-IDEState-member-conf.patch [bz#654682]
  - kvm-ide-Split-ide_init1-off-ide_init2-v2.patch [bz#654682]
  - kvm-ide-Change-ide_init_drive-to-require-valid-dinfo-arg.patch [bz#654682]
  - kvm-ide-Split-non-qdev-code-off-ide_init2.patch [bz#654682]
  - kvm-qdev-Don-t-leak-string-property-value-on-hot-unplug.patch [bz#654682]
  - kvm-blockdev-New-drive_get_by_blockdev-v2.patch [bz#654682]
  - kvm-blockdev-Clean-up-automatic-drive-deletion-v2.patch [bz#654682]
  - kvm-qdev-Decouple-qdev_prop_drive-from-DriveInfo-v2.patch [bz#654682]
  - kvm-block-Catch-attempt-to-attach-multiple-devices-to-a-.patch [bz#654682]
  - kvm-Implement-drive_del-to-decouple-block-removal-from-d.patch [bz#654682]
  - kvm-blockdev-check-dinfo-ptr-before-using-v2.patch [bz#654682]
  - kvm-qcow2-Add-full-image-preallocation-option.patch [bz#634652]
  - kvm-savevm-fix-corruption-in-vmstate_subsection_load.patch [bz#671100]
  - kvm-virtio-serial-Disable-flow-control-for-RHEL-5.0-mach.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#634652
    ([RFE] qemu-img qcow2 'pre-allocation' should not only pre-allocate meta-data, but also data)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)
  - Resolves: bz#671100
    (possible migration failure due to erroneous interpretation of subsection)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.143.el6
changelog:
  - kvm-fix-syntax-error-introduced-by-virtio-serial-Disable.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.144.el6
changelog:
  - kvm-V3-Bug-619259-qemu-cpu-check-enforce-should-work-eve.patch [bz#619259]
  - kvm-Bug-675229-Install-of-cpu-x86_64.conf-bombs-for-an-o.patch [bz#675229]
  - kvm-e1000-multi-buffer-packet-support.patch [bz#602205]
  - Resolves: bz#602205
    (Could not ping guest successfully after changing e1000 MTU)
  - Resolves: bz#619259
    (qemu "-cpu [check | enforce ]" should work even when a model name is not specified on the command line)
  - Resolves: bz#675229
    (Install of cpu-x86_64.conf bombs for an out of tree build..)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.145.el6
changelog:
  - kvm-make-tsc-stable-over-migration-and-machine-start.patch [bz#662386]
  - kvm-qemu-kvm-Close-all-block-drivers-on-quit.patch [bz#635527]
  - kvm-net-notify-peer-about-link-status-change.patch [bz#676015]
  - kvm-vhost-disable-on-tap-link-down.patch [bz#676015]
  - kvm-Add-config-devices.h-again.patch [bz#616187]
  - kvm-Add-CONFIG_VMWARE_VGA-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMMOUSE-option-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMPORT-option-v2.patch [bz#616187]
  - kvm-blockdev-Fix-drive_del-not-to-crash-when-drive-is-no.patch [bz#677222]
  - Resolves: bz#616187
    (vmware device emulation enabled but not supported)
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#662386
    (tsc clock breaks migration result stability)
  - Resolves: bz#676015
    (set_link <tap> off not working with vhost-net)
  - Resolves: bz#677222
    (segment fault happens after hot drive add then drive delete)
  - Related: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.146.el6
changelog:
  - kvm-USB-HID-does-not-support-Set_Idle.patch [bz#665025]
  - kvm-add-event-queueing-to-USB-HID.patch [bz#665025]
  - Spec patch to reenable CONFIG_VMMOUSE and CONFIG_VMPORT [bz#616187 (the original feature-disable bug) bz#677712 bz#677712 (the new broken migration bug)]
  - Resolves: bz#665025
    (lost double clicks on slow connections)
  - Resolves: bz#677712
    (disabling vmware device emulation breaks old->new migration)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.147.el6
changelog:
  - kvm-e1000-clear-EOP-for-multi-buffer-descriptors.patch [bz#678338]
  - kvm-e1000-verify-we-have-buffers-upfront.patch [bz#678338]
  - kvm-tracetool-Add-optional-argument-to-specify-dtrace-pr.patch [bz#672441]
  - kvm-Specify-probe-prefix-to-make-dtrace-probes-use-qemu-.patch [bz#672441]
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#678338
    (e1000 behaving out of spec after increasing MTU)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.148.el6
changelog:
  - kvm-ide-Make-ide_init_drive-return-success.patch [bz#655735]
  - kvm-ide-Reject-readonly-drives-unless-CD-ROM.patch [bz#655735]
  - kvm-ide-Reject-invalid-CHS-geometry.patch [bz#655735]
  - kvm-Move-KVM-and-Xen-global-flags-to-vl.c.patch [bz#662701]
  - kvm-qemu-kvm-Switch-to-upstream-enable-kvm-semantics.patch [bz#662701]
  - Update BuildRequire for newer spice-server [bz#672035]
  - Resolves: bz#655735
    (qemu-kvm (or libvirt?) permission denied errors when exporting readonly IDE disk to guest)
  - Resolves: bz#662701
    (Option -enable-kvm should exit when KVM is unavailable)
  - Related: bz#672035
    (spice-server: rebase to upstream 0.8 for RHEL-6.1)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.149.el6
changelog:
  - kvm-Fix-error-message-in-drive_init.patch [bz#607598]
  - kvm-block-Use-error-codes-from-lower-levels-for-error-me.patch [bz#607598]
  - kvm-device-assignment-Don-t-skip-closing-unmapped-resour.patch [bz#680058]
  - Resolves: bz#607598
    (Incorrect & misleading error reporting when failing to open a drive due to block driver whitelist denial)
  - Resolves: bz#680058
    (can't hotplug second vf successful with message "Too many open files")


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.150.el6
changelog:
  - kvm-Improve-error-handling-in-do_snapshot_blkdev.patch [bz#676529]
  - Resolves: bz#676529
    (core dumped when save snapshot to non-exist disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.151.el6
changelog:
  - kvm-net-Add-the-missing-option-declaration-of-vhostforce.patch [bz#683295]
  - kvm-vhost-fix-dirty-page-handling.patch [bz#684076]
  - kvm-block-qcow2.c-rename-qcow_-functions-to-qcow2_.patch [bz#688119]
  - kvm-Add-proper-errno-error-return-values-to-qcow2_open.patch [bz#688119]
  - kvm-QCOW2-bug-fix-read-base-image-beyond-its-size.patch [bz#688147]
  - kvm-qcow2-Fix-error-handling-for-immediate-backing-file-.patch [bz#688146]
  - kvm-qcow2-Fix-error-handling-for-reading-compressed-clus.patch [bz#688146]
  - kvm-qerror-Add-QERR_UNKNOWN_BLOCK_FORMAT_FEATURE.patch [bz#688119]
  - kvm-qcow2-Report-error-for-version-2.patch [bz#688119]
  - kvm-qcow2-Fix-order-in-L2-table-COW.patch [bz#688146]
  - kvm-pci-assign-Catch-missing-KVM-support.patch [bz#688428]
  - Resolves: bz#683295
    (qemu-kvm: Invalid parameter 'vhostforce')
  - Resolves: bz#684076
    (Segfault occurred during migration)
  - Resolves: bz#688119
    (qcow2: qcow2_open doesn't return useful errors)
  - Resolves: bz#688146
    (qcow2: Some paths fail to handle I/O errors)
  - Resolves: bz#688147
    (qcow2: Reads fail with backing file smaller than snapshot)
  - Resolves: bz#688428
    (qemu-kvm -no-kvm segfaults on pci_add)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.152.el6
changelog:
  - kvm-device-assignment-register-a-reset-function.patch [bz#685147]
  - kvm-device-assignment-Reset-device-on-system-reset.patch [bz#685147]
  - Resolves: bz#685147
    (guest with assigned nic got kernel panic when send system_reset signal in QEMU monitor)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.153.el6
changelog:
  - kvm-Revert-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#678208]
  - kvm-qxl-spice-display-move-pipe-to-ssd.patch [bz#678208]
  - kvm-qxl-implement-get_command-in-vga-mode-without-locks.patch [bz#678208]
  - kvm-qxl-spice-remove-qemu_mutex_-un-lock_iothread-around.patch [bz#678208]
  - kvm-hw-qxl-render-drop-cursor-locks-replace-with-pipe.patch [bz#678208]
  - kvm-spice-qemu-char.c-add-throttling.patch [bz#672191]
  - kvm-spice-qemu-char.c-remove-intermediate-buffer.patch [bz#672191]
  - kvm-spice-qemu-char-Fix-flow-control-in-client-guest-dir.patch [bz#672191]
  - kvm-chardev-Allow-frontends-to-notify-backends-of-guest-.patch [bz#688572]
  - kvm-virtio-console-notify-backend-of-guest-open-close.patch [bz#688572]
  - kvm-spice-chardev-listen-to-frontend-guest-open-close.patch [bz#688572]
  - kvm-Fix-performance-regression-in-qemu_get_ram_ptr.patch [bz#690267]
  - kvm-virtio-pci-fix-bus-master-work-around-on-load.patch [bz#682243]
  - kvm-Use-getaddrinfo-for-migration.patch [bz#680356]
  - kvm-net-socket-allow-ipv6-for-net_socket_listen_init-and.patch [bz#680356]
  - kvm-block-Fix-serial-number-assignment.patch [bz#688058]
  - Resolves: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)
  - Resolves: bz#678208
    (qemu-kvm hangs when installing guest with -spice option)
  - Resolves: bz#680356
    (Live migration failed in ipv6 environment)
  - Resolves: bz#682243
    ([KVM] pci hotplug after migration breaks virtio_net.)
