# changelog

author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-12
changelog:
  - Fix hotplugging of block device-backed usb disks (rhbz#1175668)
  - qemu: Create memory-backend-{ram, file} iff needed (rhbz#1175397)
  - conf: Don't format actual network definition in migratable XML (rhbz#1177194)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-13
changelog:
  - conf: Fix memory leak when parsing invalid network XML (rhbz#1180136)
  - qxl: change the default value for vgamem_mb to 16 MiB (rhbz#1181052)
  - qemuxml2argvtest: Fix test after change of qxl vgamem_mb default (rhbz#1181052)
  - conf: fix crash when hotplug a channel chr device with no target (rhbz#1181408)
  - qemu: forbid second blockcommit during active commit (rhbz#1135339)
  - qemu_monitor: introduce new function to get QOM path (rhbz#1180574)
  - qemu_process: detect updated video ram size values from QEMU (rhbz#1180574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-14
changelog:
  - virNetworkDefUpdateIPDHCPHost: Don't crash when updating network (rhbz#1182486)
  - Format CPU features even for host-model (rhbz#1182448)
  - util: Add function virCgroupHasEmptyTasks (rhbz#1161540)
  - util: Add virNumaGetHostNodeset (rhbz#1161540)
  - qemu: Remove unnecessary qemuSetupCgroupPostInit function (rhbz#1161540)
  - qemu: Save numad advice into qemuDomainObjPrivate (rhbz#1161540)
  - qemu: Leave cpuset.mems in parent cgroup alone (rhbz#1161540)
  - qemu: Fix hotplugging cpus with strict memory pinning (rhbz#1161540)
  - util: Fix possible NULL dereference (rhbz#1161540)
  - qemu_driver: fix setting vcpus for offline domain (rhbz#1161540)
  - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs (CVE-2014-8136)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image (CVE-2015-0236)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots (CVE-2015-0236)
  - Check for domain liveness in qemuDomainObjExitMonitor (rhbz#1161024)
  - Mark the domain as active in qemuhotplugtest (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemuDomainHotplugVcpus (rhbz#1161024)
  - Fix vmdef usage while in monitor in BlockStat* APIs (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemu process (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device detach (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device attach (rhbz#1161024)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16
changelog:
  - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)
  - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.13-1
changelog:
  - Rebased to libvirt-1.2.13 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#872028, rhbz#907779, rhbz#927252, rhbz#956891, rhbz#1073506
      rhbz#1079917, rhbz#1095637, rhbz#1123767, rhbz#1125764, rhbz#1126762
      rhbz#1130390, rhbz#1131919, rhbz#1132900, rhbz#1135442, rhbz#1138125
      rhbz#1138516, rhbz#1138539, rhbz#1140034, rhbz#1140960, rhbz#1141159
      rhbz#1143921, rhbz#1146334, rhbz#1147195, rhbz#1151942, rhbz#1152404
      rhbz#1152473, rhbz#1153891, rhbz#1155843, rhbz#1158034, rhbz#1158722
      rhbz#1159180, rhbz#1160559, rhbz#1160995, rhbz#1161831, rhbz#1164627
      rhbz#1165485, rhbz#1165993, rhbz#1168849, rhbz#1169183, rhbz#1170092
      rhbz#1170140, rhbz#1170492, rhbz#1171533, rhbz#1171582, rhbz#1172015
      rhbz#1172468, rhbz#1172526, rhbz#1173420, rhbz#1174096, rhbz#1174154
      rhbz#1174569, rhbz#1175123, rhbz#1175449, rhbz#1176503, rhbz#1176510
      rhbz#1177723, rhbz#1178652, rhbz#1178850, rhbz#1178853, rhbz#1178986
      rhbz#1179678, rhbz#1179684, rhbz#1179981, rhbz#1181182, rhbz#1182467
      rhbz#1183869, rhbz#1183890, rhbz#1185165, rhbz#1186175, rhbz#1186199
      rhbz#1186765, rhbz#1186886, rhbz#1188914, rhbz#1189007, rhbz#1190956
      rhbz#1191016, rhbz#1191227, rhbz#1191355, rhbz#1191567, rhbz#1195461
      rhbz#1196503, rhbz#1196528, rhbz#1204017


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.14-1
changelog:
  - Rebased to libvirt-1.2.14 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#790583, rhbz#853839, rhbz#872424, rhbz#921426, rhbz#952499
      rhbz#958510, rhbz#1070695, rhbz#1125755, rhbz#1127045, rhbz#1129198
      rhbz#1135491, rhbz#1140958, rhbz#1141119, rhbz#1142631, rhbz#1142636
      rhbz#1143832, rhbz#1155887, rhbz#1161461, rhbz#1163553, rhbz#1164053
      rhbz#1166024, rhbz#1171484, rhbz#1173468, rhbz#1174147, rhbz#1176050
      rhbz#1177219, rhbz#1177237, rhbz#1179533, rhbz#1181062, rhbz#1187012
      rhbz#1187533, rhbz#1190590, rhbz#1196185, rhbz#1196644, rhbz#1196934
      rhbz#1197600, rhbz#1199036, rhbz#1199182, rhbz#1206365, rhbz#1206406
      rhbz#1206987, rhbz#1207122, rhbz#1207937
  - RHEL: Hack around changed Broadwell/Haswell CPUs (rhbz#1199446)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.15-1
changelog:
  - Rebased to libvirt-1.2.15 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#858147, rhbz#890606, rhbz#1043436, rhbz#1073305, rhbz#1076708
      rhbz#1084876, rhbz#1147847, rhbz#1161617, rhbz#1165119, rhbz#1168530
      rhbz#1171933, rhbz#1177062, rhbz#1177733, rhbz#1181465, rhbz#1192318
      rhbz#1200634, rhbz#1202606, rhbz#1202704, rhbz#1203628, rhbz#1203931
      rhbz#1206114, rhbz#1206479, rhbz#1206521, rhbz#1206625, rhbz#1207257
      rhbz#1208009, rhbz#1208176, rhbz#1208434, rhbz#1208763, rhbz#1209312
      rhbz#1209394, rhbz#1209813, rhbz#1210159, rhbz#1210545, rhbz#1210650
      rhbz#1210669, rhbz#1211436, rhbz#1211548, rhbz#1211550, rhbz#1213434
      rhbz#1213698, rhbz#1215569, rhbz#1216046


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.15-2
changelog:
  - RHEL: Relax qemu-kvm dependency from libvirt-daemon-kvm (rhbz#1212642)
  - caps: Fix regression defaulting to host arch (rhbz#1219191)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.16-1
changelog:
  - Rebased to libvirt-1.2.16 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#847198, rhbz#890648, rhbz#893738, rhbz#976387, rhbz#981546
      rhbz#998813, rhbz#1066375, rhbz#1073233, rhbz#1073305, rhbz#1076354
      rhbz#1131486, rhbz#1143837, rhbz#1146539, rhbz#1159171, rhbz#1159219
      rhbz#1161541, rhbz#1164966, rhbz#1171984, rhbz#1174177, rhbz#1174226
      rhbz#1176020, rhbz#1176739, rhbz#1177599, rhbz#1181074, rhbz#1183893
      rhbz#1191227, rhbz#1194593, rhbz#1195882, rhbz#1197580, rhbz#1204006
      rhbz#1204033, rhbz#1206521, rhbz#1207043, rhbz#1211938, rhbz#1213345
      rhbz#1218145, rhbz#1218577, rhbz#1220195, rhbz#1220265, rhbz#1220474
      rhbz#1220702, rhbz#1220809, rhbz#1221047, rhbz#1221504, rhbz#1223631
      rhbz#1223688, rhbz#1224018, rhbz#1226849


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-1
changelog:
  - Rebased to libvirt-1.2.17 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#890648, rhbz#985653, rhbz#1021480, rhbz#1089914, rhbz#1131755
      rhbz#1171933, rhbz#1179680, rhbz#1181087, rhbz#1182388, rhbz#1186797
      rhbz#1186969, rhbz#1194593, rhbz#1196644, rhbz#1200206, rhbz#1201143
      rhbz#1201760, rhbz#1202208, rhbz#1207692, rhbz#1210352, rhbz#1220213
      rhbz#1223177, rhbz#1224053, rhbz#1224088, rhbz#1224233, rhbz#1224587
      rhbz#1225694, rhbz#1226234, rhbz#1226854, rhbz#1227180, rhbz#1227551
      rhbz#1227555, rhbz#1227558, rhbz#1227664, rhbz#1228007, rhbz#1229199
      rhbz#1229592, rhbz#1229666, rhbz#1230039, rhbz#1230137, rhbz#1230664
      rhbz#1232606, rhbz#1232880, rhbz#1234686, rhbz#1234729, rhbz#1235116
      rhbz#1236438, rhbz#1236496, rhbz#1236507, rhbz#1236585, rhbz#1236924
      rhbz#1238153, rhbz#1238338


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-2
changelog:
  - util: bitmap: Don't alloc overly large binary bitmaps (rhbz#1238589)
  - storage: Fix regression in storagePoolUpdateAllState (rhbz#1238610)
  - Separate isa-fdc options generation (rhbz#1227880)
  - Explicitly format the isa-fdc controller for newer q35 machines (rhbz#1227880)
  - Add rhel machine types to qemuDomainMachineNeedsFDC (rhbz#1227880)
  - conf: Don't allow duplicated target names regardless of bus (rhbz#1142631)
  - storage: Revert volume obj list updating after volume creation (4749d82a) (rhbz#1241454)
  - qemu_monitor: Wire up MIGRATION event (rhbz#1212077)
  - qemu: Enable migration events on QMP monitor (rhbz#1212077)
  - qemuDomainGetJobStatsInternal: Support migration events (rhbz#1212077)
  - qemu: Update migration state according to MIGRATION event (rhbz#1212077)
  - qemu: Wait for migration events on domain condition (rhbz#1212077)
  - qemu: Check duplicate WWNs also for hotplugged disks (rhbz#1208009)
  - qemu: move the guest status check before agent config and status check (rhbz#1240979)
  - qemu: report error for non-existing disk in blockjobinfo (rhbz#1241355)
  - virCondWaitUntil: add another return value (rhbz#1147471)
  - virDomainObjSignal: drop this function (rhbz#1147471)
  - monitor: detect that eject fails because the tray is locked (rhbz#1147471)
  - qemu_hotplug: try harder to eject media (rhbz#1147471)
  - qemu: Drop LFs at the end of error from QEMU log (rhbz#1090093)
  - Introduce virHashAtomic (rhbz#1090093)
  - Introduce virErrorCopyNew (rhbz#1090093)
  - RHEL: spec: Require perl-XML-XPath (rhbz#1090093)
  - qemu: Remember incoming migration errors (rhbz#1090093)
  - qemu: Don't report false error from MigrateFinish (rhbz#1090093)
  - qemu: Use error from Finish instead of "unexpectedly failed" (rhbz#1090093)
  - cpu: Add support for MPX and AVX512 Intel features (rhbz#1076170)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-3
changelog:
  - qemuProcessHandleMigrationStatus: Update migration status more frequently (rhbz#1212077)
  - qemuDomainSetNumaParamsLive: Check for NUMA mode more wisely (rhbz#1232663)
  - qemu: process: Improve update of maximum balloon state at startup (rhbz#1242940)
  - storage: Fix pool building when directory already exists (rhbz#1244080)
  - virsh: report error if vcpu number exceed the guest maxvcpu number (rhbz#1160559)
  - cmdVcpuPin: Remove dead code (rhbz#1160559)
  - rpc: Add virNetDaemonHasClients (rhbz#1240283)
  - rpc: Rework timerActive logic in daemon (rhbz#1240283)
  - cgroup: Drop resource partition from virSystemdMakeScopeName (rhbz#1238570)
  - virsh: blockjob: Extract block job info code into a separate function (rhbz#1227551)
  - virsh: cmdBlockJob: Switch to declarative flag interlocking (rhbz#1227551)
  - virsh: blockjob: Split out vshBlockJobSetSpeed from blockJobImpl (rhbz#1227551)
  - virsh: block job: separate abort from blockJobImpl (rhbz#1227551)
  - virsh: Split out block pull implementation from blockJobImpl (rhbz#1227551)
  - virsh: Kill blockJobImpl by moving the final impl into cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor argument checking in cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor argument handling in cmdBlockCopy (rhbz#1227551)
  - virsh: Refactor argument handling in cmdBlockPull (rhbz#1227551)
  - qemu: Update state of block job to READY only if it actually is ready (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockPull (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockCopy (rhbz#1197592)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-4
changelog:
  - qemu: Reject migration with memory-hotplug if destination doesn't support it (rhbz#1248350)
  - qemu: Properly check for incoming migration job (rhbz#1242904)
  - qemu: Do not reset labels when migration fails (rhbz#1242904)
  - qemu: Check for iotune_max support properly (rhbz#1224053)
  - docs: Add Fibre Channel NPIV supported option for volume lun config (rhbz#1238545)
  - conf: Allow error reporting in virDomainDiskSourceIsBlockType (rhbz#1238545)
  - qemu: Forbid image pre-creation for non-shared storage migration (rhbz#1249587)
  - qemu: remove deadcode in qemuDomain{HelperGetVcpus|GetIOThreadsLive} (rhbz#1213713)
  - nodeinfo: Introduce local linuxGetCPUPresentPath (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUCount (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetPresentCPUBitmap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUBitmap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUMap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetInfo (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeCapsInitNUMA (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetMemoryStats (rhbz#1213713)
  - nodeinfo: fix to parse present cpus rather than possible cpus (rhbz#1213713)
  - tests: Add nodeinfo test for non-present CPUs (rhbz#1213713)
  - nodeinfo: Make sysfs_prefix usage more consistent (rhbz#1213713)
  - nodeinfo: Formatting changes (rhbz#1213713)
  - tests: Restore links in deconfigured-cpus nodeinfo test (rhbz#1213713)
  - nodeinfo: Add nodeGetPresentCPUBitmap() to libvirt_private.syms (rhbz#1213713)
  - nodeinfo: Fix nodeGetCPUBitmap()'s fallback code path (rhbz#1213713)
  - nodeinfo: Introduce linuxGetCPUGlobalPath() (rhbz#1213713)
  - nodeinfo: Introduce linuxGetCPUOnlinePath() (rhbz#1213713)
  - nodeinfo: Rename linuxParseCPUmax() to linuxParseCPUCount() (rhbz#1213713)
  - nodeinfo: Add old kernel compatibility to nodeGetPresentCPUBitmap() (rhbz#1213713)
  - nodeinfo: Remove out parameter from nodeGetCPUBitmap() (rhbz#1213713)
  - nodeinfo: Rename nodeGetCPUBitmap() to nodeGetOnlineCPUBitmap() (rhbz#1213713)
  - nodeinfo: Phase out cpu_set_t usage (rhbz#1213713)
  - nodeinfo: Use nodeGetOnlineCPUBitmap() when parsing node (rhbz#1213713)
  - nodeinfo: Use a bitmap to keep track of node CPUs (rhbz#1213713)
  - nodeinfo: Calculate present and online CPUs only once (rhbz#1213713)
  - nodeinfo: Check for errors when reading core_id (rhbz#1213713)
  - Renamed deconfigured-cpus to allow make dist (rhbz#1213713)
  - tests: Finish rename of the long nodeinfo test case (rhbz#1213713)
  - nodeinfo: Fix output on PPC64 KVM hosts (rhbz#1213713)
  - tests: Prepare for subcore tests (rhbz#1213713)
  - tests: Add subcores1 nodeinfo test (rhbz#1213713)
  - tests: Add subcores2 nodeinfo test (rhbz#1213713)
  - tests: Add subcores3 nodeinfo test (rhbz#1213713)
  - nodeinfo: Fix build failure when KVM headers are not available (rhbz#1213713)
  - qemu: fix some api cannot work when disable cpuset in conf (rhbz#1244664)
  - qemu: Auto assign pci addresses for shared memory devices (rhbz#1165029)
  - conf: Add getter for network routes (rhbz#1094205)
  - network: Add another collision check into networkCheckRouteCollision (rhbz#1094205)
  - docs: Document how libvirt handles companion controllers (rhbz#1069590)
  - qemu: Reject updating unsupported disk information (rhbz#1007228)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-5
changelog:
  - numa_conf: Introduce virDomainNumaGetMaxCPUID (rhbz#1176020)
  - virDomainDefParseXML: Check for malicious cpu ids in <numa/> (rhbz#1176020)
  - conf: more useful error message when pci function is out of range (rhbz#1004596)
  - qemu: Fix reporting of physical capacity for block devices (rhbz#1250982)
  - network: verify proper address family in updates to <host> and <range> (rhbz#1184736)
  - rpc: Remove keepalive_required option (rhbz#1247087)
  - virNetDevBandwidthParseRate: Reject negative values (rhbz#1022292)
  - domain: Fix crash if trying to live update disk <serial> (rhbz#1007228)
  - qemu: fail on attempts to use <filterref> for non-tap network connections (rhbz#1180011)
  - network: validate network NAT range (rhbz#985653)
  - conf: Don't try formating non-existing addresses (rhbz#985653)
  - cpu: Rename {powerpc, ppc} => ppc64 (filesystem) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (exported symbols) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (internal symbols) (rhbz#1250977)
  - cpu: Indentation changes in the ppc64 driver (rhbz#1250977)
  - cpu: Mark driver functions in ppc64 driver (rhbz#1250977)
  - cpu: Simplify NULL handling in ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64ModelFromCPU() (rhbz#1250977)
  - cpu: Reorder functions in the ppc64 driver (rhbz#1250977)
  - cpu: Remove ISA information from CPU map XML (rhbz#1250977)
  - tests: Remove unused file (rhbz#1250977)
  - tests: Improve result handling in cpuTestGuestData() (rhbz#1250977)
  - cpu: Never skip CPU model name check in ppc64 driver (rhbz#1250977)
  - cpu: CPU model names have to match on ppc64 (rhbz#1250977)
  - cpu: Use ppc64Compute() to implement ppc64DriverCompare() (rhbz#1250977)
  - tests: Temporarily disable ppc64 cpu tests (rhbz#1250977)
  - cpu: Align ppc64 CPU data with x86 (rhbz#1250977)
  - cpu: Support multiple PVRs in the ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64 part of CPU map XML (rhbz#1250977)
  - cpu: Parse and use PVR masks in the ppc64 driver (rhbz#1250977)
  - cpu: Add POWER8NVL information to CPU map XML (rhbz#1250977)
  - cpu: Implement backwards compatibility in the ppc64 driver (rhbz#1250977)
  - cpu: Forbid model fallback in the ppc64 driver (rhbz#1250977)
  - tests: Re-enable ppc64 cpu tests (rhbz#1250977)
  - tests: Add a bunch of cpu test case for ppc64 (rhbz#1250977)
  - cpu: Fix segfault in the ppc64 driver (rhbz#1250977)
  - qemu: Fix segfault when parsing private domain data (rhbz#1162947)
  - conf: Pass private data to Parse function of XML options (rhbz#1162947)
  - qemu: Keep numad hint after daemon restart (rhbz#1162947)
  - qemu: Use numad information when getting pin information (rhbz#1162947)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-6
changelog:
  - api: Remove check on iothread_id arg in virDomainPinIOThread (rhbz#1251886)
  - api: Adjust comment for virDomainAddIOThread (rhbz#1251886)
  - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (rhbz#1251886)
  - conf: Check for attach disk usage of iothread=0 (rhbz#1253108)
  - virNetDevBandwidthUpdateRate: turn class_id into integer (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthChangeAllowed (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthUpdate (rhbz#1252473)
  - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (rhbz#1252473)
  - cpu: Don't update host-model guest CPUs on ppc64 (rhbz#1251927)
  - cpu: Better support for ppc64 compatibility modes (rhbz#1251927)
  - cpu: Move check for NULL CPU model inside the driver (rhbz#1251927)
  - tests: Add some compatibility-related cases to the CPU tests (rhbz#1251927)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-7
changelog:
  - Start daemon only after filesystems are mounted (rhbz#1255228)
  - virfile: Add error for root squash change mode failure (rhbz#1253609)
  - virfile: Introduce virFileUnlink (rhbz#1253609)
  - storage: Correct the 'mode' check (rhbz#1253609)
  - storage: Handle failure from refreshVol (rhbz#1253609)
  - util: Add virStringGetFirstWithPrefix (rhbz#1165580)
  - util: Add virCgroupGetBlockDevString (rhbz#1165580)
  - util: Add getters for cgroup block device I/O throttling (rhbz#1165580)
  - lxc: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - qemu: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - Allow vfio hotplug of a device to the domain which owns the iommu (rhbz#1256486)
  - hostdev: skip ACS check when using VFIO for device assignment (rhbz#1256486)
  - docs: Clarify unprivileged sgio feature (rhbz#1072736)
  - qemu: Introduce qemuIsSharedHostdev (rhbz#1072736)
  - qemu: Introduce qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuCheckSharedDisk to create qemuCheckUnprivSGIO (rhbz#1072736)
  - qemu: Inline qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuSetUnprivSGIO return values (rhbz#1072736)
  - qemu: Fix integer/boolean logic in qemuSetUnprivSGIO (rhbz#1072736)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1072736)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1072736)
  - security_selinux: Use proper structure to access socket data (rhbz#1146886)
  - security_dac: Label non-listening sockets (rhbz#1146886)
  - security: Add virSecurityDomainSetDirLabel (rhbz#1146886)
  - security_stack: Add SetDirLabel support (rhbz#1146886)
  - security_selinux: Add SetDirLabel support (rhbz#1146886)
  - security_dac: Add SetDirLabel support (rhbz#1146886)
  - qemu: Fix access to auto-generated socket paths (rhbz#1146886)
  - tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (rhbz#1146886)
  - qemu: Label correct per-VM path when starting (rhbz#1146886)
  - selinux: fix compile errors (rhbz#1146886)
  - conf: Add ioeventfd option for controllers (rhbz#1150484)
  - qemu: Enable ioeventfd usage for virtio-scsi controllers (rhbz#1150484)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-8
changelog:
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1257004)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1257004)
  - cpu: Introduce IvyBridge CPU model (rhbz#1254420)
  - examples: Add example polkit ACL rules (rhbz#1115289)
  - qemu: don't use initialized ret in qemuRemoveSharedDevice (rhbz#1072736)
  - qemu: Introduce qemuDomainMachineIsS390CCW (rhbz#1258361)
  - qemu: Need to check for machine.os when using ADDRESS_TYPE_CCW (rhbz#1258361)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-9
changelog:
  - conf: fix crash when parsing a unordered NUMA <cell/> (rhbz#1260846)
  - vmx: Some whitespace cleanup (rhbz#1172544)
  - vmx: The virVMXParseDisk deviceType can be NULL, add some missing checks (rhbz#1172544)
  - vmx: Add handling for CDROM devices with SCSI passthru (rhbz#1172544)
  - qemu: hotplug: Properly clean up drive backend if frontend hotplug fails (rhbz#1262399)
  - qemu: Introduce QEMU_CAPS_DEVICE_RTL8139 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_E1000 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_VIRTIO_NET (rhbz#1254044)
  - qemu: Try several network devices when looking for a default (rhbz#1254044)
  - qemu: Report error if per-VM directory cannot be created (rhbz#1146886)
  - qemu: Do not allow others into per-VM subdirectories (rhbz#1146886)
  - qemu: Allow others to browse /var/lib/libvirt/qemu (rhbz#1146886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-10
changelog:
  - virSecuritySELinuxSetSecurityAllLabel: drop useless virFileIsSharedFSType (rhbz#1124841)
  - security_selinux: Replace SELinuxSCSICallbackData with proper struct (rhbz#1124841)
  - virSecurityManager: Track if running as privileged (rhbz#1124841)
  - security_selinux: Take @privileged into account (rhbz#1124841)
  - qemu: Fix using guest architecture as lookup key (rhbz#1260753)
  - virfile: Check for existence of dir in virFileDeleteTree (rhbz#1146886)
  - Revert "qemu: Fix integer/boolean logic in qemuSetUnprivSGIO" (rhbz#1072736)
  - qemu: migration: Relax enforcement of memory hotplug support (rhbz#1252685)
  - conf: Add helper to determine whether memory hotplug is enabled for a vm (rhbz#1252685)
  - qemu: Make memory alignment helper more universal (rhbz#1252685)
  - conf: Drop VIR_DOMAIN_DEF_PARSE_CLOCK_ADJUST flag (rhbz#1252685)
  - conf: Document all VIR_DOMAIN_DEF_PARSE_* flags (rhbz#1252685)
  - conf: Add XML parser flag that will allow us to do incompatible updates (rhbz#1252685)
  - conf: Split memory related post parse stuff into separate function (rhbz#1252685)
  - conf: Rename max_balloon to total_memory (rhbz#1252685)
  - conf: Pre-calculate initial memory size instead of always calculating it (rhbz#1252685)
  - conf: Don't always recalculate initial memory size from NUMA size totals (rhbz#1252685)
  - qemu: command: Align memory sizes only on fresh starts (rhbz#1252685)
  - qemu: ppc64: Align memory sizes to 256MiB blocks (rhbz#1249006)
  - test: Add test to validate that memory sizes don't get updated on migration (rhbz#1252685)
  - qemu: Align memory module sizes to 2MiB (rhbz#1252685)
  - qemu: Refresh memory size only on fresh starts (rhbz#1242940)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13
changelog:
  - qemu: Add conditions for qemu-kvm use on ppc64 (rhbz#1267882)
  - qemu: Move simplification variable to begining of the function (rhbz#1266856)
  - qemu: Extract -mem-path building into its own function (rhbz#1266856)
  - qemu: Add -mem-path even with numa (rhbz#1266856)
  - qemu: Use memory-backing-file only when needed (rhbz#1266856)
  - qemu: Always update migration times on destination (rhbz#1265902)
  - qemu: Copy completed migration stats only on success (rhbz#1265902)
  - qemu: Introduce flags in qemuMigrationCompleted (rhbz#1265902)
  - qemu: Make updating stats in qemuMigrationCheckJobStatus optional (rhbz#1265902)
  - qemu: Wait until destination QEMU consumes all migration data (rhbz#1265902)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.1
changelog:
  - qemu: migration: Properly parse memory hotplug migration flag (rhbz#1280419)
  - qemu: Emit correct audit message for memory hot unplug (rhbz#1280420)
  - qemu: Emit correct audit message for memory hot plug (rhbz#1280420)
  - qemu: Extract logic to determine the mlock limit size for VFIO (rhbz#1280420)
  - qemu: hotplug: Fix mlock limit handling on memory hotplug (rhbz#1280420)
  - qemu: domain: Restructurate control flow in qemuDomainGetMlockLimitBytes (rhbz#1280420)
  - qemu: Explain mlock limit size more in detail (rhbz#1280420)
  - qemu: hotplug: Reject VFIO hotplug if setting RLIMIT_MEMLOCK fails (rhbz#1283924)
  - process: Log when limiting the amount of locked memory (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() in qemuBuildCommandLine() (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() when attaching PCI hostdev (rhbz#1283924)
  - qemu: Add ppc64-specific math to qemuDomainGetMlockLimitBytes() (rhbz#1283924)
  - qemu: Always set locked memory limit for ppc64 domains (rhbz#1283924)


author: Daniel Veillard <veillard@redhat.com> 2.6.27-1
changelog:
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream


author: Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
changelog:
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups


author: Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
changelog:
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.7-1
changelog:
  - Upstream release of 2.7.7
  - fix serious trouble with zlib >= 1.2.4
  - xmllint new option --xpath
  - various HTML parser improvements
  - includes a number of nug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.8-1
changelog:
  - Upstream release of 2.7.8
  - various bug fixes, including potential crashes
  - new non-destructive formatting option
  - date parsing updated to RFC 5646