  - Resolves: bz#688058
    (Drive serial number gets truncated)
  - Resolves: bz#688572
    (spice-server does not switch back to server mouse mode if guest spice-agent dies.)
  - Resolves: bz#690267
    (Backport qemu_get_ram_ptr() performance improvement)
  - Related: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.154.el6
changelog:
  - kvm-add-a-service-to-reap-zombies-use-it-in-SLIRP.patch [bz#678524]
  - kvm-Don-t-allow-multiwrites-against-a-block-device-witho.patch [bz#654682]
  - kvm-Do-not-delete-BlockDriverState-when-deleting-the-dri.patch [bz#654682]
  - kvm-virtio-serial-don-t-crash-on-invalid-input.patch [bz#690174]
  - Resolves: bz#678524
    (Exec based migration randomly fails, particularly under high load)
  - Resolves: bz#690174
    (virtio-serial qemu-kvm crash on invalid input in migration)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.155.el6
changelog:
  - kvm-configure-fix-out-of-tree-build-with-enable-spice.patch [bz#641833]
  - kvm-ccid-card-emulated-replace-DEFINE_PROP_ENUM-with-DEF.patch [bz#641833]
  - kvm-Revert-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-Revert-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-Revert-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-ccid-v18_upstream-v25-cleanup.patch [bz#641833]
  - kvm-libcacard-vscard_common.h-upstream-v18-v25-diff.patch [bz#641833]
  - kvm-ccid-card-passthru-upstream-v18-upstream-v25-diff.patch [bz#641833]
  - kvm-qemu-thread-add-qemu_mutex-cond_destroy-and-qemu_mut.patch [bz#641833]
  - kvm-adding-qemu-thread.o-to-obj-y.patch [bz#641833]
  - kvm-ccid-card-emulated-v18-v25.patch [bz#641833]
  - kvm-libcacard-v18-upstream-v25.patch [bz#641833]
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.156.el6
changelog:
  - kvm-Revert-net-socket-allow-ipv6-for-net_socket_listen_i.patch [bz#680356]
  - kvm-Revert-Use-getaddrinfo-for-migration.patch [bz#680356]
  - Related: bz#680356
    (Live migration failed in ipv6 environment)
  - Fixes bz#694196
    (RHEL 6.1 qemu-kvm: Specifying ipv6 addresses breaks migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.157.el6
changelog:
  - kvm-qemu-img-rebase-Fix-read-only-new-backing-file.patch [bz#693741]
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#681777]
  - kvm-block-Do-not-cache-device-size-for-removable-media.patch [bz#687900]
  - kvm-cdrom-Allow-the-TEST_UNIT_READY-command-after-a-cdro.patch [bz#683877]
  - kvm-cdrom-Make-disc-change-event-visible-to-guests.patch [bz#683877]
  - Resolves: bz#681777
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#683877
    (RHEL6 guests fail to update cdrom block size on media change)
  - Resolves: bz#687900
    (qemu host cdrom support not properly updating guests on media changes at physical CD/DVD drives)
  - Resolves: bz#693741
    (qemu-img re-base  fail with read-only new backing file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.158.el6
changelog:
  - kvm-bz-691704-vhost-skip-VGA-memory-regions.patch [bz#691704]
  - kvm-ide-atapi-add-support-for-GET-EVENT-STATUS-NOTIFICAT.patch [bz#558256]
  - kvm-atapi-Allow-GET_EVENT_STATUS_NOTIFICATION-after-medi.patch [bz#558256]
  - kvm-atapi-Move-GET_EVENT_STATUS_NOTIFICATION-command-han.patch [bz#558256]
  - kvm-atapi-GESN-Use-structs-for-commonly-used-field-types.patch [bz#558256]
  - kvm-atapi-GESN-Standardise-event-response-handling-for-f.patch [bz#558256]
  - kvm-atapi-GESN-implement-media-subcommand.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#691704
    (Failed to boot up windows guest with huge memory and cpu and vhost=on within 30 mins)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.159.el6
changelog:
  - kvm-acpi_piix4-Maintain-RHEL6.0-migration.patch [bz#694095]
  - Resolves: bz#694095
    (Migration fails when migrate guest from RHEL6.1 host to RHEL6 host with the same libvirt version)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6
changelog:
  - kvm-virtio-blk-fail-unaligned-requests.patch [bz#698910]
  - kvm-Ignore-pci-unplug-requests-for-unpluggable-devices.patch [bz#699789]
  - Resolves: bz#698910
    (CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests [rhel-6.1])
  - Resolves: bz#699789
    (CVE-2011-1751 acpi_piix4: missing hotplug check during device removal [rhel-6.1])


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.161.el6
changelog:
  - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch [bz#700859]
  - Resolves: bz#700859
    (Fix phys memory client for vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.162.el6
changelog:
  - kvm-virtio-serial-Disallow-generic-ports-at-id-0.patch [bz#700511]
  - kvm-virtio-serial-Don-t-clear-have_data-pointer-after-un.patch [bz#681736]
  - kvm-char-Prevent-multiple-devices-opening-same-chardev.patch [bz#656779]
  - kvm-char-Allow-devices-to-use-a-single-multiplexed-chard.patch [bz#656779]
  - kvm-char-Detect-chardev-release-by-NULL-handlers-as-well.patch [bz#656779]
  - kvm-virtio-console-Keep-chardev-open-for-other-users-aft.patch [bz#700512]
  - kvm-Revert-cdrom-Make-disc-change-event-visible-to-guest.patch [bz#700065]
  - kvm-Revert-cdrom-Allow-the-TEST_UNIT_READY-command-after.patch [bz#700065]
  - kvm-atapi-Add-medium-ready-to-medium-not-ready-transitio.patch [bz#700065]
  - Resolves: bz#656779
    (Core dumped when hot plug/un-plug virtio serial port to the same chardev)
  - Resolves: bz#681736
    (Guest->Host communication stops for other ports after one port is unplugged)
  - Resolves: bz#700065
    (Switch to upstream solution for cdrom patches)
  - Resolves: bz#700511
    (virtio-serial: Disallow generic ports at id 0)
  - Resolves: bz#700512
    (Keep chardev open for later reuse)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.163.el6
changelog:
  - kvm-qemu-img-Initial-progress-printing-support.patch [bz#621482]
  - kvm-Add-dd-style-SIGUSR1-progress-reporting.patch [bz#621482]
  - kvm-Remove-obsolete-enabled-variable-from-progress-state.patch [bz#621482]
  - kvm-qemu-progress.c-printf-isn-t-signal-safe.patch [bz#621482]
  - kvm-qemu-img.c-Remove-superfluous-parenthesis.patch [bz#621482]
  - kvm-Add-documentation-for-qemu_progress_-init-print.patch [bz#621482]
  - kvm-Add-qerror-message-if-the-change-target-filename-can.patch [bz#655719]
  - Resolves: bz#621482
    ([RFE] Be able to get progress from qemu-img)
  - Resolves: bz#655719
    (no error pops when change cd to non-exist file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.164.el6
changelog:
  - kvm-e1000-check-buffer-availability.patch [bz#684127]
  - kvm-Add-error-message-for-loading-snapshot-without-VM-st.patch [bz#680378]
  - kvm-BZ710046-qemu-kvm-prints-warning-Using-CPU-model.patch [bz#710046]
  - Resolves: bz#680378
    (no error message when loading zero size internal snapshot)
  - Resolves: bz#684127
    (e1000:Execute multiple netperf clients caused system call interrupted)
  - Resolves: bz#710046
    (qemu-kvm prints warning "Using CPU model [...]" (with patch))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.165.el6
changelog:
  - kvm-ide-Factor-ide_dma_set_inactive-out.patch [bz#701775]
  - kvm-ide-Set-bus-master-inactive-on-error.patch [bz#701775]
  - kvm-ide-cleanup-warnings.patch [bz#701775]
  - kvm-virtio-correctly-initialize-vm_running.patch [bz#701442]
  - kvm-Add-virtio-disk-identification-support.patch [bz#710349]
  - kvm-spice-add-option-for-disabling-copy-paste-support-rh.patch [bz#693645]
  - Resolves: bz#693645
    (RFE: add spice option to enable/disable copy paste)
  - Resolves: bz#701442
    (vhost-net not enabled on hotplug)
  - Resolves: bz#701775
    (KVM: stdio is flooded)
  - Resolves: bz#710349
    (Backport serial number support for virtio-blk devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.166.el6
changelog:
  - kvm-virtio-guard-against-negative-vq-notifies.patch [bz#707094]
  - kvm-blockdev-Belatedly-remove-MAX_DRIVES.patch [bz#627585]
  - kvm-blockdev-Hide-QEMUMachine-from-drive_init.patch [bz#627585]
  - kvm-qdev-Move-declaration-of-qdev_init_bdrv-into-qdev.h.patch [bz#627585]
  - kvm-blockdev-Collect-block-device-code-in-new-blockdev.c.patch [bz#627585]
  - kvm-Fix-regression-for-drive-file.patch [bz#627585]
  - kvm-block-Move-error-actions-from-DriveInfo-to-BlockDriv.patch [bz#627585]
  - kvm-blockdev-Fix-error-message-for-invalid-drive-CHS.patch [bz#627585]
  - kvm-blockdev-Make-drive_init-use-error_report.patch [bz#627585]
  - kvm-blockdev-Put-BlockInterfaceType-names-and-max_devs-i.patch [bz#627585]
  - kvm-blockdev-Fix-regression-in-drive-if-scsi-index-N.patch [bz#627585]
  - kvm-blockdev-Make-drive_add-take-explicit-type-index-par.patch [bz#627585]
  - kvm-blockdev-Factor-drive_index_to_-bus-unit-_id-out-of-.patch [bz#627585]
  - kvm-blockdev-New-drive_get_by_index.patch [bz#627585]
  - kvm-blockdev-Reject-multiple-definitions-for-the-same-dr.patch [bz#627585]
  - kvm-blockdev-Replace-drive_add-s-fmt-.-by-optstr-paramet.patch [bz#627585]
  - kvm-blockdev-Fix-drive_add-for-drives-without-media.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_uninit.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_init-error-paths.patch [bz#627585]
  - kvm-vhost-fix-double-free-on-device-stop.patch [bz#699635]
  - kvm-QMP-QError-New-QERR_UNSUPPORTED.patch [bz#644919]
  - kvm-QMP-add-inject-nmi-qmp-command.patch [bz#644919]
  - kvm-HMP-Use-QMP-inject-nmi-implementation.patch [bz#644919]
  - Resolves: bz#627585
    (Improve error messages for bad options in -drive and -device)
  - Resolves: bz#644919
    (RFE: QMP command to trigger an NMI in the guest)
  - Resolves: bz#699635
    ([REG][6.1] After executing virsh dump with --live option and the completion, the subsequent virsh dump command to the same domain behaves abnormally)
  - Resolves: bz#707094
    (qemu-kvm: OOB memory access caused by negative vq notifies [rhel-6.2])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.167.el6
changelog:
  - kvm-qemu-img-create-Fix-displayed-default-cluster-size.patch [bz#570830]
  - kvm-Fix-the-RARP-protocol-ID.patch [bz#715141]
  - Resolves: bz#570830
    (The 'cluster_size' shows wrong size to zero when creating a qcow2 without specify the option)
  - Resolves: bz#715141
    (Wrong Ethertype for RARP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.168.el6
changelog:
  - kvm-vnc-fix-numlock-capslock-tracking.patch [bz#599306]
  - kvm-Add-an-isa-device-for-SGA.patch [bz#684949]
  - kvm-pc-add-rhel-6.2-pc-and-make-it-the-default.patch [bz#716906]
  - Resolves: bz#599306
    (Some strange behaviors on key's appearance viewed by using vnc)
  - Resolves: bz#684949
    ([RFE] Ability to display VM BIOS messages on boot)
  - Resolves: bz#716906
    (add 6.2 machine type)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.169.el6
changelog:
  - kvm-rtl8139-cleanup-FCS-calculation.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-extraction.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-insertion.patch [bz#583922]
  - kvm-usb-serial-Fail-instead-of-crash-when-chardev-is-mis.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-exit-notifiers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-usb_del-command.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-exit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Store-devpath-into-USBHostDevice-when-usb_.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_get_configuration-fu.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-active-configuration-from-sysfs-ra.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-data-structs-and-helpers-for-usb-descriptors.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-serial-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-scsi-disk-fix-build-disable-cdrom-emulation.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-enable-usb-storage-scsi-bus-scsi-disk.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-wacom-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bluetooth-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-descriptors-add-settable-strings.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-serial-number-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-network-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_SET_ADDRESS-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_-GET-SET-_CONFIGURATION-handling-to.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-remote-wakeup-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-create-USBPortOps-move-attach-there.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rework-attach-detach-workflow.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_wakeup-wakeup-callback-to-port-ops.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-uhci-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-change-serial-number-to-42.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-speed-mask-to-ports.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-attach-callback.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_desc_attach.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-device-qualifier-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-high-speed-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-fix-status-reporting.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-handle-long-responses.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-mass-storage-fix.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-physical-port-address.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-port-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rewrite-fw-path-fix-numbering.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-zap-pdev-from-usbport.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-USB-keyboard-emulation-key-mapping-error.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-modifiers-should-generate-an-event.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keyboard-add-event-event-queue.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-move-head-n-to-common-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-core-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-use-snprintf.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-bootindex-handling-into-usb-storage-device.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-trivial-spelling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-initialise-data-element-in-Linux-USB_DISCONNECT-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_alt_setting-function.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-alt.-setting-from-sysfs-rather-the.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-s-dprintf-DPRINTF-to-reduce-conflicts.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-usb-packets.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-packets-for-endpoints-which-are-not.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-iso-packets-when-max-packet-size-is.