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-0rc1
changelog:
  - upstream release candidate 1 of 2.9.0
  - introduce a small API change, but ABI compatible, see
    https://mail.gnome.org/archives/xml/2012-August/msg00005.html
    patches for php, gcc/libjava and evolution-data-connector are upstream
    Grab me in cases of problems veillard@redhat.com
  - many bug fixes including security aspects and small improvements


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-1
changelog:
  - upstream release of 2.9.0
  - A few new API entry points
  - More resilient push parser mode
  - A lot of portability improvement
  - Faster XPath evaluation
  - a lot of bug fixes and smaller improvement


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-2
changelog:
  - remaining cleanups from merge bug rhbz#226079
  - do not put the docs in the main package, only in -devel rhbz#864731


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Preston Brown <pbrown@redhat.com> 3.5.6-1
changelog:
  - enable LFS support (debian bug #100810)
  - quote filenames for running compress commands or pre/postrotate cmds (#21348)
  - deprecate "errors" directive (see bug #16544 for explanation)
  - update man page
  - configurable compression command by Colm Buckley <colm@tuatha.org>


author: Preston Brown <pbrown@redhat.com> 3.6-1
changelog:
  - patch from Alexander Kourakos <awk@awks.org> to stop the shared
    postrotate/prerotate scripts from running if none of the log(s) need
    rotating.  All log files are now checked for rotation in one batch,
    rather than sequentially.
  - more fixes from Paul Martin <pm@debian.org>


author: Elliot Lee <sopwith@redhat.com> 3.6.2-1
changelog:
  - Fix bug #55809 (include logrotate.status in "files")
  - Fix bug #58328 (incorrect error detection when reading state file)
  - Allow 'G' size specifier from bug #57242


author: Erik Troan <ewt@redhat.com>
changelog:
  - always use compressext for the extension for compressed
    files; before compresscmd and compressext had to agree
  - moved all compression to one code block
  - compression, scripts don't use system() anymore
  - compress and maillast didn't work together properly
  - delaycompress and mailfirst didn't work properly
  - don't use system() for mailing (or uncompressing) logs anymore
  - use "-s" for speciying the subjected of mailed logs


author: Miloslav Trmac <mitr@redhat.com> - 3.7.1-2
changelog:
  - Fix sending mails (#131583)
  - Preserve file attributes when compressing files (#121523, original patch by
    Daniel Himler)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.4-11
changelog:
  - logrotate won't stop if there are some errors in configuration
    or glob failures (#166510, #182062)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.4-12
changelog:
  - fix problem with compress_options_list (#227706)
  - fix spec file to meet Fedora standards (#226104)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.5-2
changelog:
  - fix error hadnling after prerotate, postrotate, firstaction 
    script failure. (http://qa.mandriva.com/show_bug.cgi?id=29979)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.5-4
changelog:
  - use dateext in the default config file (#240292)
  - add options to use shred for deleting files -- adapt patch sent by
    Peter Eckersley <pde@eff.org> (#239934)
  - ignore .cfsaved files by default (#223476)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.6-1
changelog:
  - new upstream version
  - fix #248565 logrotate never rotates /var/log/btmp
  - fix compile warnings
  - tabooext accepts wildcards (related #247816)
  - fix minor errors and update man page (related #250059)
  - fix handling of size directive (related #247410)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.6-2
changelog:
  - fix #427274 - logrotate fails to preserve SELinux file contexts
  - fix #427661 - SELinux stops vsftpd from working correctly


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-12
changelog:
  - fix #602643 - update manpage to reflect scripts changes
  - fix #606675 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.9-5
changelog:
  - fix #661181 - fixed SIGBUS when config file is empty or 4096 bytes
  - fix #666677 - preserve ACLs when rotating files


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792) 
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer 
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Update to NSS_3_15_1_RTM
  - Apply various fixes to the man pages and add new ones
  - Enable the iquote.patch to access newly introduced types
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Add missing option descriptions for {cert|cms|crl}util
  - Resolves: rhbz#948495 - Man page scan results for nss
  - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Install symlink to nss-sysinit.sh without the .sh suffix
  - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-3.15.2
  - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Add description of the certutil's --email option to it's manpage
  - Resolves: rhbz#Bug 948495 - Man page scan results for nss


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-4
changelog:
  - Enable fips when system is in fips mode
  - Resolves: rhbz#852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-6
changelog:
  - Fix errors in ssl disabling patches for both library and tests
  - Add s390x to the multilib_arches definition used for alt_ckbi
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-7
changelog:
  - Fix bash syntax error in patch for disabling ssl2 tests
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-8
changelog:
  - Fix patch for disabling ssl2 in ssl to correctly set error code
  - Fix syntax error reported in the build.log even tough it succeeds
  - Add patch top ignore setpolicy result 
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
  - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-9
changelog:
  - Fix certutil man page options names to be consistent with help
  - Resolves: rhbz#948495 - man page scan results for nss
  - Remove incorrect count argument in status description in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-10
changelog:
  - Fix path to script and remove -- from some options in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Improve pluggable ECC support for ECDSA
  - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Fix a coverity scan compile time warning for the pem module
  - Resolves: Bug 1002271 - NSS pem module should not require unique base file names


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Move several nss-sysinit manpages tar archives to the %files
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Fix the spec file to apply the nss ecc list patch for bug 752980
  - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
  - Remove no longer needed patches for manpages that were applied upstream
  - Remove no longer needed patch to disable ocsp stapling tests
  - Update iquote.patch on account of upstream changes
  - Update and rename patch to pem/rsawrapr.c on account of upstream changes
  - Use the pristine upstream sources for nss without repackaging
  - Avoid unneeded manual step which may introduce errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Remove spurious man5 wildcard entry as all manpages are listed by name
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-4
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem module fixes verified on RHEL and applied upstream
  - Remove no loger needed pem patches on acccount on this update
  - Add comments documenting the iquote.patch 
  - Resolves: Bug 1054457 - CVE-2013-1740


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Fix libssl and test patches that disable ssl2 support
  - Resolves: Bug 1123435
  - Replace expired PayPal test certificate with current one


author: Elio Maldonado <pbrobinson@redhat.com> 3.16.2-3
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-10
changelog:
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Fix race condition
  - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
  - under the replication replay failure condition


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Reverse the sense of a test in patch to fix pk12util segfault
  - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-4
changelog:
  - Add support for sha384 tls cipher suites
  - Add support for server-side hde key exchange
  - Add support for DSS+SHA256 ciphersuites


author: Kai Engert <kaie@redhat.com> - 3.19.1-5
changelog:
  - Incremental patches to fix SSL/TLS test suite execution,
    fix the earlier SHA384 patch, and inform clients to use SHA384 with
    certificate_verify if required by NSS.


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
  - Fix libssl ssl2/export disabling patch to handle NULL cipher cases
  - Enable additional cipher suites by default


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-12
changelog:
  - Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
  - Enable ECDSA cipher suites by default, a subset of the ones requested


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-13
changelog:
  - Reorder the cipher suites and enable two more by default
  - Fix some of the ssauth sni and ocsp stapling tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-14
changelog:
  - Update the required_softokn_build_version to -14
  - Add references to bugs filed upstream for new patches
  - Merge ocsp stapling and sslauth sni tests patches into one


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-16
changelog:
  - Fix check for public key size of DSA certificates
  - Use size of prime P not the size of dsa.publicValue


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-17
changelog:
  - Change the required_softokn_build_version back to -13
  - Ensure we use nss-softokn-3.16.2.3-13.el7_1


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-19
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289883


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-0.1.rc5
changelog:
  - update to 4.2.6p1-RC5
  - support NTPSERVERARGS variable in dhclient script (#558110)
  - don't use deprecated egrep (#548182)
  - don't verify ntp.conf (#481151)
  - compile with PPS API support
  - include new sntp


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-2
changelog:
  - update ntpstat to use current system variable names (#588067)
  - print synchronization distance instead of dispersion in ntpstat
  - clarify ntpd -q description


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-2
changelog:
  - add support for systemd (#617328)
  - retry few times in ntpdate init script before giving up (#445229)
  - add fourth pool server to default ntp.conf and use iburst


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-5
changelog:
  - remove systemctl dependency for now
  - suppress chkconfig output in %post (#629285)
  - generate ntp_decode(5) man page (#632300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-0.1.rc10
changelog:
  - update to 4.2.6p3-RC10
  - fix system peer unmarking when unreachable
  - fix broadcastdelay option
  - fix automatic broadcast delay calibration
  - fix ntp-keygen -V crash
  - avoid unnecessary timeout in ntpdate
  - drop nano patch
  - convert ChangeLog to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-3
changelog:
  - pull in time-sync.target from ntpdate.service (Lennart Poettering)
  - link with -Wl,-z,relro,-z,now options
  - fix typo in ntpq man page (#664525)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - update service file for systemd-timedated-ntp target (#816495)
  - allow service to set realtime scheduler (#810801)
  - drop comment enabling local driver in default config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-4
changelog:
  - start ntpdate service after nss-lookup.target (#837486)
  - update systemd-timedated integration (#846077)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - fix crash in FIPS mode (#839280)
  - use systemd macros if available (#850235)
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-6
changelog:
  - bind broadcast client to new interfaces (#722690)
  - decode hex encoded passwords in ntpq/ntpdc
  - remove sample MD5 keys from default keys config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - allow selection of cipher for private key files
  - set identity modulus size in ntp-keygen
  - create sntp subpackage
  - add sntp service
  - use system libopts
  - add Wants=ntp-wait.service to ntpd service
  - don't fail when /etc/sysconfig/ntpd is missing
  - modify mlock and multiopts patches to use autogen
  - make perl subpackage noarch


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - avoid rereading /etc/services (#768804)
  - remove ntp-wait dependency from ntpd service (#906753)
  - add missing and remove unrecognized options in documentation
  - update comments in some config files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - workaround failing autogen
  - move files from /lib
  - don't own ntp-units.d directory
  - drop old systemd scriptlets
  - fix dates in changelog


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-13
changelog:
  - ignore duplicate servers from dhclient
  - don't use -Wstrict-overflow with -fno-strict-overflow
  - buildrequire systemd-units
  - remove pie test


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-16
changelog:
  - refresh peers on routing updates (#1048132)
  - fix calculation of root dispersion (#1045377)
  - remove unnecessary IPv6 restrict line from default ntp.conf (#1048255)
  - remove kod from default restrict in ntp.conf (#1048255)
  - update logconfig documentation for patched default (#1048252)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-2 + 0.9.3-4
changelog:
  - keep track of which IndentityFile options were manually supplied and
    which were default options, and don't warn if the latter are missing.
    (mindrot#2084)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-3 + 0.9.3-4
changelog:
  - sshd.service: use KillMode=process (#890376)
  - add latest config.{sub,guess} to support aarch64 (#926284)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-4 + 0.9.3-5
changelog:
  - don't show Success for EAI_SYSTEM (#985964)
  - make sftp's libedit interface marginally multibyte aware (#841771)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010361)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed (#1001566)
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-4 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-8
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-5 + 0.9.3-8
changelog:
  - use tty allocation for a remote scp (#985650)
  - run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set (#969375)
  - FIPS mode - adjust the key echange DH groups and ssh-keygen according toSP800-131A (#1001748)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-7 + 0.9.3-8
changelog:
  - log fipscheck verification message into syslog authpriv
  - ssh-keygen - relative-specified certificate expiry time should be relative
    to current time and not the validity start time (#1058234)
  - use the size of security of 3des for DH (#1053107)
  - ssh-copy-id.1 man page fix (#1058792)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-1 + 0.9.3-9
changelog:
  - new upstream release (#1059667)
  - prevent a server from skipping SSHFP lookup - CVE-2014-2653 (#1081338)
  - make /etc/ssh/moduli file public (#1134448)
  - test existence of /etc/ssh/ssh_host_ecdsa_key in sshd-keygen.service
  - don't clean up gssapi credentials by default (#1134447)
  - ssh-agent - try CLOCK_BOOTTIME with fallback (#1134449)
  - disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6
  - add support for ED25519 keys to sshd-keygen and sshd.sysconfig
  - standardise on NI_MAXHOST for gethostname() string lengths (#1097665)
  - set a client's address right after a connection is set (mindrot#2257) (#912792)
  - apply RFC3454 stringprep to banners when possible (mindrot#2058) (#1104662)
  - don't consider a partial success as a failure (mindrot#2270) (#1112972)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9
changelog:
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)
  - log when a client requests an interactive session and only sftp is allowed (#1130198)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9
changelog:
  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9
changelog:
  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9
changelog:
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-13 + 0.9.3-9
changelog:
  - Increase limit of files for glob match in sftp (#1160377)
  - Add pam_reauthorize.so to /etc/pam.d/sshd (#1204233)
  - Show all config values in sshd test mode (#1187597)
  - Document required selinux boolean for working ssh-ldap-helper (#1178116)
  - Consistent usage of pam_namespace in sshd (#1125110)
  - Fix auditing when using combination of ForcedCommand and PTY (#1199112)
  - Add sftp option to force mode of created files (#1197989)
  - Ability to specify an arbitrary LDAP filter in ldap.conf for ssh-ldap-helper (#1201753)
  - Provide documentation line for systemd service and socket (#1181591)
  - Provide LDIF version of LPK schema (#1184938)
  - Document TERM environment variable (#1162683)
  - Fix ssh-copy-id on non-sh remote shells (#1201758)
  - Do not read RSA1 hostkeys for HostBased authentication in FIPS (#1197666)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-14 + 0.9.3-9
changelog:
  - Fix ldif schema to have correct spacing on newlines (#1184938)
  - Add missing values for sshd test mode (#1187597)
  - ssh-copy-id: tcsh doesnt work with multiline strings (#1201758)
  - Fix memory problems with newkeys and array transfers (#1223218)
  - Enhance AllowGroups documentation in man page (#1150007)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-15 + 0.9.3-9
changelog:
  - One more typo in manual page documenting TERM variable (#1162683)
  - Fix race condition with auditing messages answers (#1240613)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-17 + 0.9.3-9
changelog:
  - Security fixes released with openssh-6.9 (CVE-2015-5352) (#1247864)
   - XSECURITY restrictions bypass under certain conditions in ssh(1) (#1238231)
   - weakness of agent locking (ssh-add -x) to password guessing (#1238238)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-20 + 0.9.3-9
changelog:
  - Fix vulnerabilities published with openssh-7.0 (#1265807)
   - Privilege separation weakness related to PAM support
   - Use-after-free bug related to PAM support


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-23 + 0.9.3-9
changelog:
  - Disable undocumented feauture Roaming for good (#1298218)
  - prevents CVE-2016-0777 and CVE-2016-0778


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-2
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-3
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-3
changelog:
  - add support for VIA Padlock on 64bit arch from upstream (#617539)
  - do not return bogus values from load_certs (#652286)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-6
changelog:
  - add support for newest Intel acceleration improvements backported
    from upstream by Intel in form of a separate engine


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-7
changelog:
  - correct openssl cms help output (#636266)
  - more tolerant starttls detection in XMPP protocol (#608239)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-8
changelog:
  - drop the separate engine for Intel acceleration improvements
    and merge in the AES-NI, SHA1, and RC4 optimizations
  - add support for OPENSSL_DISABLE_AES_NI environment variable
    that disables the AES-NI support


author: Tomas Mraz <tmraz@redhat.com> 1.0.0e-3
changelog:
  - do not use AVX instructions when osxsave bit not set
  - add direct known answer tests for SHA2 algorithms


author: Tomas Mraz <tmraz@redhat.com> 1.0.0g-1
changelog:
  - new upstream release fixing CVE-2012-0050 - DoS regression in
    DTLS support introduced by the previous release (#782795)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.1.beta2
changelog:
  - new upstream release from the 1.0.1 branch, ABI compatible
  - add documentation for the -no_ign_eof option


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.2.beta3
changelog:
  - epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
  - new upstream release from the 1.0.1 branch
  - fix s390x build (#798411)
  - versioning for the SSLeay symbol (#794950)
  - add -DPURIFY to build flags (#797323)
  - filter engine provides
  - split the libraries to a separate -libs package
  - add make to requires on the base package (#783446)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-3
changelog:
  - fix DSA key generation in FIPS mode (#833866)
  - allow duplicate FIPS_mode_set(1)
  - enable build on ppc64 subarch (#834652)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-4
changelog:
  - do not move libcrypto to /lib
  - do not use environment variables if __libc_enable_secure is on
  - fix strict aliasing problems in modes


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-7
changelog:
  - add missing initialization of str in aes_ccm_init_key (#853963)
  - add important patches from upstream CVS
  - use the secure_getenv() with new glibc


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-8
changelog:
  - use 1024 bit DH parameters in s_server as 512 bit is not allowed
    in FIPS mode and it is quite weak anyway


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-11
changelog:
  - add script for renewal of a self-signed cert by Philip Prindeville (#871566)
  - allow X509_issuer_and_serial_hash() produce correct result in
    the FIPS mode (#881336)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-20
changelog:
  - document the nextprotoneg option in manual pages
    original patch by Hubert Kario
  - try to avoid some races when updating the -fips subpackage


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode
  - drop the -fips subpackage, installation of dracut-fips marks that the FIPS
    module is installed
  - avoid dlopening libssl.so from libcrypto
  - fix small memory leak in FIPS aes selftest
  - fix segfault in openssl speed hmac in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-24
changelog:
  - additional changes required for FIPS validation
  - disable verification of certificate, CRL, and OCSP signatures
    using MD5 if OPENSSL_ENABLE_MD5_VERIFY environment variable
    is not set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
  - drop weak ciphers from the default TLS ciphersuite list
  - add back some symbols that were dropped with update to 1.0.1 branch
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-28
changelog:
  - fix CVE-2013-4353 - Invalid TLS handshake crash
  - fix CVE-2013-6450 - possible MiTM attack on DTLS1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
changelog:
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make expiration and key length changeable by DAYS and KEYLEN
    variables in the certificate Makefile (#1058108)
  - change default hash to sha256 (#1062325)
  - lower the actual 3des strength so it is sorted behind aes128 (#1056616)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.3
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - add support for RFC 5649 (#1119738)
  - do not pass the FIPS integrity check if the .hmac files are empty (#1128849)
  - add ECC TLS extensions to DTLS (#1119803)
  - do not send ECC ciphersuites in SSLv2 client hello (#1090955)
  - properly propagate encryption failure in BIO_f_cipher (#1072439)
  - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support
  - improve documentation of ciphersuites - patch by Hubert Kario (#1108026)
  - use case insensitive comparison for servername in s_server (#1081163)
  - add support for automatic ECDH curve selection on server (#1080128)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - use FIPS approved method for computation of d in RSA
  - copy digest algorithm when handling SNI context switch


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42
changelog:
  - test in the non-FIPS RSA keygen for minimal distance of p and q
    similarly to the FIPS RSA keygen


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-44
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-47
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.1
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-5
changelog:
  - %beta implies debug everywhere (also in upgrade part of build)
  - allow `rpmbuild -bi --short-circuit`
  - upgrade: setup previous (RHEL6) version as 8.14.3
  - upgrade: start old postgres with socket file in /var/run/postgresql


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-6
changelog:
  - disable aggressive loop optimizations for old codebase (#993532)
  - upgrade: stop old server in case of permissions problem (#896161)


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-1
changelog:
  - rebase postgresql to 9.2.5 #1019762 
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-2
changelog:
  - Resolves: #1019762 
  - additionally fixes rpmdiff filelist problem with
    /usr/share/doc/postgresql-9.2.5/html/bookindex.html.orig


author: Jozef Mlich <jmlich@redhat.com> - 9.2.6-1
changelog:
  - Resolves #1038688
  - rebase to 9.2.6 see changes at
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.7-1
changelog:
  - update to 9.2.7 per release notes (#1065845)
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.10-1
changelog:
  - update to 9.2.10 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    (rhbz#1198672 rhbz#1198673)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: David Woodhouse <dwmw2@infradead.org> 0.7.0-2
changelog:
  - Proper fix for GCC 4 putting 'blr' or 'ret' in the middle of the function,
    for i386, x86_64 and PPC.


author: David Woodhouse <dwmw2@infradead.org> 0.8.0-3
changelog:
  - Use -mcpu= instead of -mtune= on x86_64 too
  - Disable SPARC targets on x86_64, because dyngen doesn't like fnegs


author: Matthias Saou <http://freshrpms.net/> 0.8.2-1
changelog:
  - Update to 0.8.2 (#200065).
  - Drop upstreamed syscall-macros patch2.
  - Put correct scriplet dependencies.
  - Force install mode for the init script to avoid umask problems.
  - Add %postun condrestart for changes to the init script to be applied if any.
  - Update description with the latest "about" from the web page (more current).
  - Update URL to qemu.org one like the Source.
  - Add which build requirement.
  - Don't include texi files in %doc since we ship them in html.
  - Switch to using gcc34 on devel, FC5 still has gcc32.
  - Add kernheaders patch to fix linux/compiler.h inclusion.
  - Add target-sparc patch to fix compiling on ppc (some int32 to float).


author: Matthias Saou <http://freshrpms.net/> 0.8.2-2
changelog:
  - Remove the target-list iteration for x86_64 since they all build again.
  - Make gcc32 vs. gcc34 conditional on %{fedora} to share the same spec for
    FC5 and FC6.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.0-2
changelog:
  - Fix direct loading of a linux kernel with -kernel & -initrd (bz 234681)
  - Remove spurious execute bits from manpages (bz 222573)


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.0-3.fc8
changelog:
  - Added backport of VNC password auth, and TLS+x509 cert auth
  - Switch to rtl8139 NIC by default for linkstate reporting
  - Fix rtl8139 mmio region mappings with multiple NICs


author: Glauber Costa <glommer@redhat.com> - 1.0-0.1.svn6666
changelog:
  - Updated to tip svn (release 6666). Featuring split packages for qemu.
    Unfortunately, still using binary blobs for the bioses.


author: Glauber Costa <glommer@redhat.com> - 0.10-0.1.kvm20090303git
changelog:
  - Set Epoch to 1
  - Build KVM (basic build, no tools yet)
  - Set ppc in ExcludeArch. This is temporary, just to fix one issue at a time.
    ppc users (IBM ? ;-)) please wait a little bit.


author: Glauber Costa <glommer@redhat.com> - 0.92-0.1.kvm20090303git
changelog:
  - Set Epoch to 2
  - Set version to 0.92. It seems upstream keep changing minds here, so pick the lowest
  - Provides KVM, Obsoletes KVM
  - Only install qemu-kvm in ix86 and x86_64
  - Remove pkgdesc macros, as they were generating bogus output for rpm -qi.
  - fix ppc and ppc64 builds


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.5.kvm20090303git
changelog:
  - kvm.modules were being wrongly mentioned at %install.
  - update description for the x86 system package to include kvm support
  - build kvm's own bios. It is still necessary while kvm uses a slightly different
    irq routing mechanism


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.8.kvm20090310git
changelog:
  - fix Obsolete/Provides pair
  - Use kvm bios from bochs-bios package.
  - Using RPM_OPT_FLAGS in configure
  - Picked back audio-drv-list from kvm package


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.11.kvm20090323git
changelog:
  - Update to snapshot kvm20090323.
  - Removed patch2 (upstream).
  - use upstream's new split package.
  - --with-patched-kernel flag not needed anymore
  - Tell how to get the sources.


author: Glauber Costa <glommer@redhat.com> - 2:0.10-1
changelog:
  - Include debuginfo for qemu-img
  - Do not require qemu-common for qemu-img
  - Explicitly own each of the firmware files
  - remove firmwares for ppc and sparc. They should be provided by an external package.
    Not that the packages exists for sparc in the secondary arch repo as noarch, but they
    don't automatically get into main repos. Unfortunately it's the best we can do right
    now.
  - rollback a bit in time. Snapshot from avi's maint/2.6.30
    - this requires the sasl patches to come back.
    - with-patched-kernel comes back.