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-We-only-need-to-keep-track-of-15-endpoints.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-out-usb-pack.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-control-buffer-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-switch-to-QTAILQ-cherry-picked-from-commit-ddf6.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-keep-uhci-state-pointer-in-async-packet-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ohci-get-ohci-state-via-container_of.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-musb-get-musb-state-via-container_of-cherry-picked-f.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-complete-callback-to-port-ops-cherry-picked.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-missing-break-statement.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Add-Interface-Association-Descriptor-descriptor-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-update-config-descriptors-to-identify-number-of-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-remove-fallback-to-bNumInterfaces-if-no-.nif.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-support-for-grouped-interfaces-and-the-Inter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Bug-757654-UHCI-fails-to-signal-stall-response-patch.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Pass-the-packet-to-the-device-s-handle_control-c.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-use-usb_generic_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-device-path-aka-physical-port-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-add-hostport-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-track-aurbs-in-list.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-walk-async-urb-list-in-cancel.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-split-large-xfers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-max_packet_size-for-highspeed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-don-t-call-usb_packet_complete-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-packet-owner.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-cancel-callback-to-USBDeviceInfo.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-ehci-adapter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-catch-ENODEV-in-more-places.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-mmio-and-usbsts-usb-ehci-trace-mmio-a.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-state-machine-changes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-port-state.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-improve-mmio-tracing.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-trace-workaround.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-buffer-copy.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-add-queue-data-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-multiqueue-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-offset-writeback-in-ehci_buffer_rw.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-error-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-fix-a-number-of-unused-but-set-variable-warning.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-cancel-async-packets-on-unplug.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-drop-EXECUTING-checks.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Fix-USB-mouse-Set_Protocol-behavior.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-The-USB-tablet-should-not-claim-boot-protocol-suppor.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-itd-handling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-split-trace-calls-to-handle-arg-count-limit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-speed-from-sysfs-rather-then-from-the-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Teach-about-super-speed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-do-perror-when-errno-is-not-set.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Ensure-devep-0.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-try-to-open-the-same-device-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-only-cleanup-in-host_close-when-host_open-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Enlarge-buffer-for-descriptors-to-8192-byt.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Add-knowledge-of-USB_SPEED_SUPER-to-usb_spee.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Don-t-detach-non-attached-devices-on-device-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - Resolves: bz#561414
    (Writes to virtual usb-storage produce I/O errors)
  - Resolves: bz#583922
    (Guests in same vlan could not ping successfully using rtl8139 nic)
  - Resolves: bz#632299
    (higher CPU load observed for virtualization workload on RHEL 6 than on RHEL 5.5)
  - Resolves: bz#645351
    (Add support for USB 2.0 (EHCI) to QEMU)
  - Resolves: bz#711354
    (Fix and enable enough of SCSI to make usb-storage work)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.170.el6
changelog:
  - kvm-raw-posix-Linearize-direct-I-O-on-Linux-NFS.patch [bz#711213]
  - kvm-virtio-console-Prevent-abort-s-in-case-of-host-chard.patch [bz#720535]
  - Resolves: bz#711213
    (QEMU should use pass preadv/pwritev a single vector when using cache=none and NFS)
  - Resolves: bz#720535
    ((virtio serial) Guest aborted when transferring data from guest to host)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.171.el6
changelog:
  - kvm-Add-qemu_ram_alloc_from_ptr-function.patch [bz#696102]
  - kvm-exec-remove-code-duplication-in-qemu_ram_alloc-and-q.patch [bz#696102]
  - kvm-Move-extern-of-mem_prealloc-to-cpu-all.h.patch [bz#696102]
  - kvm-Add-qemu_ram_remap.patch [bz#696102]
  - kvm-s390-Detect-invalid-invocations-of-qemu_ram_free-rem.patch [bz#696102]
  - kvm-MCE-unpoison-memory-address-across-reboot.patch [bz#696102]
  - Resolves: bz#696102
    ([Intel 6.2 FEAT] KVM: un-poison page when guest reboot: QEMU part)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.172.el6
changelog:
  - kvm-ide-Split-error-status-from-status-register.patch [bz#698537]
  - kvm-ide-Fix-ide_drive_pio_state_needed.patch [bz#698537]
  - kvm-ide-Add-forgotten-VMSTATE_END_OF_LIST-in-subsection.patch [bz#698537]
  - kvm-ide-Clear-error_status-after-restarting-flush.patch [bz#698537]
  - kvm-qemu-img-Add-cache-command-line-option.patch [bz#713743]
  - kvm-virtio-serial-bus-use-bh-for-unthrottling.patch [bz#709397]
  - kvm-usb-bluetooth-compile-out.patch [bz#723864]
  - kvm-clarify-support-statement-in-KVM-help.patch [bz#725054]
  - Resolves: bz#698537
  - Resolves: bz#709397
  - Resolves: bz#713743
  - Resolves: bz#723864
  - Resolves: bz#725054


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.173.el6
changelog:
  - kvm-Change-snapshot_blkdev-hmp-to-use-correct-argument-t.patch [bz#676982]
  - kvm-QMP-add-snapshot-blkdev-sync-command.patch [bz#676982]
  - kvm-Add-missing-documentation-for-qemu-img-p.patch [bz#722728]
  - Resolves: bz#676982
    (RFE: no qmp command for live snapshot)
  - Resolves: bz#722728
    (Update qemu-img convert/re-base man page)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.174.el6
changelog:
  - kvm-usb-hid-RHEL-6.1-migration-compatibility.patch [bz#720237]
  - Resolves: bz#720237
    (usb migration compatibility)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.175.el6
changelog:
  - kvm-report-serial-devices-created-with-device-in-the-PII.patch [bz#707130]