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10-5
changelog:
  - Fix vga segfault under kvm-autotest (#494002)
  - Kill kernelrelease hack; it's not needed
  - Build with "make V=1" for more verbose logs


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-1.kvm85
changelog:
  - Update to qemu-kvm-devel-85
  - kvm-85 is based on qemu development branch, currently version 0.10.50
  - Include new qemu-io utility in qemu-img package
  - Re-instate -help string for boot=on to fix virtio booting with libvirt
  - Drop upstreamed patches
  - Fix missing kernel/include/asm symlink in upstream tarball
  - Fix target-arm build
  - Fix build on ppc
  - Disable preadv()/pwritev() until bug #497429 is fixed
  - Kill more .kernelrelease uselessness
  - Make non-kvm qemu build verbose


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-5.kvm86
changelog:
  - Prevent locked cdrom eject - fixes hang at end of anaconda installs (#501412)
  - Avoid harmless 'unhandled wrmsr' warnings (#499712)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-6.kvm86
changelog:
  - Fix 'kernel requires an x86-64 CPU' error
  - BuildRequires ncurses-devel to enable '-curses' option (#504226)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-7.kvm87
changelog:
  - Update to kvm-87
  - Drop upstreamed patches
  - Cherry-pick new ppc build fix from upstream
  - Work around broken linux-user build on ppc
  - Fix hw/pcspk.c build with --disable-kvm
  - Re-enable preadv()/pwritev() since #497429 is long since fixed
  - Kill petalogix-s3adsp1800.dtb, since we don't ship the microblaze target


author: Daniel Berrange <berrange@lettuce.camlab.fab.redhat.com> - 2:0.10.50-10.kvm87
changelog:
  - Add udev rules to make /dev/kvm world accessible & group=kvm (rhbz #497341)
  - Create a kvm group if it doesn't exist (rhbz #346151)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-11.kvm88
changelog:
  - Update to kvm-88, see http://www.linux-kvm.org/page/ChangeLog
  - Package mutiboot.bin
  - Update for how extboot is built
  - Fix sf.net source URL
  - Drop qemu-fix-ppc-softmmu-kvm-disabled-build.patch
  - Drop qemu-fix-pcspk-build-with-kvm-disabled.patch
  - Cherry-pick fix for esound support build failure


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.91-0.1.rc1.rc0
changelog:
  - Update to qemu-kvm-0.11.0-rc1-rc0
  - This is a pre-release of the official -rc1
  - A vista installer regression is blocking the official -rc1 release
  - Drop qemu-prefer-sysfs-for-usb-host-devices.patch
  - Drop qemu-fix-build-for-esd-audio.patch
  - Drop qemu-slirp-Fix-guestfwd-for-incoming-data.patch
  - Add patch to ensure extboot.bin is installed


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.92-1
changelog:
  - Update to qemu-kvm-0.11.0-rc2
  - Drop upstreamed patches
  - extboot install now fixed upstream
  - Re-place TCG init fix (#516543) with the one gone upstream


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-4
changelog:
  - Use rtl8029 PXE rom for ne2k_pci, not ne (#526777)
  - Also, replace the gpxe-roms-qemu pkg requires with file-based requires


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-6
changelog:
  - Fix fs errors with virtio and qcow2 backing file (#524734)
  - Fix ksm initscript errors on kernel missing ksm (#527653)
  - Add missing Requires(post): getent, useradd, groupadd (#527087)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-12
changelog:
  - Fix a use-after-free crasher in the slirp code (#539583)
  - Fix overflow in the parallels image format support (#533573)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.2-5
changelog:
  - Avoid creating too large iovecs in multiwrite merge (#559717)
  - Don't try to set max_kernel_pages during ksm init on newer kernels (#558281)
  - Add logfile options for ksmtuned debug.


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.3-1
changelog:
  - Update to 0.12.3 upstream
  - vhost-net migration/restart fixes
  - Add F-13 machine type
  - virtio-serial fixes


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.3-6
changelog:
  - Change requires to the noarch seabios-bin
  - Add ownership of docdir to qemu-common (#572110)
  - Fix "Cannot boot from non-existent NIC" error when using virt-install (#577851)


author: Dan Horák <dan[at]danny.cz> - 2:0.12.3-8
changelog:
  - Add avoid-llseek patch from upstream needed for building on s390(x)
  - Don't use parallel make on s390(x)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.13.0-0.3.20100809git25fdf4a
changelog:
  - Updates from upstream towards 0.13 stable
  - Fix requires on gpxe
  - enable spice now that buildreqs are in the repository.
  - ksmtrace has moved to a separate upstream package


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.13.0-1
changelog:
  - Update to 0.13.0 upstream release
  - Fixes for vhost
  - Fix mouse in certain guests (#636887)
  - Fix issues with WinXP guest install (#579348)
  - Resolve build issues with S390 (#639471)
  - Fix Windows XP on Raw Devices (#631591)


author: Daniel P. Berrange <berrange@redhat.com> - 2:0.13.0-2
changelog:
  - Revert previous change
  - Make qemu-common own the /etc/qemu directory
  - Add /etc/qemu/target-x86_64.conf to qemu-system-x86 regardless
    of host architecture.


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.14.0-0.1.20110210git7aa8c46
changelog:
  - Update git snapshot
  - Temporarily disable qemu-cris and qemu-sparc due to build errors (to be resolved shorly)


author: Richard W.M. Jones <rjones@redhat.com> - 2:0.14.0-9
changelog:
  - Add BR libattr-devel.  This caused the -fstype option to be disabled.
    https://www.redhat.com/archives/libvir-list/2011-June/thread.html#01017


author: Hans de Goede <hdegoede@redhat.com> - 2:0.15.0-0.2.20110718525e3df
changelog:
  - Add support usb redirection over the network, see:
    http://fedoraproject.org/wiki/Features/UsbNetworkRedirection
  - Restore chardev flow control patches


author: Richard W.M. Jones <rjones@redhat.com> - 2:0.15.0-2
changelog:
  - Add upstream qemu patch 'Allow to leave type on default in -machine'
    (2645c6dcaf6ea2a51a3b6dfa407dd203004e4d11).


author: Daniel P. Berrange <berrange@redhat.com> - 2:0.15.0-4
changelog:
  - Enable DTrace tracing backend for SystemTAP (rhbz #737763)
  - Enable build with curl (rhbz #737006)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.15.1-1
changelog:
  - Require seabios-bin >= 0.6.0-2 (#741992)
  - Replace init scripts with systemd units (#741920)
  - Update to 0.15.1 stable upstream


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-4
changelog:
  - Disable tests since they hang intermittently.
  - Add kvmvapic.bin (replaces vapic.bin).
  - Add cpus-x86_64.conf.  qemu now creates /etc/qemu/target-x86_64.conf
    as an empty file.
  - Add qemu-icon.bmp.
  - Add qemu-bridge-helper.
  - Build and include virtfs-proxy-helper + man page (thanks Hans de Goede).


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-7
changelog:
  - Add patch to fix default machine options.  This fixes libvirt
    detection of qemu.
  - Back out patch 1 which conflicts.


author: Cole Robinson <crobinso@redhat.com> - 1.1.1-1
changelog:
  - Upstream stable release 1.1.1
  - Fix systemtap tapsets (bz 831763)
  - Fix VNC audio tunnelling (bz 840653)
  - Don't renable ksm on update (bz 815156)
  - Bump usbredir dep (bz 812097)
  - Fix RPM install error on non-virt machines (bz 660629)
  - Obsolete openbios to fix upgrade dependency issues (bz 694802)


author: Adam Jackson <ajax@redhat.com> 1.2.0-0.5.rc1
changelog:
  - Flip Requires: ceph >= foo to Conflicts: ceph < foo, so we pull in only the
    libraries which we need and not the rest of ceph which we don't.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-1
changelog:
  - New upstream release 1.2.0 final
  - Add support for Spice seamless migration
  - Add support for Spice dynamic monitors
  - Add support for usb-redir live migration


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.2.0-8
changelog:
  - Use 'global' instead of 'define', and underscore in definition name,
    n-v-r, and 'dist' tag of SLOF, all to fix RHBZ#855252.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-11
changelog:
  - Rebuild against latest spice-server and spice-protocol
  - Fix non-seamless migration failing with vms with usb-redir devices,
    to allow boxes to load such vms from disk


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-13
changelog:
  - Add ppc support to kvm.modules (original patch by David Gibson)
  - Replace x86only build with kvmonly build: add separate defines and
    conditionals for all packages, so that they can be chosen and
    renamed in kvmonly builds and so that qemu has the appropriate requires
  - Automatically pick libfdt dependancy
  - Add knob to disable spice+seccomp


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-16
changelog:
  - add s390x KVM support
  - distribute pre-built firmware or device trees for Alpha, Microblaze, S390
  - add missing system targets
  - add missing linux-user targets
  - fix previous commit


author: Cole Robinson <crobinso@redhat.com> - 2:1.2.0-18
changelog:
  - Fix loading arm initrd if kernel is very large (bz #862766)
  - Don't use reserved word 'function' in systemtap files (bz #870972)
  - Drop assertion that was triggering when pausing guests w/ qxl (bz


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-19
changelog:
  - Sync spice patches with upstream, minor bugfixes and set the qxl pci
    device revision to 4 by default, so that guests know they can use
    the new features


author: Cole Robinson <crobinso@redhat.com> - 2:1.3.0-1
changelog:
  - Switch base tarball from qemu-kvm to qemu
  - qemu 1.3 release
  - Option to use linux VFIO driver to assign PCI devices
  - Many USB3 improvements
  - New paravirtualized hardware random number generator device.
  - Support for Glusterfs volumes with "gluster://" -drive URI
  - Block job commands for live block commit and storage migration


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-3
changelog:
  - Remove dependency on bogus qemu-kvm-kvm package [bz#870343]
  - Resolves: bz#870343
    (qemu-kvm-1.2.0-16.el7 cant be installed)


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-5
changelog:
  - Fix patch contents for usb-redir (bz#895491)
  - Resolves: bz#895491
    (PATCH: 0110-usb-redir-Add-flow-control-support.patch has been mangled on rebase !!)


author: Alon Levy <alevy@redhat.com> - 3:1.3.0-6
changelog:
  - Bump epoch back to 3 since there has already been a 3 package release:
    3:1.2.0-20.el7 https://brewweb.devel.redhat.com/buildinfo?buildID=244866
  - Mark explicit libcacard dependency on new enough qemu-img to avoid conflict
    since /usr/bin/vscclient was moved from qemu-img to libcacard subpackage.


author: Michal Novotny <minovotn@redhat.com> - 3:1.3.0-8
changelog:
  - Missing package qemu-system-x86 in hardware certification kvm testing (bz#912433)
  - Resolves: bz#912433
    (Missing package qemu-system-x86 in hardware certification kvm testing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.4.0-4
changelog:
  - Enable build of libcacard subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-img subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-guest-agent subpackage for non-x86_64 archs (bz #873174)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.5.0-2
changelog:
  - Enable werror (bz #948290)
  - Enable nbd driver (bz #875871)
  - Fix udev rules file location (bz #958860)
  - Remove +x bit from systemd unit files (bz #965000)
  - Drop unneeded kvm.modules on x86 (bz #963642)
  - Fix build flags
  - Enable libusb