  - kvm-device-assignment-handle-device-with-incorrect-PCIe-.patch [bz#720972]
  - Resolves: bz#707130
    (ACPI description of serial and parallel ports incorrect with -chardev/-device)
  - Resolves: bz#720972
    (Unable to attach PCI device on a booted virt guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.176.el6
changelog:
  - kvm-net-Consistently-use-qemu_macaddr_default_if_unset.patch [bz#712046]
  - kvm-virtio-serial-bus-replay-guest_open-on-migration.patch [bz#725965]
  - kvm-qdev-Fix-printout-of-bit-device-properties-with-bit-.patch [bz#727580]
  - Resolves: bz#712046
    (Qemu allocates an existed macaddress to hotpluged nic)
  - Resolves: bz#725965
    (spice client mouse doesn't work after migration)
  - Resolves: bz#727580
    (bit property doesn't print correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.177.el6
changelog:
  - kvm-Revert-hw-qxl-render-drop-cursor-locks-replace-with-.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-spice-remove-qemu_mutex_-un-lock_iothread.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-implement-get_command-in-vga-mode-without.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-spice-display-move-pipe-to-ssd.patch [bz#674583 bz#705070]
  - kvm-spice-don-t-create-updates-in-spice-server-context.patch [bz#674583 bz#705070]
  - kvm-spice-don-t-call-displaystate-callbacks-from-spice-s.patch [bz#674583 bz#705070]
  - kvm-spice-drop-obsolete-iothread-locking.patch [bz#674583 bz#705070]
  - kvm-Make-spice-dummy-functions-inline-to-fix-calls-not-c.patch [bz#674583 bz#705070]
  - kvm-add-qdev_find_by_id.patch [bz#674583 bz#705070]
  - kvm-add-qxl_screendump-monitor-command.patch [bz#674583 bz#705070]
  - Resolves: bz#674583
    (qemu-kvm build fails without --enable-spice)
  - Resolves: bz#705070
    (QMP: screendump command does not allow specification of monitor to capture)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.178.el6
changelog:
  - Require new sgabios package [bz#684949]
  - Resolves: bz#684949
    ([RFE] Ability to display VM BIOS messages on boot)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.179.el6
changelog:
  - kvm-usb-linux-make-iso-urb-count-contigurable.patch [bz#723858 bz#723863]
  - kvm-usb-linux-track-inflight-iso-urb-count.patch [bz#723858 bz#723863]
  - kvm-ehci-add-freq-maxframes-properties.patch [bz#723858 bz#723863]
  - kvm-usb-bus-Don-t-allow-attaching-a-device-to-a-bus-with.patch [bz#723858 bz#723863]
  - kvm-usb-Proper-error-propagation-for-usb_device_attach-e.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-speedmask-to-devices.patch [bz#723858 bz#723863]
  - kvm-usb-linux-allow-compatible-high-speed-devices-to-con.patch [bz#723858 bz#723863]
  - kvm-usb-ignore-USB_DT_DEBUG.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-usb_fill_port-helper-function.patch [bz#723858 bz#723863]
  - kvm-usb-Move-initial-call-of-usb_port_location-to-usb_fi.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-register_companion-USB-bus-op.patch [bz#723858 bz#723863]
  - kvm-usb-Make-port-wakeup-and-complete-ops-take-a-USBPort.patch [bz#723858 bz#723863]
  - kvm-usb-Replace-device_destroy-bus-op-with-a-child_detac.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-drop-unused-num-ports-state-member.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Connect-Status-bit-is-read-only-don-t-allow.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-cleanup-port-reset-handling.patch [bz#723858 bz#723863]
  - kvm-usb-assert-on-calling-usb_attach-port-NULL-on-a-port.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Fix-handling-of-PED-and-PEDC-port-status-bi.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Add-support-for-registering-companion-contr.patch [bz#723858 bz#723863]
  - kvm-usb-uhci-Add-support-for-being-a-companion-controlle.patch [bz#723858 bz#723863]
  - kvm-pci-add-ich9-usb-controller-ids.patch [bz#723858 bz#723863]
  - kvm-uhci-add-ich9-controllers.patch [bz#723858 bz#723863]
  - kvm-ehci-fix-port-count.patch [bz#723858 bz#723863]
  - kvm-ehci-add-ich9-controller.patch [bz#723858 bz#723863]
  - kvm-usb-documentation-update.patch [bz#723858 bz#723863]
  - kvm-usb-fixup-bluetooth-descriptors.patch [bz#723858 bz#723863]
  - kvm-usb-hub-remove-unused-descriptor-arrays.patch [bz#723858 bz#723863]
  - kvm-usb-update-documentation.patch [bz#723858 bz#723863]
  - kvm-usb_register_port-do-not-set-port-opaque-and-port-in.patch [bz#723858 bz#723863]
  - kvm-qxl-fix-cmdlog-for-vga.patch [bz#700134]
  - kvm-qxl-interface_get_command-fix-reported-mode.patch [bz#700134]
  - kvm-spice-add-worker-wrapper-functions.patch [bz#700134]
  - kvm-spice-add-qemu_spice_display_init_common.patch [bz#700134]
  - kvm-spice-qxl-move-worker-wrappers.patch [bz#700134]
  - kvm-qxl-fix-surface-tracking-locking.patch [bz#700134]
  - kvm-qxl-add-io_port_to_string.patch [bz#700134]
  - kvm-qxl-error-handling-fixes-and-cleanups.patch [bz#700134]
  - kvm-qxl-make-qxl_guest_bug-take-variable-arguments.patch [bz#700134]
  - kvm-qxl-put-QXL_IO_UPDATE_IRQ-into-vgamode-whitelist.patch [bz#700134]
  - kvm-qxl-allow-QXL_IO_LOG-also-in-vga.patch [bz#700134]
  - kvm-qxl-only-disallow-specific-io-s-in-vga-mode.patch [bz#700134]
  - kvm-qxl-async-io-support-using-new-spice-api.patch [bz#700134]
  - kvm-qxl-add-QXL_IO_FLUSH_-SURFACES-RELEASE-for-guest-S3-.patch [bz#706711]
  - kvm-qxl-Remove-support-for-the-unused-unstable-device-ID.patch [bz#706711]
  - kvm-qxl-bump-pci-rev.patch [bz#706711]
  - kvm-move-balloon-handling-to-balloon.c.patch [bz#694378]
  - kvm-balloon-Make-functions-local-vars-static.patch [bz#694378]
  - kvm-balloon-Add-braces-around-if-statements.patch [bz#694378]
  - kvm-balloon-Simplify-code-flow.patch [bz#694378]
  - kvm-virtio-balloon-Separate-status-handling-into-separat.patch [bz#694378]
  - kvm-balloon-Separate-out-stat-and-balloon-handling.patch [bz#694378]
  - kvm-balloon-Fix-header-comment-add-Copyright.patch [bz#694378]
  - kvm-virtio-balloon-Fix-header-comment-add-Copyright.patch [bz#694378]
  - kvm-balloon-Don-t-allow-multiple-balloon-handler-registr.patch [bz#725625]
  - kvm-virtio-balloon-Check-if-balloon-registration-failed.patch [bz#725625]
  - kvm-balloon-Reject-negative-balloon-values.patch [bz#694373]
  - kvm-virtio-balloon-Add-exit-handler-fix-memleaks.patch [bz#726014]
  - kvm-virtio-balloon-Unregister-savevm-section-on-device-u.patch [bz#726023]
  - kvm-virtio-blk-Fix-memleak-on-exit.patch [bz#726015]
  - kvm-virtio-net-don-t-use-vdev-after-virtio_cleanup.patch [bz#726020]
  - kvm-virtio-Plug-memleak-by-freeing-vdev.patch [bz#726020]
  - kvm-qemu-img-Use-qemu_blockalign.patch [bz#728905]
  - kvm-Fix-automatically-assigned-network-names-for-netdev.patch [bz#623907]
  - kvm-Fix-netdev-name-lookup-in-device-device_add-netdev_d.patch [bz#623907]
  - kvm-do-not-reset-no_shutdown-after-we-shutdown-the-vm.patch [bz#728464]
  - Resolves: bz#623907
    (device_add rejects valid netdev when NIC with same ID exists)
  - Resolves: bz#694373
    (ballooning value reset to original value after setting a negative number)
  - Resolves: bz#694378
    (Core dump occurs when ballooning memory to 0)
  - Resolves: bz#700134
    ([qemu-kvm] - qxl runs i/o requests synchronously)
  - Resolves: bz#706711
    (qemu-kvm process quits when windows guest doing S3 w/ qxl device)
  - Resolves: bz#723858
    (usb: add companion controller support)
  - Resolves: bz#723863
    (usb: fixes various issues.)