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.1-2
changelog:
  - Fix package package version info (bz #952996)
  - pc: Replace upstream machine types by RHEL-7 types (bz #977864)
  - target-i386: Update model values on Conroe/Penryn/Nehalem CPU model (bz #861210)
  - target-i386: Set level=4 on Conroe/Penryn/Nehalem (bz #861210)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-2
changelog:
  - SPEC file prepared for RHEL/RHEV split (rhbz #987165)
  - RHEL guest( sata disk ) can not boot up (rhbz #981723)
  - Kill the "use flash device for BIOS unless KVM" misfeature (rhbz #963280)
  - Provide RHEL-6 machine types (rhbz #983991)
  - Change s3/s4 default to "disable". (rhbz #980840)  
  - Support Virtual Memory Disk Format in qemu (rhbz #836675)
  - Glusterfs backend for QEMU (rhbz #805139)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-3
changelog:
  - query mem info from monitor would cause qemu-kvm hang [RHEL-7] (rhbz #970047)
  - Throttle-down guest to help with live migration convergence (backport to RHEL7.0) (rhbz #985958)
  - disable (for now) EFI-enabled roms (rhbz #962563)
  - qemu-kvm "vPMU passthrough" mode breaks migration, shouldn't be enabled by default (rhbz #853101)
  - Remove pending watches after virtserialport unplug (rhbz #992900)
  - Containment of error when an SR-IOV device encounters an error... (rhbz #984604)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-4
changelog:
  - qemu: guest agent creates files with insecure permissions in deamon mode [rhel-7.0] (rhbz 974444)
  - update qemu-ga config & init script in RHEL7 wrt. fsfreeze hook (rhbz 969942)
  - RHEL7 does not have equivalent functionality for __com.redhat_qxl_screendump (rhbz 903910)
  - SEP flag behavior for CPU models of RHEL6 machine types should be compatible (rhbz 960216)
  - crash command can not read the dump-guest-memory file when paging=false [RHEL-7] (rhbz 981582)
  - RHEL 7 qemu-kvm fails to build on F19 host due to libusb deprecated API (rhbz 996469)
  - Live migration support in virtio-blk-data-plane (rhbz 995030)
  - qemu-img resize can execute successfully even input invalid syntax (rhbz 992935)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-2.el7
changelog:
  - kvm-osdep-add-qemu_get_local_state_pathname.patch [bz#964304]
  - kvm-qga-determine-default-state-dir-and-pidfile-dynamica.patch [bz#964304]
  - kvm-configure-don-t-save-any-fixed-local_statedir-for-wi.patch [bz#964304]
  - kvm-qga-create-state-directory-on-win32.patch [bz#964304]
  - kvm-qga-save-state-directory-in-ga_install_service-RHEL-.patch [bz#964304]
  - kvm-Makefile-create-.-var-run-when-installing-the-POSIX-.patch [bz#964304]
  - kvm-qemu-option-Fix-qemu_opts_find-for-null-id-arguments.patch [bz#980782]
  - kvm-qemu-option-Fix-qemu_opts_set_defaults-for-corner-ca.patch [bz#980782]
  - kvm-vl-New-qemu_get_machine_opts.patch [bz#980782]
  - kvm-Fix-machine-options-accel-kernel_irqchip-kvm_shadow_.patch [bz#980782]
  - kvm-microblaze-Fix-latent-bug-with-default-DTB-lookup.patch [bz#980782]
  - kvm-Simplify-machine-option-queries-with-qemu_get_machin.patch [bz#980782]
  - kvm-pci-add-VMSTATE_MSIX.patch [bz#838170]
  - kvm-xhci-add-XHCISlot-addressed.patch [bz#838170]
  - kvm-xhci-add-xhci_alloc_epctx.patch [bz#838170]
  - kvm-xhci-add-xhci_init_epctx.patch [bz#838170]
  - kvm-xhci-add-live-migration-support.patch [bz#838170]
  - kvm-pc-set-level-xlevel-correctly-on-486-qemu32-CPU-mode.patch [bz#918907]
  - kvm-pc-Remove-incorrect-rhel6.x-compat-model-value-for-C.patch [bz#918907]
  - kvm-pc-rhel6.x-has-x2apic-present-on-Conroe-Penryn-Nehal.patch [bz#918907]
  - kvm-pc-set-compat-CPUID-0x80000001-.EDX-bits-on-Westmere.patch [bz#918907]
  - kvm-pc-Remove-PCLMULQDQ-from-Westmere-on-rhel6.x-machine.patch [bz#918907]
  - kvm-pc-SandyBridge-rhel6.x-compat-fixes.patch [bz#918907]
  - kvm-pc-Haswell-doesn-t-have-rdtscp-on-rhel6.x.patch [bz#918907]
  - kvm-i386-fix-LAPIC-TSC-deadline-timer-save-restore.patch [bz#972433]
  - kvm-all.c-max_cpus-should-not-exceed-KVM-vcpu-limit.patch [bz#996258]
  - kvm-add-timestamp-to-error_report.patch [bz#906937]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906937]
  - Resolves: bz#838170
    (Add live migration support for USB [xhci, usb-uas])
  - Resolves: bz#906937
    ([Hitachi 7.0 FEAT][QEMU]Add a time stamp to error message (*))
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#964304
    (Windows guest agent service failed to be started)
  - Resolves: bz#972433
    ("INFO: rcu_sched detected stalls" after RHEL7 kvm vm migrated)
  - Resolves: bz#980782
    (kernel_irqchip defaults to off instead of on without -machine)
  - Resolves: bz#996258
    (boot guest with maxcpu=255 successfully but actually max number of vcpu is 160)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-1.5.3-4.el7
changelog:
  - kvm-block-package-preparation-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-move-input-parsing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-committing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-rollback-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-make-all-steps-in-qmp_transaction-as-callback.patch [bz#1005818]
  - kvm-blockdev-drop-redundant-proto_drv-check.patch [bz#1005818]
  - kvm-block-Don-t-parse-protocol-from-file.filename.patch [bz#1005818]
  - kvm-Revert-block-Disable-driver-specific-options-for-1.5.patch [bz#1005818]
  - kvm-qcow2-Add-refcount-update-reason-to-all-callers.patch [bz#1005818]
  - kvm-qcow2-Options-to-enable-discard-for-freed-clusters.patch [bz#1005818]
  - kvm-qcow2-Batch-discards.patch [bz#1005818]
  - kvm-block-Always-enable-discard-on-the-protocol-level.patch [bz#1005818]
  - kvm-qapi.py-Avoid-code-duplication.patch [bz#1005818]
  - kvm-qapi.py-Allow-top-level-type-reference-for-command-d.patch [bz#1005818]
  - kvm-qapi-schema-Use-BlockdevSnapshot-type-for-blockdev-s.patch [bz#1005818]
  - kvm-qapi-types.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-qapi-visit.py-Split-off-generate_visit_struct_fields.patch [bz#1005818]
  - kvm-qapi-visit.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-docs-Document-QAPI-union-types.patch [bz#1005818]
  - kvm-qapi-Add-visitor-for-implicit-structs.patch [bz#1005818]
  - kvm-qapi-Flat-unions-with-arbitrary-discriminator.patch [bz#1005818]
  - kvm-qapi-Add-consume-argument-to-qmp_input_get_object.patch [bz#1005818]
  - kvm-qapi.py-Maintain-a-list-of-union-types.patch [bz#1005818]
  - kvm-qapi-qapi-types.py-native-list-support.patch [bz#1005818]
  - kvm-qapi-Anonymous-unions.patch [bz#1005818]
  - kvm-block-Allow-driver-option-on-the-top-level.patch [bz#1005818]
  - kvm-QemuOpts-Add-qemu_opt_unset.patch [bz#1005818]
  - kvm-blockdev-Rename-I-O-throttling-options-for-QMP.patch [bz#1005818]
  - kvm-qemu-iotests-Update-051-reference-output.patch [bz#1005818]
  - kvm-blockdev-Rename-readonly-option-to-read-only.patch [bz#1005818]
  - kvm-blockdev-Split-up-cache-option.patch [bz#1005818]
  - kvm-qcow2-Use-dashes-instead-of-underscores-in-options.patch [bz#1005818]
  - kvm-qemu-iotests-filter-QEMU-version-in-monitor-banner.patch [bz#1006959]
  - kvm-tests-set-MALLOC_PERTURB_-to-expose-memory-bugs.patch [bz#1006959]
  - kvm-qemu-iotests-Whitespace-cleanup.patch [bz#1006959]
  - kvm-qemu-iotests-Fixed-test-case-026.patch [bz#1006959]
  - kvm-qemu-iotests-Fix-test-038.patch [bz#1006959]
  - kvm-qemu-iotests-Remove-lsi53c895a-tests-from-051.patch [bz#1006959]
  - Resolves: bz#1005818
    (qcow2: Backport discard command line options)
  - Resolves: bz#1006959
    (qemu-iotests false positives)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-7.el7
changelog:
  - kvm-spice-fix-display-initialization.patch [bz#974887]
  - kvm-Remove-i82550-network-card-emulation.patch [bz#921983]
  - kvm-Remove-usb-wacom-tablet.patch [bz#903914]
  - kvm-Disable-usb-uas.patch [bz#903914]
  - kvm-Disable-vhost-scsi.patch [bz#994642]
  - kvm-Remove-no-hpet-option.patch [bz#947441]
  - kvm-Disable-isa-parallel.patch [bz#1002286]
  - kvm-xhci-implement-warm-port-reset.patch [bz#949514]
  - kvm-usb-add-serial-bus-property.patch [bz#953304]
  - kvm-rhel6-compat-usb-serial-numbers.patch [bz#953304]
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#995866]
  - kvm-gluster-Add-image-resize-support.patch [bz#1007226]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007226]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#1007226]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#1007226]
  - kvm-Preparation-for-usb-bt-dongle-conditional-build.patch [bz#1001131]
  - kvm-Remove-dev-bluetooth.c-dependency-from-vl.c.patch [bz#1001131]
  - kvm-exec-Fix-Xen-RAM-allocation-with-unusual-options.patch [bz#1009328]
  - kvm-exec-Clean-up-fall-back-when-mem-path-allocation-fai.patch [bz#1009328]
  - kvm-exec-Reduce-ifdeffery-around-mem-path.patch [bz#1009328]
  - kvm-exec-Simplify-the-guest-physical-memory-allocation-h.patch [bz#1009328]
  - kvm-exec-Drop-incorrect-dead-S390-code-in-qemu_ram_remap.patch [bz#1009328]
  - kvm-exec-Clean-up-unnecessary-S390-ifdeffery.patch [bz#1009328]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#1009328]
  - kvm-pc_sysfw-Fix-ISA-BIOS-init-for-ridiculously-big-flas.patch [bz#1009328]
  - kvm-virtio-scsi-Make-type-virtio-scsi-common-abstract.patch [bz#903918]
  - kvm-qga-move-logfiles-to-new-directory-for-easier-SELinu.patch [bz#1009491]
  - kvm-target-i386-add-cpu64-rhel6-CPU-model.patch [bz#918907]
  - kvm-fix-steal-time-MSR-vmsd-callback-to-proper-opaque-ty.patch [bz#903889]
  - Resolves: bz#1001131
    (Disable or remove device usb-bt-dongle)
  - Resolves: bz#1002286
    (Disable or remove device isa-parallel)
  - Resolves: bz#1007226
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009328
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#1009491
    (move qga logfiles to new /var/log/qemu-ga/ directory [RHEL-7])
  - Resolves: bz#903889
    (The value of steal time in "top" command always is "0.0% st" after guest migration)
  - Resolves: bz#903914
    (Disable or remove usb related devices that we will not support)
  - Resolves: bz#903918
    (Disable or remove emulated SCSI devices we will not support)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921983
    (Disable or remove emulated network devices that we will not support)
  - Resolves: bz#947441
    (HPET device must be disabled)
  - Resolves: bz#949514
    (fail to passthrough the USB3.0 stick to windows guest with xHCI controller under pc-i440fx-1.4)
  - Resolves: bz#953304
    (Serial number of some USB devices must be fixed for older RHEL machine types)
  - Resolves: bz#974887
    (the screen of guest fail to display correctly when use spice + qxl driver)
  - Resolves: bz#994642
    (should disable vhost-scsi)
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-8.el7
changelog:
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#995866]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#995866]
  - kvm-qemu-iotests-add-poke_file-utility-function.patch [bz#995866]
  - kvm-qemu-iotests-add-empty-test-case-for-vmdk.patch [bz#995866]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#995866]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#995866]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#995866]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#995866]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#995866]
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995866]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995866]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995866]
  - kvm-vmdk-support-vmfs-files.patch [bz#995866]
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-9.el7
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005036]
  - kvm-spec-include-userspace-iSCSI-initiator-in-block-driv.patch [bz#923843]
  - kvm-linux-headers-update-to-kernel-3.10.0-26.el7.patch [bz#1008987]
  - kvm-target-i386-add-feature-kvm_pv_unhalt.patch [bz#1008987]
  - kvm-warn-if-num-cpus-is-greater-than-num-recommended.patch [bz#1010881]
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#1007222]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#1007222]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#1007222]
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1017049]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1017049]
  - kvm-qemu-iotests-add-monolithicFlat-creation-test-to-059.patch [bz#1017049]
  - Resolves: bz#1005036
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1007222
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#1008987
    (pvticketlocks: add kvm feature kvm_pv_unhalt)
  - Resolves: bz#1010881
    (backport vcpu soft limit warning)
  - Resolves: bz#1017049
    (qemu-img refuses to open the vmdk format image its created)
  - Resolves: bz#923843
    (include userspace iSCSI initiator in block driver whitelist)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-10.el7
changelog:
  - kvm-xhci-fix-endpoint-interval-calculation.patch [bz#1001604]
  - kvm-xhci-emulate-intr-endpoint-intervals-correctly.patch [bz#1001604]
  - kvm-xhci-reset-port-when-disabling-slot.patch [bz#1001604]
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1001604]
  - kvm-target-i386-Set-model-6-on-qemu64-qemu32-CPU-models.patch [bz#1004290]
  - kvm-pc-rhel6-doesn-t-have-APIC-on-pentium-CPU-models.patch [bz#918907]
  - kvm-pc-RHEL-6-had-x2apic-set-on-Opteron_G-123.patch [bz#918907]
  - kvm-pc-RHEL-6-don-t-have-RDTSCP.patch [bz#918907]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1009285]
  - kvm-seccomp-fine-tuning-whitelist-by-adding-times.patch [bz#1004175]
  - kvm-block-add-bdrv_write_zeroes.patch [bz#921465]
  - kvm-block-raw-add-bdrv_co_write_zeroes.patch [bz#921465]
  - kvm-rdma-export-qemu_fflush.patch [bz#921465]
  - kvm-block-migration-efficiently-encode-zero-blocks.patch [bz#921465]
  - kvm-Fix-real-mode-guest-migration.patch [bz#921465]
  - kvm-Fix-real-mode-guest-segments-dpl-value-in-savevm.patch [bz#921465]
  - kvm-migration-add-autoconvergence-documentation.patch [bz#921465]
  - kvm-migration-send-total-time-in-QMP-at-completed-stage.patch [bz#921465]
  - kvm-migration-don-t-use-uninitialized-variables.patch [bz#921465]
  - kvm-pc-drop-external-DSDT-loading.patch [bz#921465]
  - kvm-hda-codec-refactor-common-definitions-into-a-header-.patch [bz#954195]
  - kvm-hda-codec-make-mixemu-selectable-at-runtime.patch [bz#954195]
  - kvm-audio-remove-CONFIG_MIXEMU-configure-option.patch [bz#954195]
  - kvm-pc_piix-disable-mixer-for-6.4.0-machine-types-and-be.patch [bz#954195]
  - kvm-spec-mixemu-config-option-is-no-longer-supported-and.patch [bz#954195]
  - Resolves: bz#1001604
    (usb hub doesn't work properly (win7 sees downstream port #1 only).)
  - Resolves: bz#1004175
    ('-sandbox on'  option  cause  qemu-kvm process hang)
  - Resolves: bz#1004290
    (Use model 6 for qemu64 and intel cpus)
  - Resolves: bz#1009285
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921465
    (Migration can not finished even the "remaining ram" is already 0 kb)
  - Resolves: bz#954195
    (RHEL machines <=6.4 should not use mixemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-11.el7
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#994414]
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#922010]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#922010]
  - kvm-qemu-socket-catch-monitor_get_fd-failures.patch [bz#922010]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#922010]
  - kvm-error-add-error_setg_file_open-helper.patch [bz#922010]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#922010]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#922010]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#922010]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#922010]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#922010]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#922010]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#922010]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-chardev-handle-qmp_chardev_add-KIND_MUX-failure.patch [bz#922010]
  - kvm-acpi-piix4-Enable-qemu-kvm-compatibility-mode.patch [bz#1019474]
  - kvm-target-i386-support-loading-of-cpu-xsave-subsection.patch [bz#1004743]
  - Resolves: bz#1004743
    (XSAVE migration format not compatible between RHEL6 and RHEL7)
  - Resolves: bz#1019474
    (RHEL-7 can't load piix4_pm migration section from RHEL-6.5)
  - Resolves: bz#922010
    (RFE: support hotplugging chardev & serial ports)
  - Resolves: bz#994414
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-12.el7
changelog:
  - kvm-vl-Clean-up-parsing-of-boot-option-argument.patch [bz#997817]
  - kvm-qemu-option-check_params-is-now-unused-drop-it.patch [bz#997817]
  - kvm-vl-Fix-boot-order-and-once-regressions-and-related-b.patch [bz#997817]
  - kvm-vl-Rename-boot_devices-to-boot_order-for-consistency.patch [bz#997817]
  - kvm-pc-Make-no-fd-bootchk-stick-across-boot-order-change.patch [bz#997817]
  - kvm-doc-Drop-ref-to-Bochs-from-no-fd-bootchk-documentati.patch [bz#997817]
  - kvm-libqtest-Plug-fd-and-memory-leaks-in-qtest_quit.patch [bz#997817]
  - kvm-libqtest-New-qtest_end-to-go-with-qtest_start.patch [bz#997817]
  - kvm-qtest-Don-t-reset-on-qtest-chardev-connect.patch [bz#997817]
  - kvm-boot-order-test-New-covering-just-PC-for-now.patch [bz#997817]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1019352]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#989608]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#989608]
  - kvm-spec-Whitelist-rbd-block-driver.patch [bz#989608]
  - Resolves: bz#1019352
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#989608
    ([7.0 FEAT] qemu runtime support for librbd backend (ceph))
  - Resolves: bz#997817
    (-boot order and -boot once regressed since RHEL-6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-13.el7
changelog:
  - kvm-seabios-paravirt-allow-more-than-1TB-in-x86-guest.patch [bz#989677]
  - kvm-scsi-prefer-UUID-to-VM-name-for-the-initiator-name.patch [bz#1006468]
  - kvm-Fix-incorrect-rhel_rhev_conflicts-macro-usage.patch [bz#1017693]
  - Resolves: bz#1006468
    (libiscsi initiator name should use vm UUID)
  - Resolves: bz#1017693
    (incorrect use of rhel_rhev_conflicts)
  - Resolves: bz#989677
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-14.el7
changelog:
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.patch [bz#928867]
  - kvm-migrate-vPMU-state.patch [bz#928867]
  - kvm-blockdev-do-not-default-cache.no-flush-to-true.patch [bz#1009993]
  - kvm-virtio-blk-do-not-relay-a-previous-driver-s-WCE-conf.patch [bz#1009993]
  - kvm-rng-random-use-error_setg_file_open.patch [bz#907743]
  - kvm-block-mirror_complete-use-error_setg_file_open.patch [bz#907743]
  - kvm-blockdev-use-error_setg_file_open.patch [bz#907743]
  - kvm-cpus-use-error_setg_file_open.patch [bz#907743]
  - kvm-dump-qmp_dump_guest_memory-use-error_setg_file_open.patch [bz#907743]
  - kvm-savevm-qmp_xen_save_devices_state-use-error_setg_fil.patch [bz#907743]
  - kvm-block-bdrv_reopen_prepare-don-t-use-QERR_OPEN_FILE_F.patch [bz#907743]
  - kvm-qerror-drop-QERR_OPEN_FILE_FAILED-macro.patch [bz#907743]
  - kvm-rhel-Drop-ivshmem-device.patch [bz#787463]
  - kvm-usb-remove-old-usb-host-code.patch [bz#1001144]
  - kvm-Add-rhel6-pxe-roms-files.patch [bz#997702]
  - kvm-Add-rhel6-pxe-rom-to-redhat-rpm.patch [bz#997702]
  - kvm-Fix-migration-from-rhel6.5-to-rhel7-with-ipxe.patch [bz#997702]
  - kvm-pc-Don-t-prematurely-explode-QEMUMachineInitArgs.patch [bz#994490]
  - kvm-pc-Don-t-explode-QEMUMachineInitArgs-into-local-vari.patch [bz#994490]
  - kvm-smbios-Normalize-smbios_entry_add-s-error-handling-t.patch [bz#994490]
  - kvm-smbios-Convert-to-QemuOpts.patch [bz#994490]
  - kvm-smbios-Improve-diagnostics-for-conflicting-entries.patch [bz#994490]
  - kvm-smbios-Make-multiple-smbios-type-accumulate-sanely.patch [bz#994490]
  - kvm-smbios-Factor-out-smbios_maybe_add_str.patch [bz#994490]
  - kvm-hw-Pass-QEMUMachine-to-its-init-method.patch [bz#994490]
  - kvm-smbios-Set-system-manufacturer-product-version-by-de.patch [bz#994490]
  - kvm-smbios-Decouple-system-product-from-QEMUMachine.patch [bz#994490]
  - kvm-rhel-SMBIOS-type-1-branding.patch [bz#994490]
  - kvm-Add-disable-rhev-features-option-to-configure.patch []
  - Resolves: bz#1001144
    (Disable or remove device usb-host-linux)
  - Resolves: bz#1009993
    (RHEL7 guests do not issue fdatasyncs on virtio-blk)
  - Resolves: bz#787463
    (disable ivshmem (was: [Hitachi 7.0 FEAT] Support ivshmem (Inter-VM Shared Memory)))
  - Resolves: bz#907743
    (qemu-ga: empty reason string for OpenFileFailed error)
  - Resolves: bz#928867
    (Virtual PMU support during live migration - qemu-kvm)
  - Resolves: bz#994490
    (Set per-machine-type SMBIOS strings)
  - Resolves: bz#997702
    (Migration from RHEL6.5 host to RHEL7.0 host is failed with virtio-net device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-15.el7
changelog:
  - kvm-cow-make-reads-go-at-a-decent-speed.patch [bz#989646]
  - kvm-cow-make-writes-go-at-a-less-indecent-speed.patch [bz#989646]
  - kvm-cow-do-not-call-bdrv_co_is_allocated.patch [bz#989646]
  - kvm-block-keep-bs-total_sectors-up-to-date-even-for-grow.patch [bz#989646]
  - kvm-block-make-bdrv_co_is_allocated-static.patch [bz#989646]
  - kvm-block-do-not-use-total_sectors-in-bdrv_co_is_allocat.patch [bz#989646]
  - kvm-block-remove-bdrv_is_allocated_above-bdrv_co_is_allo.patch [bz#989646]
  - kvm-block-expect-errors-from-bdrv_co_is_allocated.patch [bz#989646]
  - kvm-block-Fix-compiler-warning-Werror-uninitialized.patch [bz#989646]
  - kvm-qemu-img-always-probe-the-input-image-for-allocated-.patch [bz#989646]
  - kvm-block-make-bdrv_has_zero_init-return-false-for-copy-.patch [bz#989646]
  - kvm-block-introduce-bdrv_get_block_status-API.patch [bz#989646]
  - kvm-block-define-get_block_status-return-value.patch [bz#989646]
  - kvm-block-return-get_block_status-data-and-flags-for-for.patch [bz#989646]
  - kvm-block-use-bdrv_has_zero_init-to-return-BDRV_BLOCK_ZE.patch [bz#989646]
  - kvm-block-return-BDRV_BLOCK_ZERO-past-end-of-backing-fil.patch [bz#989646]
  - kvm-qemu-img-add-a-map-subcommand.patch [bz#989646]
  - kvm-docs-qapi-document-qemu-img-map.patch [bz#989646]
  - kvm-raw-posix-return-get_block_status-data-and-flags.patch [bz#989646]
  - kvm-raw-posix-report-unwritten-extents-as-zero.patch [bz#989646]
  - kvm-block-add-default-get_block_status-implementation-fo.patch [bz#989646]
  - kvm-block-look-for-zero-blocks-in-bs-file.patch [bz#989646]
  - kvm-qemu-img-fix-invalid-JSON.patch [bz#989646]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#989646]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#989646]
  - kvm-block-get_block_status-avoid-redundant-callouts-on-r.patch [bz#989646]
  - kvm-qcow2-Restore-total_sectors-value-in-save_vmstate.patch [bz#1025740]
  - kvm-qcow2-Unset-zero_beyond_eof-in-save_vmstate.patch [bz#1025740]
  - kvm-qemu-iotests-Test-for-loading-VM-state-from-qcow2.patch [bz#1025740]
  - kvm-apic-rename-apic-specific-bitopts.patch [bz#1001216]
  - kvm-hw-import-bitmap-operations-in-qdev-core-header.patch [bz#1001216]
  - kvm-qemu-help-Sort-devices-by-logical-functionality.patch [bz#1001216]
  - kvm-devices-Associate-devices-to-their-logical-category.patch [bz#1001216]
  - kvm-Mostly-revert-qemu-help-Sort-devices-by-logical-func.patch [bz#1001216]
  - kvm-qdev-monitor-Group-device_add-help-and-info-qdm-by-c.patch [bz#1001216]
  - kvm-qdev-Replace-no_user-by-cannot_instantiate_with_devi.patch [bz#1001216]
  - kvm-sysbus-Set-cannot_instantiate_with_device_add_yet.patch [bz#1001216]
  - kvm-cpu-Document-why-cannot_instantiate_with_device_add_.patch [bz#1001216]
  - kvm-apic-Document-why-cannot_instantiate_with_device_add.patch [bz#1001216]
  - kvm-pci-host-Consistently-set-cannot_instantiate_with_de.patch [bz#1001216]
  - kvm-ich9-Document-why-cannot_instantiate_with_device_add.patch [bz#1001216]
  - kvm-piix3-piix4-Clean-up-use-of-cannot_instantiate_with_.patch [bz#1001216]
  - kvm-vt82c686-Clean-up-use-of-cannot_instantiate_with_dev.patch [bz#1001216]
  - kvm-isa-Clean-up-use-of-cannot_instantiate_with_device_a.patch [bz#1001216]
  - kvm-qdev-Do-not-let-the-user-try-to-device_add-when-it-c.patch [bz#1001216]
  - kvm-rhel-Revert-unwanted-cannot_instantiate_with_device_.patch [bz#1001216]
  - kvm-rhel-Revert-downstream-changes-to-unused-default-con.patch [bz#1001076]
  - kvm-rhel-Drop-cfi.pflash01-and-isa-ide-device.patch [bz#1001076]
  - kvm-rhel-Drop-isa-vga-device.patch [bz#1001088]
  - kvm-rhel-Make-isa-cirrus-vga-device-unavailable.patch [bz#1001088]
  - kvm-rhel-Make-ccid-card-emulated-device-unavailable.patch [bz#1001123]
  - kvm-x86-fix-migration-from-pre-version-12.patch [bz#1005695]
  - kvm-x86-cpuid-reconstruct-leaf-0Dh-data.patch [bz#1005695]
  - kvm-kvmvapic-Catch-invalid-ROM-size.patch [bz#920021]
  - kvm-kvmvapic-Enter-inactive-state-on-hardware-reset.patch [bz#920021]
  - kvm-kvmvapic-Clear-also-physical-ROM-address-when-enteri.patch [bz#920021]
  - kvm-block-optionally-disable-live-block-jobs.patch [bz#987582]
  - kvm-rpm-spec-template-disable-live-block-ops-for-rhel-en.patch [bz#987582]
  - kvm-migration-disable-live-block-migration-b-i-for-rhel-.patch [bz#1022392]
  - kvm-Build-ceph-rbd-only-for-rhev.patch [bz#987583]
  - kvm-spec-Disable-host-cdrom-RHEL-only.patch [bz#760885]
  - kvm-rhel-Make-pci-serial-2x-and-pci-serial-4x-device-una.patch [bz#1001180]
  - kvm-usb-host-libusb-Fix-reset-handling.patch [bz#980415]
  - kvm-usb-host-libusb-Configuration-0-may-be-a-valid-confi.patch [bz#980383]
  - kvm-usb-host-libusb-Detach-kernel-drivers-earlier.patch [bz#980383]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#1010858]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#1010858]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#1010858]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#1010858]
  - kvm-fw_cfg-add-API-to-find-FW-cfg-object.patch [bz#990601]
  - kvm-pvpanic-use-FWCfgState-explicitly.patch [bz#990601]
  - kvm-pvpanic-initialization-cleanup.patch [bz#990601]
  - kvm-pvpanic-fix-fwcfg-for-big-endian-hosts.patch [bz#990601]
  - kvm-hw-misc-make-pvpanic-known-to-user.patch [bz#990601]
  - kvm-gdbstub-do-not-restart-crashed-guest.patch [bz#990601]
  - kvm-gdbstub-fix-for-commit-87f25c12bfeaaa0c41fb857713bbc.patch [bz#990601]
  - kvm-vl-allow-cont-from-panicked-state.patch [bz#990601]
  - kvm-hw-misc-don-t-create-pvpanic-device-by-default.patch [bz#990601]
  - kvm-block-vhdx-add-migration-blocker.patch [bz#1007176]
  - kvm-qemu-kvm.spec-add-vhdx-to-the-read-only-block-driver.patch [bz#1007176]
  - kvm-qemu-kvm.spec-Add-VPC-VHD-driver-to-the-block-read-o.patch [bz#1007176]
  - Resolves: bz#1001076
    (Disable or remove other block devices we won't support)
  - Resolves: bz#1001088
    (Disable or remove display devices we won't support)
  - Resolves: bz#1001123
    (Disable or remove device ccid-card-emulated)
  - Resolves: bz#1001180
    (Disable or remove devices pci-serial-2x, pci-serial-4x)
  - Resolves: bz#1001216
    (Fix no_user or provide another way make devices unavailable with -device / device_add)
  - Resolves: bz#1005695
    (QEMU should hide CPUID.0Dh values that it does not support)
  - Resolves: bz#1007176
    (Add VPC and VHDX file formats as supported in qemu-kvm (read-only))
  - Resolves: bz#1010858
    (Disable unused human monitor commands)
  - Resolves: bz#1022392
    (Disable live-storage-migration in qemu-kvm (migrate -b/-i))
  - Resolves: bz#1025740
    (Saving VM state on qcow2 images results in VM state corruption)
  - Resolves: bz#760885
    (Disable host cdrom passthrough)
  - Resolves: bz#920021
    (qemu-kvm segment fault when reboot guest after hot unplug device with option ROM)
  - Resolves: bz#980383
    (The usb3.0 stick can't be returned back to host after shutdown guest with usb3.0 pass-through)
  - Resolves: bz#980415
    (libusbx: error [_open_sysfs_attr] open /sys/bus/usb/devices/4-1/bConfigurationValue failed ret=-1 errno=2)
  - Resolves: bz#987582
    (Initial Virtualization Differentiation for RHEL7 (Live snapshots))
  - Resolves: bz#987583
    (Initial Virtualization Differentiation for RHEL7 (Ceph enablement))
  - Resolves: bz#989646
    (Support backup vendors in qemu to access qcow disk readonly)
  - Resolves: bz#990601
    (pvpanic device triggers guest bugs when present by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-16.el7
changelog:
  - kvm-block-drop-bs_snapshots-global-variable.patch [bz#1026524]
  - kvm-block-move-snapshot-code-in-block.c-to-block-snapsho.patch [bz#1026524]
  - kvm-block-fix-vvfat-error-path-for-enable_write_target.patch [bz#1026524]
  - kvm-block-Bugfix-format-and-snapshot-used-in-drive-optio.patch [bz#1026524]
  - kvm-iscsi-use-bdrv_new-instead-of-stack-structure.patch [bz#1026524]
  - kvm-qcow2-Add-corrupt-bit.patch [bz#1004347]
  - kvm-qcow2-Metadata-overlap-checks.patch [bz#1004347]
  - kvm-qcow2-Employ-metadata-overlap-checks.patch [bz#1004347]
  - kvm-qcow2-refcount-Move-OFLAG_COPIED-checks.patch [bz#1004347]
  - kvm-qcow2-refcount-Repair-OFLAG_COPIED-errors.patch [bz#1004347]
  - kvm-qcow2-refcount-Repair-shared-refcount-blocks.patch [bz#1004347]
  - kvm-qcow2_check-Mark-image-consistent.patch [bz#1004347]
  - kvm-qemu-iotests-Overlapping-cluster-allocations.patch [bz#1004347]
  - kvm-w32-Fix-access-to-host-devices-regression.patch [bz#1026524]
  - kvm-add-qemu-img-convert-n-option-skip-target-volume-cre.patch [bz#1026524]
  - kvm-bdrv-Use-Error-for-opening-images.patch [bz#1026524]
  - kvm-bdrv-Use-Error-for-creating-images.patch [bz#1026524]
  - kvm-block-Error-parameter-for-open-functions.patch [bz#1026524]
  - kvm-block-Error-parameter-for-create-functions.patch [bz#1026524]
  - kvm-qemu-img-create-Emit-filename-on-error.patch [bz#1026524]
  - kvm-qcow2-Use-Error-parameter.patch [bz#1026524]
  - kvm-qemu-iotests-Adjustments-due-to-error-propagation.patch [bz#1026524]
  - kvm-block-raw-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-win32-Employ-error-parameter.patch [bz#1026524]
  - kvm-blkdebug-Employ-error-parameter.patch [bz#1026524]
  - kvm-blkverify-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-posix-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-win32-Always-use-errno-in-hdev_open.patch [bz#1026524]
  - kvm-qmp-Documentation-for-BLOCK_IMAGE_CORRUPTED.patch [bz#1004347]
  - kvm-qcow2-Correct-snapshots-size-for-overlap-check.patch [bz#1004347]
  - kvm-qcow2-CHECK_OFLAG_COPIED-is-obsolete.patch [bz#1004347]
  - kvm-qcow2-Correct-endianness-in-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Switch-L1-table-in-a-single-sequence.patch [bz#1004347]
  - kvm-qcow2-Use-pread-for-inactive-L1-in-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Remove-wrong-metadata-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Use-negated-overflow-check-mask.patch [bz#1004347]
  - kvm-qcow2-Make-overlap-check-mask-variable.patch [bz#1004347]
  - kvm-qcow2-Add-overlap-check-options.patch [bz#1004347]
  - kvm-qcow2-Array-assigning-options-to-OL-check-bits.patch [bz#1004347]
  - kvm-qcow2-Add-more-overlap-check-bitmask-macros.patch [bz#1004347]
  - kvm-qcow2-Evaluate-overlap-check-options.patch [bz#1004347]
  - kvm-qapi-types.py-Split-off-generate_struct_fields.patch [bz#978402]
  - kvm-qapi-types.py-Fix-enum-struct-sizes-on-i686.patch [bz#978402]
  - kvm-qapi-types-visit.py-Pass-whole-expr-dict-for-structs.patch [bz#978402]
  - kvm-qapi-types-visit.py-Inheritance-for-structs.patch [bz#978402]
  - kvm-blockdev-Introduce-DriveInfo.enable_auto_del.patch [bz#978402]
  - kvm-Implement-qdict_flatten.patch [bz#978402]
  - kvm-blockdev-blockdev-add-QMP-command.patch [bz#978402]
  - kvm-blockdev-Separate-ID-generation-from-DriveInfo-creat.patch [bz#978402]
  - kvm-blockdev-Pass-QDict-to-blockdev_init.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-media-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-if-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Moving-parsing-of-geometry-options-to-drive.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-boot-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Move-bus-unit-index-processing-to-drive_ini.patch [bz#978402]
  - kvm-blockdev-Move-virtio-blk-device-creation-to-drive_in.patch [bz#978402]
  - kvm-blockdev-Remove-IF_-check-for-read-only-blockdev_ini.patch [bz#978402]
  - kvm-qemu-iotests-Check-autodel-behaviour-for-device_del.patch [bz#978402]
  - kvm-blockdev-Remove-media-parameter-from-blockdev_init.patch [bz#978402]
  - kvm-blockdev-Don-t-disable-COR-automatically-with-blockd.patch [bz#978402]
  - kvm-blockdev-blockdev_init-error-conversion.patch [bz#978402]
  - kvm-sd-Avoid-access-to-NULL-BlockDriverState.patch [bz#978402]
  - kvm-blockdev-fix-cdrom-read_only-flag.patch [bz#978402]
  - kvm-block-fix-backing-file-overriding.patch [bz#978402]
  - kvm-block-Disable-BDRV_O_COPY_ON_READ-for-the-backing-fi.patch [bz#978402]
  - kvm-block-Don-t-copy-backing-file-name-on-error.patch [bz#978402]
  - kvm-qemu-iotests-Try-creating-huge-qcow2-image.patch [bz#980771]
  - kvm-block-move-qmp-and-info-dump-related-code-to-block-q.patch [bz#980771]
  - kvm-block-dump-snapshot-and-image-info-to-specified-outp.patch [bz#980771]
  - kvm-block-add-snapshot-info-query-function-bdrv_query_sn.patch [bz#980771]
  - kvm-block-add-image-info-query-function-bdrv_query_image.patch [bz#980771]
  - kvm-qmp-add-ImageInfo-in-BlockDeviceInfo-used-by-query-b.patch [bz#980771]
  - kvm-vmdk-Implement-.bdrv_has_zero_init.patch [bz#980771]
  - kvm-qemu-iotests-Add-basic-ability-to-use-binary-sample-.patch [bz#980771]
  - kvm-qemu-iotests-Quote-TEST_IMG-and-TEST_DIR-usage.patch [bz#980771]
  - kvm-qemu-iotests-fix-test-case-059.patch [bz#980771]
  - kvm-qapi-Add-ImageInfoSpecific-type.patch [bz#980771]
  - kvm-block-Add-bdrv_get_specific_info.patch [bz#980771]
  - kvm-block-qapi-Human-readable-ImageInfoSpecific-dump.patch [bz#980771]
  - kvm-qcow2-Add-support-for-ImageInfoSpecific.patch [bz#980771]
  - kvm-qemu-iotests-Discard-specific-info-in-_img_info.patch [bz#980771]
  - kvm-qemu-iotests-Additional-info-from-qemu-img-info.patch [bz#980771]
  - kvm-vmdk-convert-error-code-to-use-errp.patch [bz#980771]
  - kvm-vmdk-refuse-enabling-zeroed-grain-with-flat-images.patch [bz#980771]
  - kvm-qapi-Add-optional-field-compressed-to-ImageInfo.patch [bz#980771]
  - kvm-vmdk-Only-read-cid-from-image-file-when-opening.patch [bz#980771]
  - kvm-vmdk-Implment-bdrv_get_specific_info.patch [bz#980771]
  - Resolves: bz#1004347
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1026524
    (Backport block layer error parameter patches)
  - Resolves: bz#978402
    ([RFE] Add discard support to qemu-kvm layer)
  - Resolves: bz#980771
    ([RFE]  qemu-img should be able to tell the compat version of a qcow2 image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-17.el7
changelog:
  - kvm-pci-assign-Add-MSI-affinity-support.patch [bz#1025877]
  - kvm-Fix-potential-resource-leak-missing-fclose.patch [bz#1025877]
  - kvm-pci-assign-remove-the-duplicate-function-name-in-deb.patch [bz#1025877]
  - kvm-Remove-s390-ccw-img-loader.patch [bz#1017682]
  - kvm-Fix-vscclient-installation.patch [bz#1017681]
  - kvm-Change-qemu-bridge-helper-permissions-to-4755.patch [bz#1017689]
  - kvm-net-update-nic-info-during-device-reset.patch [bz#922589]
  - kvm-net-e1000-update-network-information-when-macaddr-is.patch [bz#922589]
  - kvm-net-rtl8139-update-network-information-when-macaddr-.patch [bz#922589]
  - kvm-virtio-net-fix-up-HMP-NIC-info-string-on-reset.patch [bz#1026689]
  - kvm-vfio-pci-VGA-quirk-update.patch [bz#1025477]
  - kvm-vfio-pci-Add-support-for-MSI-affinity.patch [bz#1025477]
  - kvm-vfio-pci-Test-device-reset-capabilities.patch [bz#1026550]
  - kvm-vfio-pci-Lazy-PCI-option-ROM-loading.patch [bz#1026550]
  - kvm-vfio-pci-Cleanup-error_reports.patch [bz#1026550]
  - kvm-vfio-pci-Add-dummy-PCI-ROM-write-accessor.patch [bz#1026550]
  - kvm-vfio-pci-Fix-endian-issues-in-vfio_pci_size_rom.patch [bz#1026550]
  - kvm-linux-headers-Update-to-include-vfio-pci-hot-reset-s.patch [bz#1025472]
  - kvm-vfio-pci-Implement-PCI-hot-reset.patch [bz#1025472]
  - kvm-linux-headers-Update-for-KVM-VFIO-device.patch [bz#1025474]
  - kvm-vfio-pci-Make-use-of-new-KVM-VFIO-device.patch [bz#1025474]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#995866]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#995866]
  - kvm-e1000-rtl8139-update-HMP-NIC-when-every-bit-is-writt.patch [bz#922589]
  - kvm-don-t-disable-ctrl_mac_addr-feature-for-6.5-machine-.patch [bz#1005039]
  - Resolves: bz#1005039
    (add compat property to disable ctrl_mac_addr feature)
  - Resolves: bz#1017681
    (rpmdiff test "Multilib regressions": vscclient is a libtool script on s390/s390x/ppc/ppc64)
  - Resolves: bz#1017682
    (/usr/share/qemu-kvm/s390-ccw.img need not be distributed)
  - Resolves: bz#1017689
    (/usr/libexec/qemu-bridge-helper permissions should be 4755)
  - Resolves: bz#1025472
    (Nvidia GPU device assignment - qemu-kvm - bus reset support)
  - Resolves: bz#1025474
    (Nvidia GPU device assignment - qemu-kvm - NoSnoop support)
  - Resolves: bz#1025477
    (VFIO MSI affinity)
  - Resolves: bz#1025877
    (pci-assign lacks MSI affinity support)
  - Resolves: bz#1026550
    (QEMU VFIO update ROM loading code)
  - Resolves: bz#1026689
    (virtio-net: macaddr is reset but network info of monitor isn't updated)
  - Resolves: bz#922589
    (e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest)
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-19.el7
changelog:
  - kvm-qapi-qapi-visit.py-fix-list-handling-for-union-types.patch [bz#848203]
  - kvm-qapi-qapi-visit.py-native-list-support.patch [bz#848203]
  - kvm-qapi-enable-generation-of-native-list-code.patch [bz#848203]
  - kvm-net-add-support-of-mac-programming-over-macvtap-in-Q.patch [bz#848203]
  - Resolves: bz#848203
    (MAC Programming for virtio over macvtap - qemu-kvm support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-20.el7
changelog:
  - kvm-pc-drop-virtio-balloon-pci-event_idx-compat-property.patch [bz#1029539]
  - kvm-virtio-net-only-delete-bh-that-existed.patch [bz#922463]
  - kvm-virtio-net-broken-RX-filtering-logic-fixed.patch [bz#1029370]
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1025138]
  - kvm-block-Round-up-total_sectors.patch [bz#1025138]
  - kvm-doc-fix-hardcoded-helper-path.patch [bz#1016952]
  - kvm-introduce-RFQDN_REDHAT-RHEL-6-7-fwd.patch [bz#971933]
  - kvm-error-reason-in-BLOCK_IO_ERROR-BLOCK_JOB_ERROR-event.patch [bz#971938]
  - kvm-improve-debuggability-of-BLOCK_IO_ERROR-BLOCK_JOB_ER.patch [bz#895041]
  - kvm-vfio-pci-Fix-multifunction-on.patch [bz#1029275]
  - kvm-qcow2-Change-default-for-new-images-to-compat-1.1.patch [bz#1026739]
  - kvm-qcow2-change-default-for-new-images-to-compat-1.1-pa.patch [bz#1026739]
  - kvm-rng-egd-offset-the-point-when-repeatedly-read-from-t.patch [bz#1032862]
  - kvm-Fix-rhel-rhev-conflict-for-qemu-kvm-common.patch [bz#1033463]
  - Resolves: bz#1016952
    (qemu-kvm man page guide wrong path for qemu-bridge-helper)
  - Resolves: bz#1025138
    (Read/Randread/Randrw performance regression)
  - Resolves: bz#1026739
    (qcow2: Switch to compat=1.1 default for new images)
  - Resolves: bz#1029275
    (Guest only find one 82576 VF(function 0) while use multifunction)
  - Resolves: bz#1029370
    ([whql][netkvm][wlk] Virtio-net device handles RX multicast filtering improperly)
  - Resolves: bz#1029539
    (Machine type rhel6.1.0 and  balloon device cause migration fail from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#1032862
    (virtio-rng-egd: repeatedly read same random data-block w/o considering the buffer offset)
  - Resolves: bz#1033463
    (can not upgrade qemu-kvm-common to qemu-kvm-common-rhev due to conflicts)
  - Resolves: bz#895041
    (QMP: forward port I/O error debug messages)
  - Resolves: bz#922463
    (qemu-kvm core dump when virtio-net multi queue guest hot-unpluging vNIC)
  - Resolves: bz#971933
    (QMP: add RHEL's vendor extension prefix)
  - Resolves: bz#971938
    (QMP: Add error reason to BLOCK_IO_ERROR event)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-21.el7
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007334]
  - Resolves: bz#1007334
    (CVE-2013-4344 qemu-kvm: qemu: buffer overflow in scsi_target_emulate_report_luns [rhel-7.0])


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-22.el7
changelog:
  - Fix ksmtuned with set_process_name=1 [bz#1027420]
  - Fix committed memory when no qemu-kvm running [bz#1027418]
  - kvm-virtio-net-fix-the-memory-leak-in-rxfilter_notify.patch [bz#1033810]
  - kvm-qom-Fix-memory-leak-in-object_property_set_link.patch [bz#1033810]
  - kvm-fix-intel-hda-live-migration.patch [bz#1036537]
  - kvm-vfio-pci-Release-all-MSI-X-vectors-when-disabled.patch [bz#1029743]
  - kvm-Query-KVM-for-available-memory-slots.patch [bz#921490]
  - kvm-block-Dont-ignore-previously-set-bdrv_flags.patch [bz#1039501]
  - kvm-cleanup-trace-events.pl-New.patch [bz#997832]
  - kvm-slavio_misc-Fix-slavio_led_mem_readw-_writew-tracepo.patch [bz#997832]
  - kvm-milkymist-minimac2-Fix-minimac2_read-_write-tracepoi.patch [bz#997832]
  - kvm-trace-events-Drop-unused-events.patch [bz#997832]
  - kvm-trace-events-Fix-up-source-file-comments.patch [bz#997832]
  - kvm-trace-events-Clean-up-with-scripts-cleanup-trace-eve.patch [bz#997832]
  - kvm-trace-events-Clean-up-after-removal-of-old-usb-host-.patch [bz#997832]
  - kvm-net-Update-netdev-peer-on-link-change.patch [bz#1027571]
  - Resolves: bz#1027418
    (ksmtuned committed_memory() still returns "", not 0, when no qemu running)
  - Resolves: bz#1027420
    (ksmtuned can’t handle libvirt WITH set_process_name=1)
  - Resolves: bz#1027571
    ([virtio-win]win8.1 guest network can not resume automatically after do "set_link tap1 on")
  - Resolves: bz#1029743
    (qemu-kvm core dump after hot plug/unplug 82576 PF about 100 times)
  - Resolves: bz#1033810
    (memory leak in using object_get_canonical_path())
  - Resolves: bz#1036537
    (Cross version migration from RHEL6.5 host to RHEL7.0 host with sound device failed.)
  - Resolves: bz#1039501
    ([provisioning] discard=on broken)
  - Resolves: bz#921490
    (qemu-kvm core dumped after hot plugging more than 11 VF through vfio-pci)
  - Resolves: bz#997832
    (Backport trace fixes proactively to avoid confusion and silly conflicts)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-23.el7
changelog:
  - kvm-qdev-monitor-Unref-device-when-device_add-fails.patch [bz#1003773]
  - kvm-qdev-Drop-misleading-qdev_free-function.patch [bz#1003773]
  - kvm-blockdev-fix-drive_init-opts-and-bs_opts-leaks.patch [bz#1003773]
  - kvm-libqtest-rename-qmp-to-qmp_discard_response.patch [bz#1003773]
  - kvm-libqtest-add-qmp-fmt-.-QDict-function.patch [bz#1003773]
  - kvm-blockdev-test-add-test-case-for-drive_add-duplicate-.patch [bz#1003773]
  - kvm-qdev-monitor-test-add-device_add-leak-test-cases.patch [bz#1003773]
  - kvm-qtest-Use-display-none-by-default.patch [bz#1003773]
  - Resolves: bz#1003773
    (When virtio-blk-pci device with dataplane is failed to be added, the drive cannot be released.)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-24.el7
changelog:
  - kvm-range-add-Range-structure.patch [bz#1034876]
  - kvm-range-add-Range-to-typedefs.patch [bz#1034876]
  - kvm-range-add-min-max-operations-on-ranges.patch [bz#1034876]
  - kvm-qdev-Add-SIZE-type-to-qdev-properties.patch [bz#1034876]
  - kvm-qapi-make-visit_type_size-fallback-to-type_int.patch [bz#1034876]
  - kvm-pc-move-IO_APIC_DEFAULT_ADDRESS-to-include-hw-i386-i.patch [bz#1034876]
  - kvm-pci-add-helper-to-retrieve-the-64-bit-range.patch [bz#1034876]
  - kvm-pci-fix-up-w64-size-calculation-helper.patch [bz#1034876]
  - kvm-refer-to-FWCfgState-explicitly.patch [bz#1034876]
  - kvm-fw_cfg-move-typedef-to-qemu-typedefs.h.patch [bz#1034876]
  - kvm-arch_init-align-MR-size-to-target-page-size.patch [bz#1034876]
  - kvm-loader-store-FW-CFG-ROM-files-in-RAM.patch [bz#1034876]
  - kvm-pci-store-PCI-hole-ranges-in-guestinfo-structure.patch [bz#1034876]
  - kvm-pc-pass-PCI-hole-ranges-to-Guests.patch [bz#1034876]
  - kvm-pc-replace-i440fx_common_init-with-i440fx_init.patch [bz#1034876]
  - kvm-pc-don-t-access-fw-cfg-if-NULL.patch [bz#1034876]
  - kvm-pc-add-I440FX-QOM-cast-macro.patch [bz#1034876]
  - kvm-pc-limit-64-bit-hole-to-2G-by-default.patch [bz#1034876]
  - kvm-q35-make-pci-window-address-size-match-guest-cfg.patch [bz#1034876]
  - kvm-q35-use-64-bit-window-programmed-by-guest.patch [bz#1034876]
  - kvm-piix-use-64-bit-window-programmed-by-guest.patch [bz#1034876]
  - kvm-pc-fix-regression-for-64-bit-PCI-memory.patch [bz#1034876]
  - kvm-cleanup-object.h-include-error.h-directly.patch [bz#1034876]
  - kvm-qom-cleanup-struct-Error-references.patch [bz#1034876]
  - kvm-qom-add-pointer-to-int-property-helpers.patch [bz#1034876]
  - kvm-fw_cfg-interface-to-trigger-callback-on-read.patch [bz#1034876]
  - kvm-loader-support-for-unmapped-ROM-blobs.patch [bz#1034876]
  - kvm-pcie_host-expose-UNMAPPED-macro.patch [bz#1034876]
  - kvm-pcie_host-expose-address-format.patch [bz#1034876]
  - kvm-q35-use-macro-for-MCFG-property-name.patch [bz#1034876]
  - kvm-q35-expose-mmcfg-size-as-a-property.patch [bz#1034876]
  - kvm-i386-add-ACPI-table-files-from-seabios.patch [bz#1034876]
  - kvm-acpi-add-rules-to-compile-ASL-source.patch [bz#1034876]
  - kvm-acpi-pre-compiled-ASL-files.patch [bz#1034876]
  - kvm-acpi-ssdt-pcihp-updat-generated-file.patch [bz#1034876]
  - kvm-loader-use-file-path-size-from-fw_cfg.h.patch [bz#1034876]
  - kvm-i386-add-bios-linker-loader.patch [bz#1034876]
  - kvm-loader-allow-adding-ROMs-in-done-callbacks.patch [bz#1034876]
  - kvm-i386-define-pc-guest-info.patch [bz#1034876]
  - kvm-acpi-piix-add-macros-for-acpi-property-names.patch [bz#1034876]
  - kvm-piix-APIs-for-pc-guest-info.patch [bz#1034876]
  - kvm-ich9-APIs-for-pc-guest-info.patch [bz#1034876]
  - kvm-pvpanic-add-API-to-access-io-port.patch [bz#1034876]
  - kvm-hpet-add-API-to-find-it.patch [bz#1034876]
  - kvm-hpet-fix-build-with-CONFIG_HPET-off.patch [bz#1034876]
  - kvm-acpi-add-interface-to-access-user-installed-tables.patch [bz#1034876]
  - kvm-pc-use-new-api-to-add-builtin-tables.patch [bz#1034876]
  - kvm-i386-ACPI-table-generation-code-from-seabios.patch [bz#1034876]
  - kvm-ssdt-fix-PBLK-length.patch [bz#1034876]
  - kvm-ssdt-proc-update-generated-file.patch [bz#1034876]
  - kvm-pc-disable-pci-info.patch [bz#1034876]
  - kvm-acpi-build-fix-build-on-glib-2.22.patch [bz#1034876]
  - kvm-acpi-build-fix-build-on-glib-2.14.patch [bz#1034876]
  - kvm-acpi-build-fix-support-for-glib-2.22.patch [bz#1034876]
  - kvm-acpi-build-Fix-compiler-warning-missing-gnu_printf-f.patch [bz#1034876]
  - kvm-exec-Fix-prototype-of-phys_mem_set_alloc-and-related.patch [bz#1034876]
  - Resolves: bz#1034876
    (export acpi tables to guests)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-25.el7
changelog:
  - kvm-Change-package-description.patch [bz#1017696]
  - kvm-seccomp-add-kill-to-the-syscall-whitelist.patch [bz#1026314]
  - kvm-json-parser-fix-handling-of-large-whole-number-value.patch [bz#997915]
  - kvm-qapi-add-QMP-input-test-for-large-integers.patch [bz#997915]
  - kvm-qapi-fix-visitor-serialization-tests-for-numbers-dou.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-visitor-serializat.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-QMP-output-visitor.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-QMP-input-visitor-.patch [bz#997915]
  - kvm-qapi-lack-of-two-commas-in-dict.patch [bz#997915]
  - kvm-tests-QAPI-schema-parser-tests.patch [bz#997915]
  - kvm-tests-Use-qapi-schema-test.json-as-schema-parser-tes.patch [bz#997915]
  - kvm-qapi.py-Restructure-lexer-and-parser.patch [bz#997915]
  - kvm-qapi.py-Decent-syntax-error-reporting.patch [bz#997915]
  - kvm-qapi.py-Reject-invalid-characters-in-schema-file.patch [bz#997915]
  - kvm-qapi.py-Fix-schema-parser-to-check-syntax-systematic.patch [bz#997915]
  - kvm-qapi.py-Fix-diagnosing-non-objects-at-a-schema-s-top.patch [bz#997915]
  - kvm-qapi.py-Rename-expr_eval-to-expr-in-parse_schema.patch [bz#997915]
  - kvm-qapi.py-Permit-comments-starting-anywhere-on-the-lin.patch [bz#997915]
  - kvm-scripts-qapi.py-Avoid-syntax-not-supported-by-Python.patch [bz#997915]
  - kvm-tests-Fix-schema-parser-test-for-in-tree-build.patch [bz#997915]
  - Resolves: bz#1017696
    ([branding] remove references to dynamic translation and user-mode emulation)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#997915
    (Backport new QAPI parser proactively to help developers and avoid silly conflicts)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-26.el7
changelog:
  - Add BuildRequires to libRDMAcm-devel for RDMA support [bz#1011720]
  - kvm-add-a-header-file-for-atomic-operations.patch [bz#1011720]
  - kvm-savevm-Fix-potential-memory-leak.patch [bz#1011720]
  - kvm-migration-Fail-migration-on-bdrv_flush_all-error.patch [bz#1011720]
  - kvm-rdma-add-documentation.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_update_position.patch [bz#1011720]
  - kvm-rdma-export-yield_until_fd_readable.patch [bz#1011720]
  - kvm-rdma-export-throughput-w-MigrationStats-QMP.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_file_mode_is_not_valid.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_ram_foreach_block.patch [bz#1011720]
  - kvm-rdma-new-QEMUFileOps-hooks.patch [bz#1011720]
  - kvm-rdma-introduce-capability-x-rdma-pin-all.patch [bz#1011720]
  - kvm-rdma-update-documentation-to-reflect-new-unpin-suppo.patch [bz#1011720]- kvm-rdma-bugfix-ram_control_save_page.patch [bz#1011720]
  - kvm-rdma-introduce-ram_handle_compressed.patch [bz#1011720]
  - kvm-rdma-core-logic.patch [bz#1011720]
  - kvm-rdma-send-pc.ram.patch [bz#1011720]
  - kvm-rdma-allow-state-transitions-between-other-states-be.patch [bz#1011720]
  - kvm-rdma-introduce-MIG_STATE_NONE-and-change-MIG_STATE_S.patch [bz#1011720]
  - kvm-rdma-account-for-the-time-spent-in-MIG_STATE_SETUP-t.patch [bz#1011720]
  - kvm-rdma-bugfix-make-IPv6-support-work.patch [bz#1011720]
  - kvm-rdma-forgot-to-turn-off-the-debugging-flag.patch [bz#1011720]
  - kvm-rdma-correct-newlines-in-error-statements.patch [bz#1011720]
  - kvm-rdma-don-t-use-negative-index-to-array.patch [bz#1011720]
  - kvm-rdma-qemu_rdma_post_send_control-uses-wrongly-RDMA_W.patch [bz#1011720]
  - kvm-rdma-use-DRMA_WRID_READY.patch [bz#1011720]
  - kvm-rdma-memory-leak-RDMAContext-host.patch [bz#1011720]
  - kvm-rdma-use-resp.len-after-validation-in-qemu_rdma_regi.patch [bz#1011720]
  - kvm-rdma-validate-RDMAControlHeader-len.patch [bz#1011720]
  - kvm-rdma-check-if-RDMAControlHeader-len-match-transferre.patch [bz#1011720]
  - kvm-rdma-proper-getaddrinfo-handling.patch [bz#1011720]
  - kvm-rdma-IPv6-over-Ethernet-RoCE-is-broken-in-linux-work.patch [bz#1011720]
  - kvm-rdma-remaining-documentation-fixes.patch [bz#1011720]
  - kvm-rdma-silly-ipv6-bugfix.patch [bz#1011720]
  - kvm-savevm-fix-wrong-initialization-by-ram_control_load_.patch [bz#1011720]
  - kvm-arch_init-right-return-for-ram_save_iterate.patch [bz#1011720]
  - kvm-rdma-clean-up-of-qemu_rdma_cleanup.patch [bz#1011720]
  - kvm-rdma-constify-ram_chunk_-index-start-end.patch [bz#1011720]
  - kvm-migration-Fix-debug-print-type.patch [bz#1011720]
  - kvm-arch_init-make-is_zero_page-accept-size.patch [bz#1011720]
  - kvm-migration-ram_handle_compressed.patch [bz#1011720]
  - kvm-migration-fix-spice-migration.patch [bz#1011720]
  - kvm-pci-assign-cap-number-of-devices-that-can-be-assigne.patch [bz#678368]
  - kvm-vfio-cap-number-of-devices-that-can-be-assigned.patch [bz#678368]
  - kvm-Revert-usb-tablet-Don-t-claim-wakeup-capability-for-.patch [bz#1039513]
  - kvm-mempath-prefault-pages-manually-v4.patch [bz#1026554]
  - Resolves: bz#1011720
    ([HP 7.0 Feat]: Backport RDMA based live guest migration changes from upstream to RHEL7.0 KVM)
  - Resolves: bz#1026554
    (qemu: mempath: prefault pages manually)
  - Resolves: bz#1039513
    (backport remote wakeup for ehci)
  - Resolves: bz#678368
    (RFE: Support more than 8 assigned devices)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-27.el7
changelog:
  - Change systemd service location [bz#1025217]
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1007710 bz#1029852]
  - Resolves: bz#1007710
    ([RFE] Enable qemu-img to support VMDK version 3)
  - Resolves: bz#1025217
    (systemd can't control ksm.service and ksmtuned.service)
  - Resolves: bz#1029852
    (qemu-img fails to convert vmdk image with "qemu-img: Could not open 'image.vmdk'")