  - Resolves: bz#725625
    (Hot unplug one virtio balloon device cause another balloon device unavailable)
  - Resolves: bz#726014
    (Fix memleak on exit in virtio-balloon)
  - Resolves: bz#726015
    (Fix memleak on exit in virtio-blk)
  - Resolves: bz#726020
    (Fix memleaks in all virtio devices)
  - Resolves: bz#726023
    (Migration after hot-unplug virtio-balloon will not succeed)
  - Resolves: bz#728464
    (QEMU does not honour '-no-shutdown' flag after the first shutdown attempt)
  - Resolves: bz#728905
    (qemu-img: use larger output buffer for cache option "none")


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.180.el6
changelog:
  - kvm-virtio-event-index-support.patch [bz#710943]
  - kvm-pc-rhel-6.1-and-back-compat-event-idx-support.patch [bz#710943]
  - kvm-qdev-implement-qdev_prop_set_bit.patch [bz#729104]
  - kvm-pci-insert-assert-that-auto-assigned-address-functio.patch [bz#729104]
  - kvm-pci-introduce-multifunction-property.patch [bz#729104]
  - kvm-pci_bridge-make-pci-bridge-aware-of-pci-multi-functi.patch [bz#729104]
  - kvm-pci-set-multifunction-property-for-normal-device.patch [bz#729104]
  - kvm-pci-don-t-overwrite-multi-functio-bit-in-pci-header-.patch [bz#729104]
  - kvm-pci-set-PCI-multi-function-bit-appropriately.patch [bz#729104]
  - kvm-Add-user_print-handler-to-qxl_screendump-monitor-com.patch [bz#705070]
  - Resolves: bz#705070
    (QMP: screendump command does not allow specification of monitor to capture)
  - Resolves: bz#710943
    (event index support in virtio and vhost-net)
  - Resolves: bz#729104
    (qemu-kvm: pci needs multifunction property)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.181.el6
changelog:
  - kvm-docs-Add-QED-image-format-specification.patch [bz#633380]
  - kvm-qed-Add-QEMU-Enhanced-Disk-image-format.patch [bz#633380]
  - kvm-qed-Table-L2-cache-and-cluster-functions.patch [bz#633380]
  - kvm-qed-Read-write-support.patch [bz#633380]
  - kvm-qed-Consistency-check-support.patch [bz#633380]
  - kvm-docs-Fix-missing-carets-in-QED-specification.patch [bz#633380]
  - kvm-qed-Refuse-to-create-images-on-block-devices.patch [bz#633380]
  - kvm-qed-Images-with-backing-file-do-not-require-QED_F_NE.patch [bz#633380]
  - kvm-docs-Describe-zero-data-clusters-in-QED-specificatio.patch [bz#633380]
  - kvm-qed-Add-support-for-zero-clusters.patch [bz#633380]
  - kvm-qed-Fix-consistency-check-on-32-bit-hosts.patch [bz#633380]
  - kvm-block-add-BDRV_O_INCOMING-migration-consistency-hint.patch [bz#633380]
  - kvm-qed-honor-BDRV_O_INCOMING-for-live-migration-support.patch [bz#633380]
  - spec file: spec-file-whitelist-QED-image-format [bz#633380]
  - kvm-qemu-tool-Stub-out-qemu-timer-functions.patch [bz#633380]
  - kvm-qed-Periodically-flush-and-clear-need-check-bit.patch [bz#633380]
  - kvm-qed-support-for-growing-images.patch [bz#633380]
  - kvm-usb-ehci-trace-rename-next-to-nxt.patch [bz#720979]
  - kvm-qxl-make-sure-primary-surface-is-saved-on-migration.patch [bz#729869]
  - Resolves: bz#633380
    ([6.2 FEAT] Include QED image format for KVM guests)
  - Resolves: bz#720979
    (do not use next  as a variable name in qemu-kvm systemtap tapset)
  - Resolves: bz#729869
    (qxl: primary surface not saved on migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.182.el6
changelog:
  - kvm-spice-catch-spice-server-initialization-failures.patch [bz#682227]
  - kvm-qcow2-Fix-L1-table-size-after-bdrv_snapshot_goto.patch [bz#729572]
  - spec: require spice-server-devel >= 0.8.2-2 [bz#723676]
  - kvm-Add-missing-trace-call-to-oslib-posix.c-qemu_vmalloc.patch [bz#714773]
  - Resolves: bz#682227
    (qemu-kvm doesn't exit when binding to specified port fails)
  - Resolves: bz#714773
    (qemu missing marker for qemu.kvm.qemu_vmalloc)
  - Related: bz#723676
    (spice-server: update to upstream spice 0.8.2)
  - Resolves: bz#729572
    (qcow2: Loading internal snapshot can corrupt image)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.183.el6
changelog:
  - kvm-spice-add-sanity-check-for-spice-ports.patch [bz#715582 bz#717958]
  - kvm-block-add-discard-support.patch [bz#711354]
  - kvm-qemu-option-New-qemu_opts_reset.patch [bz#711354]
  - kvm-error-New-qemu_opts_loc_restore.patch [bz#711354]
  - kvm-scsi-Rebase-to-upstream-v0.15.0-rc2.patch [bz#711354]
  - kvm-qxl-upon-reset-if-spice-worker-is-stopped-the-comman.patch [bz#728984]
  - kvm-qxl-allowing-the-command-rings-to-be-not-empty-when-.patch [bz#728984]
  - Resolves: bz#711354
    (Fix and enable enough of SCSI to make usb-storage work)
  - Resolves: bz#715582
    (qemu-kvm doesn't report error when supplied negative spice port value)
  - Resolves: bz#717958
    (qemu-kvm start vnc even though -spice ... is supplied)
  - Resolves: bz#728984
    (Target qemu process - assertion failed during migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.184.el6
changelog:
  - kvm-bz719818-KVM-qemu-support-for-SMEP.patch [bz#719818]
  - kvm-vmstate-add-no_migrate-flag-to-VMStateDescription.patch [bz#723870]
  - kvm-ehci-doesn-t-support-migration.patch [bz#723870]
  - kvm-usb-storage-first-migration-support-bits.patch [bz#723870]
  - Resolves: bz#719818
    (KVM qemu support for Supervisor Mode Execution Protection (SMEP))
  - Resolves: bz#723870
    (tag devices without migration support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.185.el6
changelog:
  - kvm-virtio-prevent-indirect-descriptor-buffer-overflow.patch [bz#713593]
  - Resolves: bz#713593
    (CVE-2011-2212 virtqueue: too-large indirect descriptor buffer overflow [rhel-6.2])
  - CVE: CVE-2011-2212


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.186.el6
changelog:
  - kvm-x86-Introduce-kvmclock-device-to-save-restore-it.patch [bz#658467]
  - kvm-use-kernel-provided-para_features-instead-of-statica.patch [bz#624983]
  - kvm-add-kvmclock-to-its-second-bit-v2.patch [bz#624983]
  - kvm-create-kvmclock-when-one-of-the-flags-are-presen.patch [bz#624983]
  - kvm-x86-Allow-multiple-cpu-feature-matches-of-lookup_fea.patch [bz#624983]
  - kvm-vhost-net-cleanup-host-notifiers-at-last-step.patch [bz#695285]
  - kvm-block-include-flush-requests-in-info-blockstats.patch [bz#715017]
  - kvm-block-explicit-I-O-accounting.patch [bz#715017]
  - kvm-block-latency-accounting.patch [bz#715017]
  - kvm-revert-floppy-save-and-restore-DIR-register.patch [bz#718664]
  - kvm-qemu-sockets-avoid-strlen-of-NULL-pointer.patch [bz#734860]
  - Resolves: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Resolves: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)
  - Resolves: bz#695285
    (guest quit with "Guest moved used index from 256 to 915" error when save_vm)
  - Resolves: bz#715017
    (Report disk latency (read and write) for each storage device)
  - Resolves: bz#718664
    (Migration from host RHEL6.1+ to host RHEL6.0.z failed with floppy)
  - Resolves: bz#734860
    (qemu-kvm: segfault when missing host parameter for socket chardev)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.187.el6
changelog:
  - Revert patches that broke the build
  - kvm-Revert-block-latency-accounting.patch [bz#715017]
  - kvm-Revert-block-explicit-I-O-accounting.patch [bz#715017]
  - kvm-Revert-block-include-flush-requests-in-info-blocksta.patch [bz#715017]
  - kvm-Revert-x86-Allow-multiple-cpu-feature-matches-of-loo.patch [bz#624983]