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-28.el7
changelog:
  - kvm-virtio_pci-fix-level-interrupts-with-irqfd.patch [bz#1035132]
  - Resolves: bz#1035132
    (fail to boot and call trace with x-data-plane=on specified for rhel6.5 guest)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-29.el7
changelog:
  - kvm-QMP-Forward-port-__com.redhat_drive_del-from-RHEL-6.patch [bz#889051]
  - kvm-QMP-Forward-port-__com.redhat_drive_add-from-RHEL-6.patch [bz#889051]
  - kvm-HMP-Forward-port-__com.redhat_drive_add-from-RHEL-6.patch [bz#889051]
  - kvm-QMP-Document-throttling-parameters-of-__com.redhat_d.patch [bz#889051]
  - kvm-HMP-Disable-drive_add-for-Red-Hat-Enterprise-Linux.patch [bz#889051]
  - Resolves: bz#889051
    (Commands "__com.redhat_drive_add/del" don' t exist in RHEL7.0)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-30.el7
changelog:
  - kvm-Revert-HMP-Disable-drive_add-for-Red-Hat-Enterprise-2.patch.patch [bz#889051]
  - Resolves: bz#889051
    (Commands "__com.redhat_drive_add/del" don' t exist in RHEL7.0)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-32.el7
changelog:
  - kvm-block-change-default-of-.has_zero_init-to-0.patch.patch [bz#1007815]
  - kvm-iscsi-factor-out-sector-conversions.patch.patch [bz#1007815]
  - kvm-iscsi-add-logical-block-provisioning-information-to-.patch.patch [bz#1007815]
  - kvm-iscsi-add-.bdrv_get_block_status.patch.patch.patch [bz#1007815]
  - kvm-iscsi-split-discard-requests-in-multiple-parts.patch.patch.patch [bz#1007815]
  - kvm-block-make-BdrvRequestFlags-public.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-to-bdrv_-_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-introduce-BDRV_REQ_MAY_UNMAP-request-flag.patch.patch.patch [bz#1007815]
  - kvm-block-add-logical-block-provisioning-info-to-BlockDr.patch.patch.patch [bz#1007815]
  - kvm-block-add-wrappers-for-logical-block-provisioning-in.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-add-.bdrv_get_info.patch.patch [bz#1007815]
  - kvm-block-add-BlockLimits-structure-to-BlockDriverState.patch.patch.patch [bz#1007815]
  - kvm-block-raw-copy-BlockLimits-on-raw_open.patch.patch.patch [bz#1007815]
  - kvm-block-honour-BlockLimits-in-bdrv_co_do_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-honour-BlockLimits-in-bdrv_co_discard.patch.patch.patch [bz#1007815]
  - kvm-iscsi-set-limits-in-BlockDriverState.patch.patch.patch [bz#1007815]
  - kvm-iscsi-simplify-iscsi_co_discard.patch.patch.patch [bz#1007815]
  - kvm-iscsi-add-bdrv_co_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-introduce-bdrv_make_zero.patch.patch.patch [bz#1007815]
  - kvm-block-get_block_status-fix-BDRV_BLOCK_ZERO-for-unall.patch.patch.patch [bz#1007815]
  - kvm-qemu-img-add-support-for-fully-allocated-images.patch.patch.patch [bz#1007815]
  - kvm-qemu-img-conditionally-zero-out-target-on-convert.patch.patch.patch [bz#1007815]
  - kvm-block-generalize-BlockLimits-handling-to-cover-bdrv_.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-to-BlockRequest.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-argument-to-bdrv_co_write_zeroes-tra.patch.patch.patch [bz#1007815]
  - kvm-block-add-bdrv_aio_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-handle-ENOTSUP-from-discard-in-generic-code.patch.patch.patch [bz#1007815]
  - kvm-block-make-bdrv_co_do_write_zeroes-stricter-in-produ.patch.patch.patch [bz#1007815]
  - kvm-vpc-vhdx-add-get_info.patch.patch.patch [bz#1007815]
  - kvm-block-drivers-add-discard-write_zeroes-properties-to.patch.patch.patch [bz#1007815]
  - kvm-block-drivers-expose-requirement-for-write-same-alig.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-remove-.bdrv_has_zero_init.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-updated-copyright.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-check-WRITE-SAME-support-differently-dep.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-catch-write-protection-errors-in-UNMAP.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-reject-ANCHOR-1-for-UNMAP-and-WRITE-SAME-c.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-correctly-implement-WRITE-SAME.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-fix-WRITE-SAME-with-large-non-zero-payload.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-implement-write_zeroes-with-MAY_UNMAP-for-.patch.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-implement-write_zeroes-with-MAY_UNMAP-for-.patch.patch.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-add-support-for-write_zeroes-on-XFS-and-bl.patch.patch [bz#1007815]
  - kvm-qemu-iotests-033-is-fast.patch.patch [bz#1007815]
  - kvm-qemu-img-add-support-for-skipping-zeroes-in-input-du.patch.patch [bz#1007815]
  - kvm-qemu-img-fix-usage-instruction-for-qemu-img-convert.patch.patch [bz#1007815]
  - kvm-block-iscsi-set-bdi-cluster_size.patch.patch [bz#1007815]
  - kvm-block-add-opt_transfer_length-to-BlockLimits.patch.patch [bz#1039557]
  - kvm-block-iscsi-set-bs-bl.opt_transfer_length.patch.patch [bz#1039557]
  - kvm-qemu-img-dynamically-adjust-iobuffer-size-during-con.patch.patch [bz#1039557]
  - kvm-qemu-img-round-down-request-length-to-an-aligned-sec.patch.patch [bz#1039557]
  - kvm-qemu-img-decrease-progress-update-interval-on-conver.patch.patch [bz#1039557]
  - Resolves: bz#1007815
    (fix WRITE SAME support)
  - Resolves: bz#1039557
    (optimize qemu-img for thin provisioned images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-33.el7
changelog:
  - kvm-block-qemu-iotests-for-vhdx-read-sample-dynamic-imag.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG-usage-io-p.patch [bz#879234]
  - kvm-block-qemu-iotests-fix-_make_test_img-to-work-with-s.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG.base-usage.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG-usage-in-0.patch [bz#879234]
  - kvm-block-qemu-iotests-removes-duplicate-double-quotes-i.patch [bz#879234]
  - kvm-block-vhdx-minor-comments-and-typo-correction.patch [bz#879234]
  - kvm-block-vhdx-add-header-update-capability.patch [bz#879234]
  - kvm-block-vhdx-code-movement-VHDXMetadataEntries-and-BDR.patch [bz#879234]
  - kvm-block-vhdx-log-support-struct-and-defines.patch [bz#879234]
  - kvm-block-vhdx-break-endian-translation-functions-out.patch [bz#879234]
  - kvm-block-vhdx-update-log-guid-in-header-and-first-write.patch [bz#879234]
  - kvm-block-vhdx-code-movement-move-vhdx_close-above-vhdx_.patch [bz#879234]
  - kvm-block-vhdx-log-parsing-replay-and-flush-support.patch [bz#879234]
  - kvm-block-vhdx-add-region-overlap-detection-for-image-fi.patch [bz#879234]
  - kvm-block-vhdx-add-log-write-support.patch [bz#879234]
  - kvm-block-vhdx-write-support.patch [bz#879234]
  - kvm-block-vhdx-remove-BAT-file-offset-bit-shifting.patch [bz#879234]
  - kvm-block-vhdx-move-more-endian-translations-to-vhdx-end.patch [bz#879234]
  - kvm-block-vhdx-break-out-code-operations-to-functions.patch [bz#879234]
  - kvm-block-vhdx-fix-comment-typos-in-header-fix-incorrect.patch [bz#879234]
  - kvm-block-vhdx-add-.bdrv_create-support.patch [bz#879234]
  - kvm-block-vhdx-update-_make_test_img-to-filter-out-vhdx-.patch [bz#879234]
  - kvm-block-qemu-iotests-for-vhdx-add-write-test-support.patch [bz#879234]
  - kvm-block-vhdx-qemu-iotest-log-replay-of-data-sector.patch [bz#879234]
  - Resolves: bz#879234
    ([RFE] qemu-img: Add/improve support for VHDX format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-34.el7
changelog:
  - kvm-block-stream-Don-t-stream-unbacked-devices.patch [bz#965636]
  - kvm-qemu-io-Let-open-pass-options-to-block-driver.patch [bz#1004347]
  - kvm-qcow2.py-Subcommand-for-changing-header-fields.patch [bz#1004347]
  - kvm-qemu-iotests-Remaining-error-propagation-adjustments.patch [bz#1004347]
  - kvm-qemu-iotests-Add-test-for-inactive-L2-overlap.patch [bz#1004347]
  - kvm-qemu-iotests-Adjust-test-result-039.patch [bz#1004347]
  - kvm-virtio-net-don-t-update-mac_table-in-error-state.patch [bz#1048671]
  - kvm-qcow2-Zero-initialise-first-cluster-for-new-images.patch [bz#1032904]
  - Resolves: bz#1004347
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1032904
    (qemu-img can not create libiscsi qcow2_v3 image)
  - Resolves: bz#1048671
    (virtio-net: mac_table change isn't recovered in error state)
  - Resolves: bz#965636
    (streaming with no backing file should not do anything)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-35.el7
changelog:
  - kvm-option-Add-assigned-flag-to-QEMUOptionParameter.patch [bz#1033490]
  - kvm-qcow2-refcount-Snapshot-update-for-zero-clusters.patch [bz#1033490]
  - kvm-qemu-iotests-Snapshotting-zero-clusters.patch [bz#1033490]
  - kvm-block-Image-file-option-amendment.patch [bz#1033490]
  - kvm-qcow2-cache-Empty-cache.patch [bz#1033490]
  - kvm-qcow2-cluster-Expand-zero-clusters.patch [bz#1033490]
  - kvm-qcow2-Save-refcount-order-in-BDRVQcowState.patch [bz#1033490]
  - kvm-qcow2-Implement-bdrv_amend_options.patch [bz#1033490]
  - kvm-qcow2-Correct-bitmap-size-in-zero-expansion.patch [bz#1033490]
  - kvm-qcow2-Free-only-newly-allocated-clusters-on-error.patch [bz#1033490]
  - kvm-qcow2-Add-missing-space-in-error-message.patch [bz#1033490]
  - kvm-qemu-iotest-qcow2-image-option-amendment.patch [bz#1033490]
  - kvm-qemu-iotests-New-test-case-in-061.patch [bz#1033490]
  - kvm-qemu-iotests-Preallocated-zero-clusters-in-061.patch [bz#1033490]
  - Resolves: bz#1033490
    (Cannot upgrade/downgrade qcow2 images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-36.el7
changelog:
  - kvm-Add-support-statement-to-help-output.patch [bz#972773]
  - kvm-__com.redhat_qxl_screendump-add-docs.patch [bz#903910]
  - kvm-vl-Round-memory-sizes-below-2MiB-up-to-2MiB.patch [bz#999836]
  - kvm-seccomp-exit-if-seccomp_init-fails.patch [bz#1044845]
  - kvm-redhat-qemu-kvm.spec-require-python-for-build.patch [bz#1034876]
  - kvm-redhat-qemu-kvm.spec-require-iasl.patch [bz#1034876]
  - kvm-configure-make-iasl-option-actually-work.patch [bz#1034876]
  - kvm-redhat-qemu-kvm.spec-add-cpp-as-build-dependency.patch [bz#1034876]
  - kvm-acpi-build-disable-with-no-acpi.patch [bz#1045386]
  - kvm-ehci-implement-port-wakeup.patch [bz#1039513]
  - kvm-qdev-monitor-Fix-crash-when-device_add-is-called-wit.patch [bz#1026712 bz#1046007]
  - kvm-block-vhdx-improve-error-message-and-.bdrv_check-imp.patch [bz#1035001]
  - kvm-docs-updated-qemu-img-man-page-and-qemu-doc-to-refle.patch [bz#1017650]
  - kvm-enable-pvticketlocks-by-default.patch [bz#1052340]
  - kvm-fix-boot-strict-regressed-in-commit-6ef4716.patch [bz#997817]
  - kvm-vl-make-boot_strict-variable-static-not-used-outside.patch [bz#997817]
  - Resolves: bz#1017650
    (need to update qemu-img man pages on "VHDX" format)
  - Resolves: bz#1026712
    (Qemu core dumpd when boot guest with driver name as "virtio-pci")
  - Resolves: bz#1034876
    (export acpi tables to guests)
  - Resolves: bz#1035001
    (VHDX: journal log should not be replayed by default, but rather via qemu-img check -r all)
  - Resolves: bz#1039513
    (backport remote wakeup for ehci)
  - Resolves: bz#1044845
    (QEMU seccomp sandbox - exit if seccomp_init() fails)
  - Resolves: bz#1045386
    (qemu-kvm: hw/i386/acpi-build.c:135: acpi_get_pm_info: Assertion `obj' failed.)
  - Resolves: bz#1046007
    (qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0)
  - Resolves: bz#1052340
    (pvticketlocks: default on)
  - Resolves: bz#903910
    (RHEL7 does not have equivalent functionality for __com.redhat_qxl_screendump)
  - Resolves: bz#972773
    (RHEL7: Clarify support statement in KVM help)
  - Resolves: bz#997817
    (-boot order and -boot once regressed since RHEL-6)
  - Resolves: bz#999836
    (-m 1 crashes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-37.el7
changelog:
  - kvm-bitmap-use-long-as-index.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_flags-result-is.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-return-vo.patch [bz#997559]
  - kvm-exec-use-accessor-function-to-know-if-memory-is-dirt.patch [bz#997559]
  - kvm-memory-create-function-to-set-a-single-dirty-bit.patch [bz#997559]
  - kvm-exec-drop-useless-if.patch [bz#997559]
  - kvm-exec-create-function-to-get-a-single-dirty-bit.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_is_dirty-return-bool.patch [bz#997559]
  - kvm-memory-all-users-of-cpu_physical_memory_get_dirty-us.patch [bz#997559]
  - kvm-memory-set-single-dirty-flags-when-possible.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-always-di.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_mask_dirty_range-always-c.patch [bz#997559]
  - kvm-memory-use-bit-2-for-migration.patch [bz#997559]
  - kvm-memory-make-sure-that-client-is-always-inside-range.patch [bz#997559]
  - kvm-memory-only-resize-dirty-bitmap-when-memory-size-inc.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_clear_dirty_flag-result-i.patch [bz#997559]
  - kvm-bitmap-Add-bitmap_zero_extend-operation.patch [bz#997559]
  - kvm-memory-split-dirty-bitmap-into-three.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_clear_dirty_flag-i.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_set_dirty-in-its-o.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_set_dirty_flag.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_get_dirty-the-main-f.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_get_dirty-is-used-as-retu.patch [bz#997559]
  - kvm-memory-s-mask-clear-cpu_physical_memory_mask_dirty_r.patch [bz#997559]
  - kvm-memory-use-find_next_bit-to-find-dirty-bits.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-now-uses-.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_clear_dirty_range-now-use.patch [bz#997559]
  - kvm-memory-s-dirty-clean-in-cpu_physical_memory_is_dirty.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_reset_dirty-take-a-l.patch [bz#997559]
  - kvm-exec-Remove-unused-global-variable-phys_ram_fd.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_tracking-should.patch [bz#997559]
  - kvm-memory-move-private-types-to-exec.c.patch [bz#997559]
  - kvm-memory-split-cpu_physical_memory_-functions-to-its-o.patch [bz#997559]
  - kvm-memory-unfold-memory_region_test_and_clear.patch [bz#997559]
  - kvm-use-directly-cpu_physical_memory_-api-for-tracki.patch [bz#997559]
  - kvm-refactor-start-address-calculation.patch [bz#997559]
  - kvm-memory-move-bitmap-synchronization-to-its-own-functi.patch [bz#997559]
  - kvm-memory-syncronize-kvm-bitmap-using-bitmaps-operation.patch [bz#997559]
  - kvm-ram-split-function-that-synchronizes-a-range.patch [bz#997559]
  - kvm-migration-synchronize-memory-bitmap-64bits-at-a-time.patch [bz#997559]
  - Resolves: bz#997559
    (Improve live migration bitmap handling)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-38.el7
changelog:
  - kvm-intel-hda-fix-position-buffer.patch [bz#947785]
  - kvm-The-calculation-of-bytes_xfer-in-qemu_put_buffer-is-.patch [bz#1003467]
  - kvm-migration-Fix-rate-limit.patch [bz#1003467]
  - kvm-audio-honor-QEMU_AUDIO_TIMER_PERIOD-instead-of-wakin.patch [bz#1017636]
  - kvm-audio-Lower-default-wakeup-rate-to-100-times-second.patch [bz#1017636]
  - kvm-audio-adjust-pulse-to-100Hz-wakeup-rate.patch [bz#1017636]
  - kvm-pc-Fix-rhel6.-3dnow-3dnowext-compat-bits.patch [bz#918907]
  - kvm-add-firmware-to-machine-options.patch [bz#1038603]
  - kvm-switch-rhel7-machine-types-to-big-bios.patch [bz#1038603]
  - kvm-add-bios-256k.bin-from-seabios-bin-1.7.2.2-10.el7.no.patch [bz#1038603]
  - kvm-pci-fix-pci-bridge-fw-path.patch [bz#1034518]
  - kvm-hw-cannot_instantiate_with_device_add_yet-due-to-poi.patch [bz#1031098]
  - kvm-qdev-Document-that-pointer-properties-kill-device_ad.patch [bz#1031098]
  - kvm-Add-back-no-hpet-but-ignore-it.patch [bz#1044742]
  - Resolves: bz#1003467
    (Backport migration fixes from post qemu 1.6)
  - Resolves: bz#1017636
    (PATCH: fix qemu using 50% host cpu when audio is playing)
  - Resolves: bz#1031098
    (Disable device smbus-eeprom)
  - Resolves: bz#1034518
    (boot order wrong with q35)
  - Resolves: bz#1038603
    (make seabios 256k for rhel7 machine types)
  - Resolves: bz#1044742
    (Cannot create guest on remote RHEL7 host using F20 virt-manager, libvirt's qemu -no-hpet detection is broken)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#947785
    (In rhel6.4 guest  sound recorder doesn't work when  playing audio)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-39.el7
changelog:
  - kvm-Revert-qdev-monitor-Fix-crash-when-device_add-is-cal.patch [bz#669524]
  - kvm-Revert-qdev-Do-not-let-the-user-try-to-device_add-wh.patch [bz#669524]
  - kvm-qdev-monitor-Clean-up-qdev_device_add-variable-namin.patch [bz#669524]
  - kvm-qdev-monitor-Fix-crash-when-device_add-is-called.2.patch.patch [bz#669524]
  - kvm-qdev-monitor-Avoid-qdev-as-variable-name.patch [bz#669524]
  - kvm-qdev-monitor-Inline-qdev_init-for-device_add.patch [bz#669524]
  - kvm-qdev-Do-not-let-the-user-try-to-device_add-when-it.2.patch.patch [bz#669524]
  - kvm-qdev-monitor-Avoid-device_add-crashing-on-non-device.patch [bz#669524]
  - kvm-qdev-monitor-Improve-error-message-for-device-nonexi.patch [bz#669524]
  - kvm-exec-change-well-known-physical-sections-to-macros.patch [bz#1003535]
  - kvm-exec-separate-sections-and-nodes-per-address-space.patch [bz#1003535]
  - Resolves: bz#1003535
    (qemu-kvm core dump when boot vm with more than 32 virtio disks/nics)
  - Resolves: bz#669524
    (Confusing error message from -device <unknown dev>)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-40.el7
changelog:
  - kvm-avoid-a-bogus-COMPLETED-CANCELLED-transition.patch [bz#1053699]
  - kvm-introduce-MIG_STATE_CANCELLING-state.patch [bz#1053699]
  - kvm-vvfat-use-bdrv_new-to-allocate-BlockDriverState.patch [bz#1041301]
  - kvm-block-implement-reference-count-for-BlockDriverState.patch [bz#1041301]
  - kvm-block-make-bdrv_delete-static.patch [bz#1041301]
  - kvm-migration-omit-drive-ref-as-we-have-bdrv_ref-now.patch [bz#1041301]
  - kvm-xen_disk-simplify-blk_disconnect-with-refcnt.patch [bz#1041301]
  - kvm-nbd-use-BlockDriverState-refcnt.patch [bz#1041301]
  - kvm-block-use-BDS-ref-for-block-jobs.patch [bz#1041301]
  - kvm-block-Make-BlockJobTypes-const.patch [bz#1041301]
  - kvm-blockjob-rename-BlockJobType-to-BlockJobDriver.patch [bz#1041301]
  - kvm-qapi-Introduce-enum-BlockJobType.patch [bz#1041301]
  - kvm-qapi-make-use-of-new-BlockJobType.patch [bz#1041301]
  - kvm-mirror-Don-t-close-target.patch [bz#1041301]
  - kvm-mirror-Move-base-to-MirrorBlockJob.patch [bz#1041301]
  - kvm-block-Add-commit_active_start.patch [bz#1041301]
  - kvm-commit-Support-commit-active-layer.patch [bz#1041301]
  - kvm-qemu-iotests-prefill-some-data-to-test-image.patch [bz#1041301]
  - kvm-qemu-iotests-Update-test-cases-for-commit-active.patch [bz#1041301]
  - kvm-commit-Remove-unused-check.patch [bz#1041301]
  - kvm-blockdev-use-bdrv_getlength-in-qmp_drive_mirror.patch [bz#921890]
  - kvm-qemu-iotests-make-assert_no_active_block_jobs-common.patch [bz#921890]
  - kvm-block-drive-mirror-Check-for-NULL-backing_hd.patch [bz#921890]
  - kvm-qemu-iotests-Extend-041-for-unbacked-mirroring.patch [bz#921890]
  - kvm-qapi-schema-Update-description-for-NewImageMode.patch [bz#921890]
  - kvm-block-drive-mirror-Reuse-backing-HD-for-sync-none.patch [bz#921890]
  - kvm-qemu-iotests-Fix-test-041.patch [bz#921890]
  - kvm-scsi-bus-fix-transfer-length-and-direction-for-VERIF.patch [bz#1035644]
  - kvm-scsi-disk-fix-VERIFY-emulation.patch [bz#1035644]
  - kvm-block-ensure-bdrv_drain_all-works-during-bdrv_delete.patch [bz#1041301]
  - kvm-use-recommended-max-vcpu-count.patch [bz#998708]
  - kvm-pc-Create-pc_compat_rhel-functions.patch [bz#1049706]
  - kvm-pc-Enable-x2apic-by-default-on-more-recent-CPU-model.patch [bz#1049706]
  - kvm-Build-all-subpackages-for-RHEV.patch [bz#1007204]
  - Resolves: bz#1007204
    (qemu-img-rhev  qemu-kvm-rhev-tools are not built for qemu-kvm-1.5.3-3.el7)
  - Resolves: bz#1035644
    (rhel7.0host + windows guest + virtio-win + 'chkdsk' in the guest gives qemu assertion in scsi_dma_complete)
  - Resolves: bz#1041301
    (live snapshot merge (commit) of the active layer)
  - Resolves: bz#1049706
    (MIss CPUID_EXT_X2APIC in Westmere cpu model)
  - Resolves: bz#1053699
    (Backport Cancelled race condition fixes)
  - Resolves: bz#921890
    (Core dump when block mirror with "sync" is "none" and mode is "absolute-paths")
  - Resolves: bz#998708
    (qemu-kvm: maximum vcpu should be recommended maximum)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-41.el7
changelog:
  - kvm-help-add-id-suboption-to-iscsi.patch [bz#1019221]
  - kvm-scsi-disk-add-UNMAP-limits-to-block-limits-VPD-page.patch [bz#1037503]
  - kvm-qdev-Fix-32-bit-compilation-in-print_size.patch [bz#1034876]
  - kvm-qdev-Use-clz-in-print_size.patch [bz#1034876]
  - Resolves: bz#1019221
    (Iscsi miss id sub-option in help output)
  - Resolves: bz#1034876
    (export acpi tables to guests)
  - Resolves: bz#1037503
    (fix thin provisioning support for block device backends)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-43.el7
changelog:
  - kvm-piix-gigabyte-alignment-for-ram.patch [bz#1026548]
  - kvm-pc_piix-document-gigabyte_align.patch [bz#1026548]
  - kvm-q35-gigabyle-alignment-for-ram.patch [bz#1026548]
  - kvm-virtio-bus-remove-vdev-field.patch [bz#983344]
  - kvm-virtio-pci-remove-vdev-field.patch [bz#983344]
  - kvm-virtio-bus-cleanup-plug-unplug-interface.patch [bz#983344]
  - kvm-virtio-blk-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-serial-switch-exit-callback-to-VirtioDeviceCl.patch [bz#983344]
  - kvm-virtio-net-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-scsi-switch-exit-callback-to-VirtioDeviceClas.patch [bz#983344]
  - kvm-virtio-balloon-switch-exit-callback-to-VirtioDeviceC.patch [bz#983344]
  - kvm-virtio-rng-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-pci-add-device_unplugged-callback.patch [bz#983344]
  - kvm-block-use-correct-filename-for-error-report.patch [bz#1051438]
  - Resolves: bz#1026548
    (i386: pc: align gpa<->hpa on 1GB boundary)
  - Resolves: bz#1051438
    (Error message contains garbled characters when unable to open image due to bad permissions (permission denied).)
  - Resolves: bz#983344
    (QEMU core dump and host will reboot when do hot-unplug a virtio-blk disk which use  the switch behind switch)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-44.el7
changelog:
  - kvm-Partially-revert-rhel-Drop-cfi.pflash01-and-isa-ide-.patch [bz#1032346]
  - kvm-Revert-pc-Disable-the-use-flash-device-for-BIOS-unle.patch [bz#1032346]
  - kvm-memory-Replace-open-coded-memory_region_is_romd.patch [bz#1032346]
  - kvm-memory-Rename-readable-flag-to-romd_mode.patch [bz#1032346]
  - kvm-isapc-Fix-non-KVM-qemu-boot-read-write-memory-for-is.patch [bz#1032346]
  - kvm-add-kvm_readonly_mem_enabled.patch [bz#1032346]
  - kvm-support-using-KVM_MEM_READONLY-flag-for-regions.patch [bz#1032346]
  - kvm-pc_sysfw-allow-flash-pflash-memory-to-be-used-with-K.patch [bz#1032346]
  - kvm-fix-double-free-the-memslot-in-kvm_set_phys_mem.patch [bz#1032346]
  - kvm-sysfw-remove-read-only-pc_sysfw_flash_vs_rom_bug_com.patch [bz#1032346]
  - kvm-pc_sysfw-remove-the-rom_only-property.patch [bz#1032346]
  - kvm-pc_sysfw-do-not-make-it-a-device-anymore.patch [bz#1032346]
  - kvm-hw-i386-pc_sysfw-support-two-flash-drives.patch [bz#1032346]
  - kvm-i440fx-test-qtest_start-should-be-paired-with-qtest_.patch [bz#1032346]
  - kvm-i440fx-test-give-each-GTest-case-its-own-qtest.patch [bz#1032346]
  - kvm-i440fx-test-generate-temporary-firmware-blob.patch [bz#1032346]
  - kvm-i440fx-test-verify-firmware-under-4G-and-1M-both-bio.patch [bz#1032346]
  - kvm-piix-fix-32bit-pci-hole.patch [bz#1032346]
  - kvm-qapi-Add-backing-to-BlockStats.patch [bz#1041564]
  - kvm-pc-Disable-RDTSCP-unconditionally-on-rhel6.-machine-.patch [bz#918907]
  - kvm-pc-Disable-RDTSCP-on-AMD-CPU-models.patch [bz#1056428 bz#874400]
  - kvm-block-add-.bdrv_reopen_prepare-stub-for-iscsi.patch [bz#1030301]
  - Resolves: bz#1030301
    (qemu-img can not merge live snapshot to backing file(r/w backing file via libiscsi))
  - Resolves: bz#1032346
    (basic OVMF support (non-volatile UEFI variables in flash, and fixup for ACPI tables))
  - Resolves: bz#1041564
    ([NFR] qemu: Returning the watermark for all the images opened for writing)
  - Resolves: bz#1056428
    ("rdtscp" flag defined on Opteron_G5 model and cann't be exposed to guest)
  - Resolves: bz#874400
    ("rdtscp" flag defined on Opteron_G5 model and cann't be exposed to guest)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-45.el7
changelog:
  - kvm-vfio-pci-Fail-initfn-on-DMA-mapping-errors.patch [bz#1044815]
  - kvm-vfio-Destroy-memory-regions.patch [bz#1052030]
  - kvm-docs-qcow2-compat-1.1-is-now-the-default.patch [bz#1048092]
  - kvm-hda-codec-disable-streams-on-reset.patch [bz#947812]
  - kvm-QEMUBH-make-AioContext-s-bh-re-entrant.patch [bz#1009297]
  - kvm-qxl-replace-pipe-signaling-with-bottom-half.patch [bz#1009297]
  - Resolves: bz#1009297
    (RHEL7.0 guest gui can not be used in dest host after migration)
  - Resolves: bz#1044815
    (vfio initfn succeeds even if IOMMU mappings fail)
  - Resolves: bz#1048092
    (manpage of qemu-img contains error statement about compat option)
  - Resolves: bz#1052030
    (src qemu-kvm core dump after hotplug/unhotplug GPU device and do local migration)
  - Resolves: bz#947812
    (There's a shot voice after  'system_reset'  during playing music inside rhel6 guest w/ intel-hda device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-46.el7
changelog:
  - kvm-block-fix-backing-file-segfault.patch [bz#748906]
  - kvm-block-Move-initialisation-of-BlockLimits-to-bdrv_ref.patch [bz#748906]
  - kvm-raw-Fix-BlockLimits-passthrough.patch [bz#748906]
  - kvm-block-Inherit-opt_transfer_length.patch [bz#748906]
  - kvm-block-Update-BlockLimits-when-they-might-have-change.patch [bz#748906]
  - kvm-qemu_memalign-Allow-small-alignments.patch [bz#748906]
  - kvm-block-Detect-unaligned-length-in-bdrv_qiov_is_aligne.patch [bz#748906]
  - kvm-block-Don-t-use-guest-sector-size-for-qemu_blockalig.patch [bz#748906]
  - kvm-block-rename-buffer_alignment-to-guest_block_size.patch [bz#748906]
  - kvm-raw-Probe-required-direct-I-O-alignment.patch [bz#748906]
  - kvm-block-Introduce-bdrv_aligned_preadv.patch [bz#748906]
  - kvm-block-Introduce-bdrv_co_do_preadv.patch [bz#748906]
  - kvm-block-Introduce-bdrv_aligned_pwritev.patch [bz#748906]
  - kvm-block-write-Handle-COR-dependency-after-I-O-throttli.patch [bz#748906]
  - kvm-block-Introduce-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-block-Switch-BdrvTrackedRequest-to-byte-granularity.patch [bz#748906]
  - kvm-block-Allow-waiting-for-overlapping-requests-between.patch [bz#748906]
  - kvm-block-use-DIV_ROUND_UP-in-bdrv_co_do_readv.patch [bz#748906]
  - kvm-block-Make-zero-after-EOF-work-with-larger-alignment.patch [bz#748906]
  - kvm-block-Generalise-and-optimise-COR-serialisation.patch [bz#748906]
  - kvm-block-Make-overlap-range-for-serialisation-dynamic.patch [bz#748906]
  - kvm-block-Fix-32-bit-truncation-in-mark_request_serialis.patch [bz#748906]
  - kvm-block-Allow-wait_serialising_requests-at-any-point.patch [bz#748906]
  - kvm-block-Align-requests-in-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-lock-Fix-memory-leaks-in-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-block-Assert-serialisation-assumptions-in-pwritev.patch [bz#748906]
  - kvm-block-Change-coroutine-wrapper-to-byte-granularity.patch [bz#748906]
  - kvm-block-Make-bdrv_pread-a-bdrv_prwv_co-wrapper.patch [bz#748906]
  - kvm-block-Make-bdrv_pwrite-a-bdrv_prwv_co-wrapper.patch [bz#748906]
  - kvm-iscsi-Set-bs-request_alignment.patch [bz#748906]
  - kvm-blkdebug-Make-required-alignment-configurable.patch [bz#748906]
  - kvm-blkdebug-Don-t-leak-bs-file-on-failure.patch [bz#748906]
  - kvm-qemu-io-New-command-sleep.patch [bz#748906]
  - kvm-qemu-iotests-Filter-out-qemu-io-prompt.patch [bz#748906]
  - kvm-qemu-iotests-Test-pwritev-RMW-logic.patch [bz#748906]
  - kvm-block-bdrv_aligned_pwritev-Assert-overlap-range.patch [bz#748906]
  - kvm-block-Don-t-call-ROUND_UP-with-negative-values.patch [bz#748906]
  - Resolves: bz#748906
    (qemu fails on disk with 4k sectors and cache=off)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-47.el7
changelog:
  - kvm-seccomp-add-mkdir-and-fchmod-to-the-whitelist.patch [bz#1026314]
  - kvm-seccomp-add-some-basic-shared-memory-syscalls-to-the.patch [bz#1026314]
  - kvm-scsi-Support-TEST-UNIT-READY-in-the-dummy-LUN0.patch [bz#1004143]
  - kvm-usb-add-vendor-request-defines.patch [bz#1039530]
  - kvm-usb-move-usb_-hi-lo-helpers-to-header-file.patch [bz#1039530]
  - kvm-usb-add-support-for-microsoft-os-descriptors.patch [bz#1039530]
  - kvm-usb-add-microsoft-os-descriptors-compat-property.patch [bz#1039530]
  - kvm-usb-hid-add-microsoft-os-descriptor-support.patch [bz#1039530]
  - kvm-configure-add-option-to-disable-fstack-protect.patch [bz#1044182]
  - kvm-exec-always-use-MADV_DONTFORK.patch [bz#1004197]
  - kvm-pc-Save-size-of-RAM-below-4GB.patch [bz#1048080]
  - kvm-acpi-Fix-PCI-hole-handling-on-build_srat.patch [bz#1048080]
  - kvm-Add-check-for-cache-size-smaller-than-page-size.patch [bz#1017096]
  - kvm-XBZRLE-cache-size-should-not-be-larger-than-guest-me.patch [bz#1047448]
  - kvm-Don-t-abort-on-out-of-memory-when-creating-page-cach.patch [bz#1047448]
  - kvm-Don-t-abort-on-memory-allocation-error.patch [bz#1047448]
  - kvm-Set-xbzrle-buffers-to-NULL-after-freeing-them-to-avo.patch [bz#1038540]
  - kvm-migration-fix-free-XBZRLE-decoded_buf-wrong.patch [bz#1038540]
  - kvm-block-resize-backing-file-image-during-offline-commi.patch [bz#1047254]
  - kvm-block-resize-backing-image-during-active-layer-commi.patch [bz#1047254]
  - kvm-block-update-block-commit-documentation-regarding-im.patch [bz#1047254]
  - kvm-block-Fix-bdrv_commit-return-value.patch [bz#1047254]
  - kvm-block-remove-QED-.bdrv_make_empty-implementation.patch [bz#1047254]
  - kvm-block-remove-qcow2-.bdrv_make_empty-implementation.patch [bz#1047254]
  - kvm-qemu-progress-Drop-unused-include.patch [bz#997878]
  - kvm-qemu-progress-Fix-progress-printing-on-SIGUSR1.patch [bz#997878]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#997878]
  - Resolves: bz#1004143
    ("test unit ready failed" on LUN 0 delays boot when a virtio-scsi target does not have any disk on LUN 0)
  - Resolves: bz#1004197
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#1017096
    (Fail to migrate while the size of migrate-compcache less then 4096)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1038540
    (qemu-kvm aborted while cancel migration then restart it (with page delta compression))
  - Resolves: bz#1039530
    (add support for microsoft os descriptors)
  - Resolves: bz#1044182
    (Relax qemu-kvm stack protection to -fstack-protector-strong)
  - Resolves: bz#1047254
    (qemu-img failed to commit image)
  - Resolves: bz#1047448
    (qemu-kvm core  dump in src host when do migration with "migrate_set_capability xbzrle on and migrate_set_cache_size 10000G")
  - Resolves: bz#1048080
    (Qemu-kvm NUMA emulation failed)
  - Resolves: bz#997878
    (Kill -SIGUSR1 `pidof qemu-img convert` can not get progress of qemu-img)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-48.el7
changelog:
  - kvm-spec-disable-qom-cast-debug.patch [bz#1063942]
  - kvm-fix-guest-physical-bits-to-match-host-to-go-beyond-1.patch [bz#989677]
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1065225]
  - Resolves: bz#1063942
    (configure qemu-kvm with --disable-qom-cast-debug)
  - Resolves: bz#1065225
    (QMP socket breaks on unexpected close)
  - Resolves: bz#989677
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-49.el7
changelog:
  - kvm-xhci-add-support-for-suspend-resume.patch [bz#1012365]
  - kvm-qcow2-remove-n_start-and-n_end-of-qcow2_alloc_cluste.patch [bz#1049176]
  - kvm-qcow2-fix-offset-overflow-in-qcow2_alloc_clusters_at.patch [bz#1049176]
  - kvm-qcow2-check-for-NULL-l2meta.patch [bz#1055848]
  - kvm-qemu-iotests-add-test-for-qcow2-preallocation-with-d.patch [bz#1055848]
  - Resolves: bz#1012365
    (xhci usb storage lost in guest after wakeup from S3)
  - Resolves: bz#1049176
    (qemu-img core dump when using "-o preallocation=metadata,cluster_size=2048k" to create image of libiscsi lun)
  - Resolves: bz#1055848
    (qemu-img core dumped when cluster size is larger than the default value with opreallocation=metadata specified)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-50.el7
changelog:
  - kvm-mempath-prefault-fix-off-by-one-error.patch [bz#1069039]
  - kvm-qemu-option-has_help_option-and-is_valid_option_list.patch [bz#1065873]
  - kvm-qemu-img-create-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-convert-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-amend-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-Allow-o-help-with-incomplete-argument-list.patch [bz#1065873]
  - kvm-qemu-iotests-Check-qemu-img-command-line-parsing.patch [bz#1065873]
  - Resolves: bz#1065873
    (qemu-img silently ignores options with multiple -o parameters)
  - Resolves: bz#1069039
    (-mem-prealloc option behaviour is opposite to expected)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-51.el7
changelog:
  - kvm-qmp-access-the-local-QemuOptsLists-for-drive-option.patch [bz#1026184]
  - kvm-qxl-add-sanity-check.patch [bz#751937]
  - kvm-Fix-two-XBZRLE-corruption-issues.patch [bz#1063417]
  - kvm-qdev-monitor-set-DeviceState-opts-before-calling-rea.patch [bz#1037956]
  - kvm-vfio-blacklist-loading-of-unstable-roms.patch [bz#1037956]
  - kvm-block-Set-block-filename-sizes-to-PATH_MAX-instead-o.patch [bz#1072339]
  - Resolves: bz#1026184
    (QMP: querying -drive option returns a NULL parameter list)
  - Resolves: bz#1037956
    (bnx2x: boot one guest to do vfio-pci with all PFs assigned in same group meet QEMU segmentation fault (Broadcom BCM57810 card))
  - Resolves: bz#1063417
    (google stressapptest vs Migration)
  - Resolves: bz#1072339
    (RHEV: Cannot start VMs that have more than 23 snapshots.)
  - Resolves: bz#751937
    (qxl triggers assert during iofuzz test)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-52.el7
changelog:
  - kvm-target-i386-Move-hyperv_-static-globals-to-X86CPU.patch [bz#1004773]
  - kvm-Fix-uninitialized-cpuid_data.patch [bz#1057173]
  - kvm-fix-coexistence-of-KVM-and-Hyper-V-leaves.patch [bz#1004773]
  - kvm-make-availability-of-Hyper-V-enlightenments-depe.patch [bz#1004773]
  - kvm-make-hyperv-hypercall-and-guest-os-id-MSRs-migra.patch [bz#1004773]
  - kvm-make-hyperv-vapic-assist-page-migratable.patch [bz#1004773]
  - kvm-target-i386-Convert-hv_relaxed-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-hv_vapic-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-hv_spinlocks-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-check-and-enforce-to-static-prop.patch [bz#1004773]
  - kvm-target-i386-Cleanup-foo-feature-handling.patch [bz#1057173]
  - kvm-add-support-for-hyper-v-timers.patch [bz#1057173]
  - Resolves: bz#1004773
    (Hyper-V guest OS id and hypercall MSRs not migrated)
  - Resolves: bz#1057173
    (KVM Hyper-V Enlightenment - New feature - hv-time (QEMU))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-53.el7
changelog:
  - kvm-dataplane-Fix-startup-race.patch [bz#1069541]
  - kvm-QMP-Relax-__com.redhat_drive_add-parameter-checking.patch [bz#1057471]
  - kvm-all-exit-in-case-max-vcpus-exceeded.patch [bz#993429]
  - kvm-block-gluster-code-movements-state-storage-changes.patch [bz#1031526]
  - kvm-block-gluster-add-reopen-support.patch [bz#1031526]
  - kvm-virtio-net-add-feature-bit-for-any-header-s-g.patch [bz#990989]
  - kvm-spec-Add-README.rhel6-gpxe-source.patch [bz#1073774]
  - kvm-pc-Add-RHEL6-e1000-gPXE-image.patch [bz#1073774]
  - kvm-loader-rename-in_ram-has_mr.patch [bz#1064018]
  - kvm-pc-avoid-duplicate-names-for-ROM-MRs.patch [bz#1064018]
  - kvm-qemu-img-convert-Fix-progress-output.patch [bz#1073728]
  - kvm-qemu-iotests-Test-progress-output-for-conversion.patch [bz#1073728]
  - kvm-iscsi-Use-bs-sg-for-everything-else-than-disks.patch [bz#1067784]
  - kvm-block-Fix-bs-request_alignment-assertion-for-bs-sg-1.patch [bz#1067784]
  - kvm-qemu_file-use-fwrite-correctly.patch [bz#1005103]
  - kvm-qemu_file-Fix-mismerge-of-use-fwrite-correctly.patch [bz#1005103]
  - Resolves: bz#1005103
    (Migration should fail when migrate guest offline to a file which is specified to a readonly directory.)
  - Resolves: bz#1031526
    (Can not commit snapshot when disk is using glusterfs:native backend)
  - Resolves: bz#1057471
    (fail to do hot-plug with "discard = on" with "Invalid parameter 'discard'" error)
  - Resolves: bz#1064018
    (abort from conflicting genroms)
  - Resolves: bz#1067784
    (qemu-kvm: block.c:850: bdrv_open_common: Assertion `bs->request_alignment != 0' failed. Aborted (core dumped))
  - Resolves: bz#1069541
    (Segmentation fault when boot guest with dataplane=on)
  - Resolves: bz#1073728
    (progress bar doesn't display when converting with -p)
  - Resolves: bz#1073774
    (e1000 ROM cause migrate fail  from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#990989
    (backport inline header virtio-net optimization)
  - Resolves: bz#993429
    (kvm: test maximum number of vcpus supported (rhel7))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-54.el7
changelog:
  - kvm-qdev-monitor-Set-properties-after-parent-is-assigned.patch [bz#1046248]
  - kvm-block-Update-image-size-in-bdrv_invalidate_cache.patch [bz#1048575]
  - kvm-qcow2-Keep-option-in-qcow2_invalidate_cache.patch [bz#1048575]
  - kvm-qcow2-Check-bs-drv-in-copy_sectors.patch [bz#1048575]
  - kvm-block-bs-drv-may-be-NULL-in-bdrv_debug_resume.patch [bz#1048575]
  - kvm-iotests-Test-corruption-during-COW-request.patch [bz#1048575]
  - Resolves: bz#1046248
    (qemu-kvm crash when send "info qtree" after hot plug a device with invalid addr)
  - Resolves: bz#1048575
    (Segmentation fault occurs after migrate guest(use scsi disk and add stress) to des machine)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-55.el7
changelog:
  - kvm-scsi-Change-scsi-sense-buf-size-to-252.patch [bz#1058173]
  - kvm-scsi-Fix-migration-of-scsi-sense-data.patch [bz#1058173]
  - Resolves: bz#1058173
    (qemu-kvm core dump booting guest with scsi-generic disk attached when using built-in iscsi driver)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-56.el7
changelog:
  - kvm-configure-Fix-bugs-preventing-Ceph-inclusion.patch [bz#1078809]
  - Resolves: bz#1078809
    (can not boot qemu-kvm-rhev with rbd image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-57.el7
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078308]
  - Resolves: bz#1078308
    (EMBARGOED CVE-2014-0150 qemu: virtio-net: fix guest-triggerable buffer overrun [rhel-7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-58.el7
changelog:
  - kvm-pc-Use-cpu64-rhel6-CPU-model-by-default-on-rhel6-mac.patch [bz#1080170]
  - kvm-target-i386-Copy-cpu64-rhel6-definition-into-qemu64.patch [bz#1078607 bz#1080170]
  - Resolves: bz#1080170
    (intel 82576 VF not work in windows 2008 x86 - Code 12 [TestOnly])
  - Resolves: bz#1080170
    (Default CPU model for rhel6.* machine-types is different from RHEL-6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-59.el7
changelog:
  - kvm-qemu-iotests-add-.-check-cloop-support.patch [bz#1066691]
  - kvm-qemu-iotests-add-cloop-input-validation-tests.patch [bz#1066691]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079455]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079320]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079455]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079455]
  - kvm-size-off-by-one.patch [bz#1066691]
  - kvm-qemu-iotests-Support-for-bochs-format.patch [bz#1066691]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1066691]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079339]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079320]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079315]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1066691]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079455]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079315]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079455]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079346]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079455]
  - kvm-qcow2-Check-header_length-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1066691]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079455]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079455]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1066691]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079339]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079320]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1066691]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1066691]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1066691]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079320]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1066691]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1066691]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1066691]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1066691]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079325]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1066691]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079325]
  - kvm-block-vdi-bounds-check-qemu-io-tests.patch [bz#1066691]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079320]
  - kvm-qcow2-Fix-copy_sectors-with-VM-state.patch [bz#1066691]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079333]
  - kvm-qcow2-Fix-L1-allocation-size-in-qcow2_snapshot_load_.patch [bz#1079325]
  - kvm-qcow2-Check-maximum-L1-size-in-qcow2_snapshot_load_t.patch [bz#1079320]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1066691]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079320]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079315]
  - kvm-fix-machine-check-propagation.patch [bz#740107]
  - Resolves: bz#1066691
    (qemu-kvm: include leftover patches from block layer security audit)
  - Resolves: bz#1079315
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-7.0])
  - Resolves: bz#1079320
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-7.0])
  - Resolves: bz#1079325
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-7.0])
  - Resolves: bz#1079333
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-7.0])
  - Resolves: bz#1079339
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-7.0])
  - Resolves: bz#1079346
    (CVE-2014-0148 qemu-kvm: Qemu: vhdx: bounds checking for block_size and logical_sector_size [rhel-7.0])
  - Resolves: bz#1079455
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-7.0])
  - Resolves: bz#740107
    ([Hitachi 7.0 FEAT]  KVM: MCA Recovery for KVM guest OS memory)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-60.el7
changelog:
  - kvm-qcow2-fix-dangling-refcount-table-entry.patch [bz#1081793]
  - kvm-qcow2-link-all-L2-meta-updates-in-preallocate.patch [bz#1081393]
  - Resolves: bz#1081393
    (qemu-img will prompt that 'leaked clusters were found' while creating images with '-o preallocation=metadata,cluster_size<=1024')
  - Resolves: bz#1081793
    (qemu-img core dumped when creating a qcow2 image base on block device(iscsi or libiscsi))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-61.el7
changelog:
  - kvm-iscsi-fix-indentation.patch [bz#1083413]
  - kvm-iscsi-correctly-propagate-errors-in-iscsi_open.patch [bz#1083413]
  - kvm-block-iscsi-query-for-supported-VPD-pages.patch [bz#1083413]
  - kvm-block-iscsi-fix-segfault-if-writesame-fails.patch [bz#1083413]
  - kvm-iscsi-recognize-invalid-field-ASCQ-from-WRITE-SAME-c.patch [bz#1083413]
  - kvm-iscsi-ignore-flushes-on-scsi-generic-devices.patch [bz#1083413]
  - kvm-iscsi-always-query-max-WRITE-SAME-length.patch [bz#1083413]
  - kvm-iscsi-Don-t-set-error-if-already-set-in-iscsi_do_inq.patch [bz#1083413]
  - kvm-iscsi-Remember-to-set-ret-for-iscsi_open-in-error-ca.patch [bz#1083413]
  - kvm-qemu_loadvm_state-shadow-SeaBIOS-for-VM-incoming-fro.patch [bz#1027565]
  - kvm-uhci-UNfix-irq-routing-for-RHEL-6-machtypes-RHEL-onl.patch [bz#1085701]
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087980]
  - Resolves: bz#1027565
    (fail to reboot guest after migration from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#1083413
    (qemu-kvm: iSCSI: Failure. SENSE KEY:ILLEGAL_REQUEST(5) ASCQ:INVALID_FIELD_IN_CDB(0x2400))
  - Resolves: bz#1085701
    (Guest hits call trace migrate from RHEL6.5 to RHEL7.0 host with -M 6.1 & balloon & uhci device)
  - Resolves: bz#1087980
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-62.el7
changelog:
  - kvm-pc-add-hot_add_cpu-callback-to-all-machine-types.patch [bz#1094285]
  - Resolves: bz#1094285
    (Hot plug CPU not working with RHEL6  machine types running on RHEL7 host.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-63.el7
changelog:
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1038914]
  - kvm-qcow2-Free-preallocated-zero-clusters.patch [bz#1052093]
  - kvm-qemu-iotests-Discard-preallocated-zero-clusters.patch [bz#1052093]
  - kvm-XBZRLE-Fix-qemu-crash-when-resize-the-xbzrle-cache.patch [bz#1066338]
  - kvm-Provide-init-function-for-ram-migration.patch [bz#1066338]
  - kvm-Init-the-XBZRLE.lock-in-ram_mig_init.patch [bz#1066338]
  - kvm-XBZRLE-Fix-one-XBZRLE-corruption-issues.patch [bz#1066338]
  - kvm-Count-used-RAMBlock-pages-for-migration_dirty_pages.patch [bz#1074913]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095678]
  - kvm-virtio-net-out-of-bounds-buffer-write-on-invalid-sta.patch [bz#1095690]
  - kvm-virtio-net-out-of-bounds-buffer-write-on-load.patch [bz#1095685]
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095695]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095738]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095742]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095783]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095766]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095766]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095747]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_l2.patch [bz#1095747]
  - kvm-vmstate-reduce-code-duplication.patch [bz#1095716]
  - kvm-vmstate-add-VMS_MUST_EXIST.patch [bz#1095716]
  - kvm-vmstate-add-VMSTATE_VALIDATE.patch [bz#1095716]
  - kvm-hpet-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095707]
  - kvm-hw-pci-pcie_aer.c-fix-buffer-overruns-on-invalid-sta.patch [bz#1095716]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096829]
  - kvm-qcow-correctly-propagate-errors.patch [bz#1097230]
  - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097230]
  - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097230]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097230]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097237]
  - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097237]
  - Resolves: bz#1038914
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)
  - Resolves: bz#1052093
    (qcow2 corruptions (leaked clusters after installing a rhel7 guest using virtio_scsi))
  - Resolves: bz#1066338
    (Reduce the migrate cache size during migration causes qemu segment fault)
  - Resolves: bz#1074913
    (migration can not finish with 1024k 'remaining ram' left after hotunplug 4 nics)
  - Resolves: bz#1095678
    (CVE-2013-4148 qemu-kvm: qemu: virtio-net: buffer overflow on invalid state load [rhel-7.1])
  - Resolves: bz#1095685
    (CVE-2013-4149 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on load [rhel-7.1])
  - Resolves: bz#1095690
    (CVE-2013-4150 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on invalid state load [rhel-7.1])
  - Resolves: bz#1095695
    (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-7.1])
  - Resolves: bz#1095707
    (CVE-2013-4527 qemu-kvm: qemu: hpet: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095716
    (CVE-2013-4529 qemu-kvm: qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095738
    (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-7.1])
  - Resolves: bz#1095742
    (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095747
    (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-7.1])
  - Resolves: bz#1095766
    (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-7.1])
  - Resolves: bz#1095783
    (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-7.1])
  - Resolves: bz#1096829
    (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-7.1])
  - Resolves: bz#1097230
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-7.1])
  - Resolves: bz#1097237
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-64.el7
changelog:
  - kvm-zero-initialize-KVM_SET_GSI_ROUTING-input.patch [bz#1098976]
  - kvm-skip-system-call-when-msi-route-is-unchanged.patch [bz#1098976]
  - Resolves: bz#1098976
    (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-65.el7
changelog:
  - kvm-Allow-mismatched-virtio-config-len.patch [bz#1113009]
  - Resolves: bz#1113009
    (Migration failed with virtio-blk from RHEL6.5.0 host to RHEL7.0 host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-66.el7
changelog:
  - kvm-xhci-fix-overflow-in-usb_xhci_post_load.patch [bz#1074219]
  - kvm-migration-qmp_migrate-keep-working-after-syntax-erro.patch [bz#1086598]
  - kvm-seccomp-add-shmctl-mlock-and-munlock-to-the-syscall-.patch [bz#1026314]
  - kvm-exit-when-no-kvm-and-vcpu-count-160.patch [bz#1076326]
  - kvm-Disallow-outward-migration-while-awaiting-incoming-m.patch [bz#1086987]
  - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#1088695 bz#1093983]
  - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097020]
  - kvm-aio-Fix-use-after-free-in-cancellation-path.patch [bz#1095877]
  - kvm-scsi-disk-Improve-error-messager-if-can-t-get-versio.patch [bz#1021788]
  - kvm-scsi-Improve-error-messages-more.patch [bz#1021788]
  - kvm-memory-Don-t-call-memory_region_update_coalesced_ran.patch [bz#1096645]
  - kvm-kvmclock-Ensure-time-in-migration-never-goes-backwar.patch [bz#1098602]
  - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock_cu.patch [bz#1098602]
  - Resolves: bz#1021788
    (the error message "scsi generic interface too old" is wrong more often than not)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1074219
    (qemu core dump when install a RHEL.7 guest(xhci) with migration)
  - Resolves: bz#1076326
    (qemu-kvm does not quit when booting guest w/ 161 vcpus and "-no-kvm")
  - Resolves: bz#1086598
    (migrate_cancel wont take effect on previouly wrong migrate -d cmd)
  - Resolves: bz#1086987
    (src qemu crashed when starting migration in inmigrate mode)
  - Resolves: bz#1088695
    (there are four "gluster" in qemu-img supported format list)
  - Resolves: bz#1093983
    (there are three "nbd" in qemu-img supported format list)
  - Resolves: bz#1095877
    (segmentation fault in qemu-kvm due to use-after-free of a SCSIGenericReq (host device pass-through))
  - Resolves: bz#1096645
    ([FJ7.0 Bug] RHEL7.0 guest attaching 150 or more virtio-blk disks fails to start up)
  - Resolves: bz#1097020
    ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images)
  - Resolves: bz#1098602
    (kvmclock: Ensure time in migration never goes backward (backport))


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-67.el7
changelog:
  - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990724]
  - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118707]
  - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118707]
  - kvm-aio-fix-qemu_bh_schedule-bh-ctx-race-condition.patch [bz#1116728]
  - kvm-block-Improve-driver-whitelist-checks.patch [bz#999789]
  - kvm-vmdk-Fix-format-specific-information-create-type-for.patch [bz#1029271]
  - kvm-virtio-pci-Report-an-error-when-msix-vectors-init-fa.patch [bz#1095645]
  - kvm-scsi-Report-error-when-lun-number-is-in-use.patch [bz#1096576]
  - kvm-util-Split-out-exec_dir-from-os_find_datadir.patch [bz#1017685]
  - kvm-rules.mak-fix-obj-to-a-real-relative-path.patch [bz#1017685]
  - kvm-rules.mak-allow-per-object-cflags-and-libs.patch [bz#1017685]
  - kvm-block-use-per-object-cflags-and-libs.patch [bz#1017685]
  - kvm-vmdk-Fix-creating-big-description-file.patch [bz#1039791]
  - Resolves: bz#1017685
    (Gluster etc. should not be a dependency of vscclient and libcacard)
  - Resolves: bz#1029271
    (Format specific information (create type) was wrong when create it specified subformat='streamOptimized')
  - Resolves: bz#1039791
    (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat)
  - Resolves: bz#1095645
    (vectors of virtio-scsi-pci will be 0 when set vectors>=129)
  - Resolves: bz#1096576
    (QEMU core dumped when boot up two scsi-hd disk on the same virtio-scsi-pci controller in Intel host)
  - Resolves: bz#1116728
    (Backport qemu_bh_schedule() race condition fix)
  - Resolves: bz#1118707
    (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info)
  - Resolves: bz#990724
    (qemu-kvm failing when invalid machine type is provided)
  - Resolves: bz#999789
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-68.el7
changelog:
  - kvm-virtio-net-Do-not-filter-VLANs-without-F_CTRL_VLAN.patch [bz#1065724]
  - kvm-virtio-net-add-vlan-receive-state-to-RxFilterInfo.patch [bz#1065724]
  - kvm-virtio-rng-check-return-value-of-virtio_load.patch [bz#1116941]
  - kvm-qapi-treat-all-negative-return-of-strtosz_suffix-as-.patch [bz#1074403]
  - Resolves: bz#1065724
    (rx filter incorrect when guest disables VLAN filtering)
  - Resolves: bz#1074403
    (qemu-kvm can not give any warning hint when set sndbuf with negative value)
  - Resolves: bz#1116941
    (Return value of virtio_load not checked in virtio_rng_load)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-69.el7
changelog:
  - kvm-rdma-bug-fixes.patch [bz#1107821]
  - kvm-virtio-serial-report-frontend-connection-state-via-m.patch [bz#1122151]
  - kvm-char-report-frontend-open-closed-state-in-query-char.patch [bz#1122151]
  - kvm-acpi-fix-tables-for-no-hpet-configuration.patch [bz#1129552]
  - kvm-mirror-Fix-resource-leak-when-bdrv_getlength-fails.patch [bz#1130603]
  - kvm-blockjob-Add-block_job_yield.patch [bz#1130603]
  - kvm-mirror-Go-through-ready-complete-process-for-0-len-i.patch [bz#1130603]
  - kvm-qemu-iotests-Test-BLOCK_JOB_READY-event-for-0Kb-imag.patch [bz#1130603]
  - kvm-block-make-top-argument-to-block-commit-optional.patch [bz#1130603]
  - kvm-qemu-iotests-Test-0-length-image-for-mirror.patch [bz#1130603]
  - kvm-mirror-Fix-qiov-size-for-short-requests.patch [bz#1130603]
  - Resolves: bz#1107821
    (rdma migration: seg if destination isn't listening)
  - Resolves: bz#1122151
    (Pass close from qemu-ga)
  - Resolves: bz#1129552
    (backport "acpi: fix tables for no-hpet configuration")
  - Resolves: bz#1130603
    (advertise active commit to libvirt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-70.el7
changelog:
  - kvm-Enforce-stack-protector-usage.patch [bz#1064260]
  - kvm-pc-increase-maximal-VCPU-count-to-240.patch [bz#1134408]
  - kvm-gluster-Add-discard-support-for-GlusterFS-block-driv.patch [bz#1136534]
  - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088150]
  - kvm-qdev-properties-system.c-Allow-vlan-or-netdev-for-de.patch [bz#996011]
  - kvm-vl-process-object-after-other-backend-options.patch [bz#1128095]
  - Resolves: bz#1064260
    (Handle properly --enable-fstack-protector option)
  - Resolves: bz#1088150
    (qemu-img coredumpd when try to create a gluster format image)
  - Resolves: bz#1128095
    (chardev 'chr0' isn't initialized when we try to open rng backend)
  - Resolves: bz#1134408
    ([HP 7.1 FEAT] Increase qemu-kvm's VCPU limit to 240)
  - Resolves: bz#1136534
    (glusterfs backend does not support discard)
  - Resolves: bz#996011
    (vlan and queues options cause core dumped when qemu-kvm process quit(or ctrl+c))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-71.el7
changelog:
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#1054077]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#1054077]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#1054077]
  - kvm-qemu-Adjust-qemu-wakeup.patch [bz#1064156]
  - kvm-vmstate_xhci_event-fix-unterminated-field-list.patch [bz#1122147]
  - kvm-vmstate_xhci_event-bug-compat-with-RHEL-7.0-RHEL-onl.patch [bz#1122147]
  - kvm-pflash_cfi01-write-flash-contents-to-bdrv-on-incomin.patch [bz#1139702]
  - kvm-ide-test-Add-enum-value-for-DEV.patch [bz#1123372]
  - kvm-ide-test-Add-FLUSH-CACHE-test-case.patch [bz#1123372]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1123372]
  - kvm-IDE-Fill-the-IDENTIFY-request-consistently.patch [bz#852348]
  - kvm-ide-Add-resize-callback-to-ide-core.patch [bz#852348]
  - Resolves: bz#1054077
    (qemu crash when reboot win7 guest with spice display)
  - Resolves: bz#1064156
    ([qxl] The guest show black screen while resumed guest which managedsaved in pmsuspended status.)
  - Resolves: bz#1122147
    (CVE-2014-5263 vmstate_xhci_event: fix unterminated field list)
  - Resolves: bz#1123372
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1139702
    (pflash (UEFI varstore) migration shortcut for libvirt [RHEL])
  - Resolves: bz#852348
    (fail to block_resize local data disk with IDE/AHCI disk_interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-72.el7
changelog:
  - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1139118]
  - kvm-vbe-rework-sanity-checks.patch [bz#1139118]
  - kvm-spice-display-add-display-channel-id-to-the-debug-me.patch [bz#1139118]
  - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1139118]
  - Resolves: bz#1139118
    (CVE-2014-3615 qemu-kvm: Qemu: crash when guest sets high resolution [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-73.el7
changelog:
  - kvm-scsi-disk-fix-bug-in-scsi_block_new_request-introduc.patch [bz#1105880]
  - Resolves: bz#1105880
    (bug in scsi_block_new_request() function introduced by upstream commit 137745c5c60f083ec982fe9e861e8c16ebca1ba8)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-74.el7
changelog:
  - kvm-ide-Add-wwn-support-to-IDE-ATAPI-drive.patch [bz#1131316]
  - kvm-vmdk-Allow-vmdk_create-to-work-with-protocol.patch [bz#1098086]
  - kvm-block-make-vdi-bounds-check-match-upstream.patch [bz#1098086]
  - kvm-vdi-say-why-an-image-is-bad.patch [bz#1098086]
  - kvm-block-do-not-abuse-EMEDIUMTYPE.patch [bz#1098086]
  - kvm-cow-correctly-propagate-errors.patch [bz#1098086]
  - kvm-block-Use-correct-width-in-format-strings.patch [bz#1098086]
  - kvm-vdi-remove-double-conversion.patch [bz#1098086]
  - kvm-block-vdi-Error-out-immediately-in-vdi_create.patch [bz#1098086]
  - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1098086]
  - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1098086]
  - kvm-block-allow-bdrv_unref-to-be-passed-NULL-pointers.patch [bz#1098086]
  - kvm-block-vdi-use-block-layer-ops-in-vdi_create-instead-.patch [bz#1098086]
  - kvm-block-use-the-standard-ret-instead-of-result.patch [bz#1098086]
  - kvm-block-vpc-use-block-layer-ops-in-vpc_create-instead-.patch [bz#1098086]
  - kvm-block-iotest-update-084-to-test-static-VDI-image-cre.patch [bz#1098086]
  - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch [bz#1122925]
  - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch [bz#1122925]
  - kvm-block-add-backing-file-option-to-block-stream.patch [bz#1122925]
  - kvm-block-add-__com.redhat_change-backing-file-qmp-comma.patch [bz#1122925]
  - Resolves: bz#1098086
    (RFE: Supporting creating vmdk/vdi/vpc format disk with protocols (glusterfs))
  - Resolves: bz#1122925
    (Maintain relative path to backing file image during live merge (block-commit))
  - Resolves: bz#1131316
    (fail to specify wwn for virtual IDE CD-ROM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-75.el7
changelog:
  - kvm-target-i386-Broadwell-CPU-model.patch [bz#1116117]
  - kvm-pc-Add-Broadwell-CPUID-compatibility-bits.patch [bz#1116117]
  - kvm-virtio-balloon-fix-integer-overflow-in-memory-stats-.patch [bz#1142290]
  - Resolves: bz#1116117
    ([Intel 7.1 FEAT] Broadwell new instructions support for KVM - qemu-kvm)
  - Resolves: bz#1142290
    (guest is stuck when setting balloon memory with large guest-stats-polling-interval)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-76.el7
changelog:
  - kvm-usb-hcd-xhci-QOM-Upcast-Sweep.patch [bz#980747]
  - kvm-usb-hcd-xhci-QOM-parent-field-cleanup.patch [bz#980747]
  - kvm-uhci-egsm-fix.patch [bz#1046873]
  - kvm-usb-redir-fix-use-after-free.patch [bz#1046574 bz#1088116]
  - kvm-xhci-remove-leftover-debug-printf.patch [bz#980833]
  - kvm-xhci-add-tracepoint-for-endpoint-state-changes.patch [bz#980833]
  - kvm-xhci-add-port-to-slot_address-tracepoint.patch [bz#980833]
  - kvm-usb-parallelize-usb3-streams.patch [bz#1075846]
  - kvm-xhci-Init-a-transfers-xhci-slotid-and-epid-member-on.patch [bz#1075846]
  - kvm-xhci-Add-xhci_epid_to_usbep-helper-function.patch [bz#980833]
  - kvm-xhci-Fix-memory-leak-on-xhci_disable_ep.patch [bz#980833]
  - kvm-usb-Also-reset-max_packet_size-on-ep_reset.patch [bz#1075846]
  - kvm-usb-Fix-iovec-memleak-on-combined-packet-free.patch [bz#1075846]
  - kvm-usb-hcd-xhci-Remove-unused-sstreamsm-member-from-XHC.patch [bz#980747]
  - kvm-usb-hcd-xhci-Remove-unused-cancelled-member-from-XHC.patch [bz#980747]
  - kvm-usb-hcd-xhci-Report-completion-of-active-transfer-wi.patch [bz#980747]
  - kvm-usb-hcd-xhci-Update-endpoint-context-dequeue-pointer.patch [bz#980747]
  - kvm-xhci-Add-a-few-missing-checks-for-disconnected-devic.patch [bz#980833]
  - kvm-usb-Add-max_streams-attribute-to-endpoint-info.patch [bz#1111450]
  - kvm-usb-Add-usb_device_alloc-free_streams.patch [bz#1111450]
  - kvm-xhci-Call-usb_device_alloc-free_streams.patch [bz#980833]
  - kvm-uhci-invalidate-queue-on-device-address-changes.patch [bz#1111450]
  - kvm-xhci-iso-fix-time-calculation.patch [bz#949385]
  - kvm-xhci-iso-allow-for-some-latency.patch [bz#949385]
  - kvm-xhci-switch-debug-printf-to-tracepoint.patch [bz#980747]
  - kvm-xhci-use-DPRINTF-instead-of-fprintf-stderr.patch [bz#980833]
  - kvm-xhci-child-detach-fix.patch [bz#980833]
  - kvm-usb-add-usb_pick_speed.patch [bz#1075846]
  - kvm-xhci-make-port-reset-trace-point-more-verbose.patch [bz#980833]
  - kvm-usb-initialize-libusb_device-to-avoid-crash.patch [bz#1111450]
  - kvm-target-i386-get-CPL-from-SS.DPL.patch [bz#1097363]
  - kvm-trace-use-unique-Red-Hat-version-number-in-simpletra.patch [bz#1088112]
  - kvm-trace-add-pid-field-to-simpletrace-record.patch [bz#1088112]
  - kvm-simpletrace-add-support-for-trace-record-pid-field.patch [bz#1088112]
  - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#1088112]
  - kvm-trace-extract-stap_escape-function-for-reuse.patch [bz#1088112]
  - kvm-trace-add-tracetool-simpletrace_stap-format.patch [bz#1088112]
  - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#1088112]
  - kvm-trace-install-trace-events-file.patch [bz#1088112]
  - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#1088112]
  - kvm-simpletrace-install-simpletrace.py.patch [bz#1088112]
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1088112]
  - kvm-rdma-Fix-block-during-rdma-migration.patch [bz#1152969]
  - Resolves: bz#1046574
    (fail to passthrough the USB speaker redirected from usb-redir with xhci controller)
  - Resolves: bz#1046873
    (fail to be recognized the hotpluging usb-storage device with xhci controller in win2012R2 guest)
  - Resolves: bz#1075846
    (qemu-kvm core dumped when hotplug/unhotplug USB3.0 device multi times)
  - Resolves: bz#1088112
    ([Fujitsu 7.1 FEAT]:QEMU: capturing trace data all the time using ftrace-based tracing)
  - Resolves: bz#1088116
    (qemu crash when device_del usb-redir)
  - Resolves: bz#1097363
    (qemu ' KVM internal error. Suberror: 1'  when  query cpu frequently during pxe boot in Intel "Q95xx" host)
  - Resolves: bz#1111450
    (Guest crash when hotplug usb while disable virt_use_usb)
  - Resolves: bz#1152969
    (Qemu-kvm got stuck when migrate to wrong RDMA ip)
  - Resolves: bz#949385
    (passthrough USB speaker to win2012 guest fail to work well)
  - Resolves: bz#980747
    (flood with 'xhci: wrote doorbell while xHC stopped or paused' when redirected USB Webcam from usb-host with xHCI controller)
  - Resolves: bz#980833
    (xhci: FIXME: endpoint stopped w/ xfers running, data might be lost)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-77.el7
changelog:
  - kvm-seccomp-add-semctl-to-the-syscall-whitelist.patch [bz#1026314]
  - kvm-Revert-kvmclock-Ensure-proper-env-tsc-value-for-kvmc.patch [bz#1098602 bz#1130428]
  - kvm-Revert-kvmclock-Ensure-time-in-migration-never-goes-.patch [bz#1098602 bz#1130428]
  - kvm-Introduce-cpu_clean_all_dirty.patch [bz#1098602 bz#1130428]
  - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock.v2.patch [bz#1098602 bz#1130428]
  - kvm-kvmclock-Ensure-time-in-migration-never-goes-back.v2.patch [bz#1098602 bz#1130428]
  - Resolves: bz#1026314
    (BUG: qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1098602
    (kvmclock: Ensure time in migration never goes backward (backport))
  - Resolves: bz#1130428
    (After migration of RHEL7.1 guest with "-vga qxl", GUI console is hang)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-78.el7
changelog:
  - kvm-slirp-udp-fix-NULL-pointer-dereference-because-of-un.patch [bz#1144820]
  - kvm-hw-pci-fix-error-flow-in-pci-multifunction-init.patch [bz#1049734]
  - kvm-rhel-Drop-machine-type-pc-q35-rhel7.0.0.patch [bz#1111107]
  - kvm-virtio-scsi-Plug-memory-leak-on-virtio_scsi_push_eve.patch [bz#1088822]
  - kvm-virtio-scsi-Report-error-if-num_queues-is-0-or-too-l.patch [bz#1089606]
  - kvm-virtio-scsi-Fix-memory-leak-when-realize-failed.patch [bz#1089606]
  - kvm-virtio-scsi-Fix-num_queue-input-validation.patch [bz#1089606]
  - kvm-Revert-linux-aio-use-event-notifiers.patch [bz#1104748]
  - kvm-specfile-Require-glusterfs-api-3.6.patch [bz#1155518]
  - Resolves: bz#1049734
    (PCI: QEMU crash on illegal operation: attaching a function to a non multi-function device)
  - Resolves: bz#1088822
    (hot-plug a virtio-scsi disk via 'blockdev-add' always cause QEMU quit)
  - Resolves: bz#1089606
    (QEMU will not reject invalid number of queues (num_queues = 0) specified for virtio-scsi)
  - Resolves: bz#1104748
    (48% reduction in IO performance for KVM guest, io=native)
  - Resolves: bz#1111107
    (Remove Q35 machine type from qemu-kvm)
  - Resolves: bz#1144820
    (CVE-2014-3640 qemu-kvm: qemu: slirp: NULL pointer deref in sosendto() [rhel-7.1])
  - Resolves: bz#1155518
    (qemu-kvm: undefined symbol: glfs_discard_async)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-79.el7
changelog:
  - kvm-libcacard-link-against-qemu-error.o-for-error_report.patch [bz#1088176]
  - kvm-error-Add-error_abort.patch [bz#1088176]
  - kvm-blockdev-Fail-blockdev-add-with-encrypted-images.patch [bz#1088176]
  - kvm-blockdev-Fix-NULL-pointer-dereference-in-blockdev-ad.patch [bz#1088176]
  - kvm-qemu-iotests-Test-a-few-blockdev-add-error-cases.patch [bz#1088176]
  - kvm-block-Add-errp-to-bdrv_new.patch [bz#1088176]
  - kvm-qemu-img-Avoid-duplicate-block-device-IDs.patch [bz#1088176]
  - kvm-block-Catch-duplicate-IDs-in-bdrv_new.patch [bz#1088176]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1138691]
  - kvm-qemu-img-Allow-cache-mode-specification-for-amend.patch [bz#1138691]
  - kvm-qemu-img-clarify-src_cache-option-documentation.patch [bz#1138691]
  - kvm-qemu-img-fix-rebase-src_cache-option-documentation.patch [bz#1138691]
  - kvm-qemu-img-fix-img_compare-flags-error-path.patch [bz#1138691]
  - kvm-ac97-register-reset-via-qom.patch [bz#1141667]
  - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_ha.patch [bz#1085232]
  - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on.patch [bz#1085232]
  - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232]
  - kvm-ide-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232]
  - kvm-ide-only-constrain-read-write-requests-to-drive-size.patch [bz#1085232]
  - Resolves: bz#1085232
    (Ilegal guest requests on block devices pause the VM)
  - Resolves: bz#1088176
    (QEMU fail to check whether duplicate ID for block device drive using 'blockdev-add' to hotplug)
  - Resolves: bz#1138691
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))
  - Resolves: bz#1141667
    (Qemu crashed if reboot guest after hot remove AC97 sound device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-80.el7
changelog:
  - kvm-dump-RHEL-specific-fix-for-CPUState-bug-introduced-b.patch [bz#1161563]
  - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1157798]
  - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1157798]
  - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1157798]
  - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1157798]
  - kvm-dump-add-API-to-write-vmcore.patch [bz#1157798]
  - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1157798]
  - kvm-dump-add-support-for-lzo-snappy.patch [bz#1157798]
  - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1157798]
  - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump-header.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1157798]
  - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump-pages.patch [bz#1157798]
  - kvm-dump-Drop-qmp_dump_guest_memory-stub-and-build-for-a.patch [bz#1157798]
  - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1157798]
  - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1157798]
  - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1157798]
  - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1157798]
  - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1157798]
  - kvm-dump-simplify-write_start_flat_header.patch [bz#1157798]
  - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1157798]
  - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1157798]
  - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1157798]
  - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1157798]
  - kvm-dump-simplify-get_len_buf_out.patch [bz#1157798]
  - kvm-rename-parse_enum_option-to-qapi_enum_parse-and-make.patch [bz#1087724]
  - kvm-qapi-introduce-PreallocMode-and-new-PreallocModes-fu.patch [bz#1087724]
  - kvm-raw-posix-Add-falloc-and-full-preallocation-option.patch [bz#1087724]
  - kvm-qcow2-Add-falloc-and-full-preallocation-option.patch [bz#1087724]
  - kvm-vga-fix-invalid-read-after-free.patch [bz#1161890]
  - kvm-Use-qemu-kvm-in-documentation-instead-of-qemu-system.patch [bz#1140618]
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157645]
  - kvm-spice-call-qemu_spice_set_passwd-during-init.patch [bz#1138639]
  - kvm-block-raw-posix-Try-both-FIEMAP-and-SEEK_HOLE.patch [bz#1160237]
  - kvm-block-raw-posix-Fix-disk-corruption-in-try_fiemap.patch [bz#1160237]
  - kvm-block-raw-posix-use-seek_hole-ahead-of-fiemap.patch [bz#1160237]
  - kvm-raw-posix-Fix-raw_co_get_block_status-after-EOF.patch [bz#1160237]
  - kvm-raw-posix-raw_co_get_block_status-return-value.patch [bz#1160237]
  - kvm-raw-posix-SEEK_HOLE-suffices-get-rid-of-FIEMAP.patch [bz#1160237]
  - kvm-raw-posix-The-SEEK_HOLE-code-is-flawed-rewrite-it.patch [bz#1160237]
  - Resolves: bz#1087724
    ([Fujitsu 7.1 FEAT]: qemu-img should use fallocate() system call for "preallocation=full" option)
  - Resolves: bz#1138639
    (fail to login spice session with password + expire time)
  - Resolves: bz#1140618
    (Should replace "qemu-system-i386" by "/usr/libexec/qemu-kvm" in manpage of qemu-kvm for our official qemu-kvm build)
  - Resolves: bz#1157645
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-7.1])
  - Resolves: bz#1157798
    ([FEAT RHEL7.1]: qemu: Support compression for dump-guest-memory command)
  - Resolves: bz#1160237
    (qemu-img convert intermittently corrupts output images)
  - Resolves: bz#1161563
    (invalid QEMU NOTEs in vmcore that is dumped for multi-VCPU guests)
  - Resolves: bz#1161890
    ([abrt] qemu-kvm: pixman_image_get_data(): qemu-kvm killed by SIGSEGV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-81.el7
changelog:
  - kvm-migration-static-variables-will-not-be-reset-at-seco.patch [bz#1071776]
  - kvm-vfio-pci-Add-debug-config-options-to-disable-MSI-X-K.patch [bz#1098976]
  - kvm-vfio-correct-debug-macro-typo.patch [bz#1098976]
  - kvm-vfio-pci-Fix-MSI-X-debug-code.patch [bz#1098976]
  - kvm-vfio-pci-Fix-MSI-X-masking-performance.patch [bz#1098976]
  - kvm-vfio-Fix-MSI-X-vector-expansion.patch [bz#1098976]
  - kvm-vfio-Don-t-cache-MSIMessage.patch [bz#1098976]
  - Resolves: bz#1071776
    (Migration "expected downtime" does not refresh after reset to a new value)
  - Resolves: bz#1098976
    (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-82.el7
changelog:
  - kvm-hw-pci-fixed-error-flow-in-pci_qdev_init.patch [bz#1046007]
  - kvm-hw-pci-fixed-hotplug-crash-when-using-rombar-0-with-.patch [bz#1046007]
  - Resolves: bz#1046007
    (qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-83.el7
changelog:
  - kvm-xhci-add-sanity-checks-to-xhci_lookup_uport.patch [bz#1074219]
  - kvm-Revert-Build-ceph-rbd-only-for-rhev.patch [bz#1140742]
  - kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1140742]
  - kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1140742]
  - kvm-spec-Enable-rbd-driver-add-dependency.patch [bz#1140742]
  - Resolves: bz#1074219
    (qemu core dump when install a RHEL.7 guest(xhci) with migration)
  - Resolves: bz#1140742
    (Enable native support for Ceph)