  - kvm-Revert-kvm-create-kvmclock-when-one-of-the-flags-are.patch [bz#624983]
  - kvm-Revert-add-kvmclock-to-its-second-bit-v2.patch [bz#624983]
  - kvm-Revert-use-kernel-provided-para_features-instead-of-.patch [bz#624983]
  - kvm-Revert-kvm-x86-Introduce-kvmclock-device-to-save-res.patch [bz#658467]
  - Related: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Related: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)
  - Related: bz#715017
    (Report disk latency (read and write) for each storage device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.188.el6
changelog:
  - kvm-x86-Introduce-kvmclock-device-to-save-restore-it-fixed.patch [bz#658467]
  - kvm-use-kernel-provided-para_features-instead-of-statica-take2.patch [bz#624983]
  - kvm-add-kvmclock-to-its-second-bit-v2-take2.patch [bz#624983]
  - kvm-create-kvmclock-when-one-of-the-flags-are-present-take2.patch [bz#624983]
  - kvm-x86-Allow-multiple-cpu-feature-matches-of-lookup_fea-take2.patch [bz#624983]
  - Resolves: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Resolves: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.189.el6
changelog:
  - kvm-qemu-img-Require-larger-zero-areas-for-sparse-handli.patch [bz#730587]
  - kvm-qxl-send-interrupt-after-migration-in-case-ram-int_p.patch [bz#732949]
  - kvm-qxl-s-qxl_set_irq-qxl_update_irq.patch [bz#732949]
  - kvm-block-include-flush-requests-in-info-blockstats-v2.patch [bz#715017]
  - kvm-block-explicit-I-O-accounting-v2.patch [bz#715017]
  - kvm-block-latency-accounting-v2.patch [bz#715017]
  - Resolves: bz#715017
    (Report disk latency (read and write) for each storage device)
  - Resolves: bz#730587
    (qemu-img convert takes 25m for specific images when using cache=none)
  - Resolves: bz#732949
    (Guest screen becomes abnormal after migration with spice)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.190.el6
changelog:
  - kvm-Add-flag-to-indicate-external-users-to-block-device.patch [bz#633370]
  - kvm-block-enable-in_use-flag.patch [bz#633370]
  - kvm-block-add-drive-copy-on-read-on-off.patch [bz#633370]
  - kvm-qed-replace-is_write-with-flags-field.patch [bz#633370]
  - kvm-qed-extract-qed_start_allocating_write.patch [bz#633370]
  - kvm-qed-make-qed_aio_write_alloc-reusable.patch [bz#633370]
  - kvm-qed-add-support-for-copy-on-read.patch [bz#633370]
  - kvm-qed-avoid-deadlock-on-emulated-synchronous-I-O.patch [bz#633370]
  - kvm-block-add-bdrv_aio_copy_backing.patch [bz#633370]
  - kvm-qmp-add-block_stream-command.patch [bz#633370]
  - kvm-qmp-add-block_job_cancel-command.patch [bz#633370]
  - kvm-qmp-add-query-block-jobs-command.patch [bz#633370]
  - kvm-qmp-add-block_job_set_speed-command.patch [bz#633370]
  - kvm-block-add-drive-stream-on-off.patch [bz#633370]
  - kvm-qed-intelligent-streaming-implementation.patch [bz#633370]
  - Resolves: bz#633370
    ([6.1 FEAT] Enhance QED image format to support streaming from remote systems)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.191.el6
changelog:
  - kvm-CVE-2011-2527-os-posix-set-groups-properly-for-runas.patch [bz#722583]
  - CVE: CVE-2011-2527
  - Resolves: bz#722583
    (when started as root, extra groups are not dropped correctly)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.192.el6
changelog:
  - kvm-spice-workaround-a-spice-server-bug.patch [bz#697441]
  - kvm-balloon-Disassociate-handlers-from-balloon-device-on.patch [bz#736975]
  - kvm-virtio-balloon-Disassociate-from-the-balloon-handler.patch [bz#736975]
  - kvm-virtio-serial-Plug-memory-leak-on-qdev-exit.patch [bz#738019]
  - kvm-spice-set-qxl-ssd.running-true-before-telling-spice-.patch [bz#733993]
  - kvm-qemu-kvm-vm_stop-pause-threads-before-calling-other-.patch [bz#729621]
  - kvm-Fix-termination-by-signal-with-no-shutdown.patch [bz#738487]
  - kvm-qemu-option-Remove-enable-nesting-from-help-text.patch [bz#738555]
  - Resolves: bz#697441
    (JSON corruption when closing SPICE window)
  - Resolves: bz#729621
    (ASSERT worker->running failed on source qemu during migration with Spice session)
  - Resolves: bz#733993
    (migration target can crash (assert(d->ssd.running)))
  - Resolves: bz#736975
    (Qemu-kvm fails to unregister virtio-balloon-pci device when unplugging)
  - Resolves: bz#738019
    (Memleak in virtio-serial code: VirtIOSerialBus not freed)
  - Resolves: bz#738487
    (Fix termination by signal with -no-shutdown)
  - Resolves: bz#738555
    (Stop exposing -enable-nested)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.193.el6
changelog:
  - kvm-usb-bus-Don-t-allow-speed-mismatch-while-attaching-d.patch [bz#728120]
  - kvm-usb-vmstate-add-parent-dev-path.patch [bz#734995]
  - kvm-usb-claim-port-at-device-initialization-time.patch [bz#734995]
  - kvm-usb-host-tag-as-unmigratable.patch [bz#723870]
  - kvm-usb-storage-fix-NULL-pointer-dereference.patch [bz#733010]
  - kvm-register-signal-handler-after-initializing-SDL.patch [bz#735716]
  - kvm-report-that-QEMU-process-was-killed-by-a-signal.patch [bz#735716]
  - kvm-Tidy-up-message-printed-when-we-exit-on-a-signal.patch [bz#735716]
  - kvm-Monitor-Convert-do_screen_dump-to-QObject.patch [bz#729969]
  - kvm-usb-hub-need-to-check-dev-attached.patch [bz#734995]
  - kvm-usb-fix-port-reset.patch [bz#734995]
  - kvm-qdev-print-bus-properties-too.patch [bz#678731]
  - kvm-ide-link-BMDMA-and-IDEState-at-device-creation.patch [bz#739480]
  - Resolves: bz#678731
    (Update qemu-kvm -device pci-assign,?  properties)
  - Resolves: bz#723870
    (tag devices without migration support)
  - Resolves: bz#728120
    (print error on usb speed mismatch between device and bus/port)
  - Resolves: bz#729969
    (Make screendump command available in QMP)
  - Resolves: bz#733010
    (core dump when issue fdisk -l in guest which has two usb-storage attached)
  - Resolves: bz#734995
    (Core dump when hotplug three usb-hub into the same port under both uhci and ehci)
  - Resolves: bz#735716
    (QEMU should report the PID of the process that sent it signals for troubleshooting purposes)
  - Resolves: bz#739480
    (qemu-kvm core dumps when migration with reboot)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.194.el6
changelog:
  - kvm-spice-turn-client_migrate_info-to-async.patch [bz#737921]
  - kvm-spice-support-the-new-migration-interface-spice-0.8..patch [bz#737921]
  - kvm-pci-devfn-check-device-slot-number-in-range.patch [bz#678729]
  - Resolves: bz#678729
    (Hotplug VF/PF with invalid addr value leading to qemu-kvm process quit with core dump)
  - Resolves: bz#737921
    (No Spice password is set on target host after migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.195.el6
changelog:
  - Require spice-server-devel >= 0.8.2-4 [bz#737921]
  - Resolves: bz#737921
    (No Spice password is set on target host after migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.196.el6
changelog:
  - kvm-usb-linux-add-get_endp.patch [bz#733272]
  - kvm-usb-host-reapurb-error-report-fix.patch [bz#733272]
  - kvm-usb-host-fix-halted-endpoints.patch [bz#733272]
  - kvm-usb-host-limit-open-retries.patch [bz#733272]
  - kvm-usb-host-fix-configuration-tracking.patch [bz#733272]
  - kvm-usb-host-claim-port.patch [bz#733272]
  - kvm-usb-host-endpoint-table-fixup.patch [bz#733272]
  - kvm-usb-host-factor-out-code.patch [bz#733272]
  - kvm-usb-host-handle-USBDEVFS_SETCONFIGURATION-returning-.patch [bz#733272]
  - Resolves: bz#733272
    (Usb stick passthrough failed under uhci+ehci)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.197.el6
changelog:
  - kvm-device-assignment-pci_cap_init-add-82599-VF-quirk.patch [bz#742080]
  - kvm-savevm-teach-qemu_fill_buffer-to-do-partial-refills.patch [bz#725565]
  - kvm-savevm-some-coding-style-cleanups.patch [bz#725565]
  - kvm-savevm-define-qemu_get_byte-using-qemu_peek_byte.patch [bz#725565]
  - kvm-savevm-improve-subsections-detection-on-load.patch [bz#725565]
  - kvm-Revert-savevm-fix-corruption-in-vmstate_subsection_l.patch [bz#725565]
  - kvm-QMP-HMP-Drop-the-live-snapshot-commands.patch [bz#742401]
  - kvm-usb-hub-wakeup-on-attach.patch [bz#733272]
  - Resolves: bz#725565
    (migration subsections are still broken)
  - Resolves: bz#733272
    (Usb stick passthrough failed under uhci+ehci)
  - Resolves: bz#742080
    (Device assignment of 82599 VFs no longer work after patch for v1 PCIe Capability structures)
  - Resolves: bz#742401
    (qemu-kvm disable live snapshot support)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.198.el6
changelog:
  - kvm-bz716261-kvm-Extend-kvm_arch_get_supported_cpuid-to-.patch [bz#716261]
  - kvm-bz716261-Enable-XSAVE-related-CPUID.patch [bz#716261]
  - kvm-bz716261-Fix-XSAVE-feature-bit-enumeration.patch [bz#716261]
  - kvm-bz716261-Synchronize-kernel-headers.patch [bz#716261]
  - kvm-bz716261-kvm-Enable-XSAVE-live-migration-support.patch [bz#716261]
  - kvm-bz716261-Put-XSAVE-area-in-a-sub-section.patch [bz#716261]
  - kvm-bz716261-Enable-xsave-as-a-cpu-flag.patch [bz#716261]
  - kvm-allow-more-than-1T-in-KVM-x86-guest.patch [bz#743391]
  - kvm-blockdev-Belatedly-remove-driveopts.patch [bz#742458]
  - kvm-ide-Remove-useless-IDEDeviceInfo-members-unit-drive.patch [bz#742458]
  - kvm-block-New-bdrv_next.patch [bz#742458]
  - kvm-block-Decouple-savevm-from-DriveInfo.patch [bz#742458]
  - kvm-savevm-Survive-hot-unplug-of-snapshot-device.patch [bz#743269]
  - kvm-ide-Replace-IDEState-members-is_cdrom-is_cf-by-drive.patch [bz#742458]
  - kvm-ide-split-ide-command-interpretation-off.patch [bz#742458]
  - kvm-ide-fix-whitespace-gap-in-ide_exec_cmd.patch [bz#742458]
  - kvm-trace-Trace-bdrv_set_locked.patch [bz#742458]
  - kvm-atapi-Drives-can-be-locked-without-media-present.patch [bz#742469]
  - kvm-atapi-Report-correct-errors-on-guest-eject-request.patch [bz#742458]
  - kvm-ide-Split-atapi.c-out.patch [bz#742458]
  - kvm-ide-atapi-Factor-commands-out.patch [bz#742458]
  - kvm-ide-atapi-Use-table-instead-of-switch-for-commands.patch [bz#742458]
  - kvm-ide-atapi-Replace-bdrv_get_geometry-calls-by-s-nb_se.patch [bz#742458]
  - kvm-ide-atapi-Introduce-CHECK_READY-flag-for-commands.patch [bz#742458]
  - kvm-atapi-Move-comment-to-proper-place.patch [bz#742458]
  - kvm-atapi-Explain-why-we-need-a-media-not-present-state.patch [bz#742458]
  - kvm-block-QMP-Deprecate-query-block-s-type-drop-info-blo.patch [bz#742458]
  - kvm-blockdev-Make-eject-fail-for-non-removable-drives-ev.patch [bz#742476]
  - kvm-block-Reset-device-model-callbacks-on-detach.patch [bz#742458]
  - kvm-block-raw-win32-Drop-disabled-code-for-removable-hos.patch [bz#742458]
  - kvm-block-Make-BlockDriver-method-bdrv_set_locked-return.patch [bz#742458]
  - kvm-block-Make-BlockDriver-method-bdrv_eject-return-void.patch [bz#742458]
  - kvm-block-Don-t-let-locked-flag-prevent-medium-load.patch [bz#742480]
  - kvm-scsi-disk-Codingstyle-fixes.patch [bz#742458]
  - kvm-scsi-Remove-references-to-SET_WINDOW.patch [bz#742458]
  - kvm-scsi-Remove-REZERO_UNIT-emulation.patch [bz#742458]
  - kvm-scsi-Sanitize-command-definitions.patch [bz#742458]
  - kvm-scsi-disk-Remove-drive_kind.patch [bz#742458]
  - kvm-scsi-disk-no-need-to-call-scsi_req_data-on-a-short-r.patch [bz#742458]
  - kvm-scsi-pass-status-when-completing.patch [bz#742458]
  - kvm-trace-Fix-harmless-mismerge-of-hw-scsi-bus.c-events.patch [bz#742458]
  - kvm-scsi-move-sense-handling-to-generic-code.patch [bz#742458]
  - kvm-block-Attach-non-qdev-devices-as-well.patch [bz#742458]
  - kvm-block-Generalize-change_cb-to-BlockDevOps.patch [bz#742458]
  - kvm-block-Split-change_cb-into-change_media_cb-resize_cb.patch [bz#742458]
  - kvm-ide-Update-command-code-definitions-as-per-ACS-2-Tab.patch [bz#742458]
  - kvm-ide-Clean-up-case-label-indentation-in-ide_exec_cmd.patch [bz#742458]
  - kvm-ide-Give-vmstate-structs-internal-linkage-where-poss.patch [bz#742458]
  - kvm-block-raw-Fix-to-forward-method-bdrv_media_changed.patch [bz#742458]
  - kvm-block-Leave-tracking-media-change-to-device-models.patch [bz#742458]
  - kvm-fdc-Make-media-change-detection-more-robust.patch [bz#742458]
  - kvm-block-Clean-up-bdrv_flush_all.patch [bz#742458]
  - kvm-savevm-Include-writable-devices-with-removable-media.patch [bz#742484]
  - kvm-scsi-fill-in-additional-sense-length-correctly.patch [bz#742458]
  - kvm-ide-Fix-ATA-command-READ-to-set-ATAPI-signature-for-.patch [bz#742458]
  - kvm-ide-Use-a-table-to-declare-which-drive-kinds-accept-.patch [bz#742458]
  - kvm-ide-Reject-ATA-commands-specific-to-drive-kinds.patch [bz#742458]
  - kvm-ide-atapi-Clean-up-misleading-name-in-cmd_start_stop.patch [bz#742458]
  - kvm-ide-atapi-Track-tray-open-close-state.patch [bz#742458]
  - kvm-scsi-disk-Factor-out-scsi_disk_emulate_start_stop.patch [bz#742458]
  - kvm-scsi-disk-Track-tray-open-close-state.patch [bz#742458]
  - kvm-block-Revert-entanglement-of-bdrv_is_inserted-with-t.patch [bz#742458]
  - kvm-block-Drop-tray-status-tracking-no-longer-used.patch [bz#742458]
  - kvm-ide-atapi-Track-tray-locked-state.patch [bz#742458]
  - kvm-scsi-disk-Track-tray-locked-state.patch [bz#742458]
  - kvm-block-Leave-enforcing-tray-lock-to-device-models.patch [bz#742458]
  - kvm-block-Drop-medium-lock-tracking-ask-device-models-in.patch [bz#742458]
  - kvm-block-Rename-bdrv_set_locked-to-bdrv_lock_medium.patch [bz#742458]
  - kvm-ide-atapi-Don-t-fail-eject-when-tray-is-already-open.patch [bz#742458]
  - kvm-scsi-disk-Fix-START_STOP-to-fail-when-it-can-t-eject.patch [bz#742458]
  - kvm-ide-atapi-Preserve-tray-state-on-migration.patch [bz#743342]
  - kvm-block-Clean-up-remaining-users-of-removable.patch [bz#742458]
  - kvm-block-Drop-BlockDriverState-member-removable.patch [bz#742458]
  - kvm-block-Show-whether-the-virtual-tray-is-open-in-info-.patch [bz#723270]
  - kvm-block-New-change_media_cb-parameter-load.patch [bz#742458]
  - kvm-ide-atapi-scsi-disk-Make-monitor-eject-f-then-change.patch [bz#676528]
  - Resolves: bz#676528
    (Can't insert media after previous media was forcefully ejected)
  - Resolves: bz#716261
    ([Intel 6.2 FEAT] Add support for XSAVE/XRSTOR qemu-kvm changes)
  - Resolves: bz#723270
    (Report cdrom tray status in a monitor command such as info block)
  - Resolves: bz#742458
    (Tracker Bug:Big block layer backport)
  - Resolves: bz#742469
    (Drives can not be locked without media present)
  - Resolves: bz#742476
    (Make eject fail for non-removable drives even with -f)
  - Resolves: bz#742480
    (Don't let locked flag prevent medium load)
  - Resolves: bz#742484
    (should be also have  snapshot on floppy)
  - Resolves: bz#743269
    (Hot unplug of snapshot device crashes)
  - Resolves: bz#743342
    (IDE CD-ROM tray state gets lost on migration)
  - Resolves: bz#743391
    (KVM guest limited to 40bit of physical address space)