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-84.el7
changelog:
  - kvm-qemu-iotests-Test-case-for-backing-file-deletion.patch [bz#1002493]
  - kvm-qemu-iotests-Add-sample-image-and-test-for-VMDK-vers.patch [bz#1134237]
  - kvm-vmdk-Check-VMFS-extent-line-field-number.patch [bz#1134237]
  - kvm-qemu-iotests-Introduce-_unsupported_imgopts.patch [bz#1002493]
  - kvm-qemu-iotests-Add-_unsupported_imgopts-for-vmdk-subfo.patch [bz#1002493]
  - kvm-vmdk-Fix-big-flat-extent-IO.patch [bz#1134241]
  - kvm-vmdk-Check-for-overhead-when-opening.patch [bz#1134251]
  - kvm-block-vmdk-add-basic-.bdrv_check-support.patch [bz#1134251]
  - kvm-qemu-iotest-Make-077-raw-only.patch [bz#1134237]
  - kvm-qemu-iotests-Don-t-run-005-on-vmdk-split-formats.patch [bz#1002493]
  - kvm-vmdk-extract-vmdk_read_desc.patch [bz#1134251]
  - kvm-vmdk-push-vmdk_read_desc-up-to-caller.patch [bz#1134251]
  - kvm-vmdk-do-not-try-opening-a-file-as-both-image-and-des.patch [bz#1134251]
  - kvm-vmdk-correctly-propagate-errors.patch [bz#1134251]
  - kvm-block-vmdk-do-not-report-file-offset-for-compressed-.patch [bz#1134251]
  - kvm-vmdk-Fix-d-and-lld-to-PRI-in-format-strings.patch [bz#1134251]
  - kvm-vmdk-Fix-x-to-PRIx32-in-format-strings-for-cid.patch [bz#1134251]
  - kvm-qemu-img-Convert-by-cluster-size-if-target-is-compre.patch [bz#1134283]
  - kvm-vmdk-Implement-.bdrv_write_compressed.patch [bz#1134283]
  - kvm-vmdk-Implement-.bdrv_get_info.patch [bz#1134283]
  - kvm-qemu-iotests-Test-converting-to-streamOptimized-from.patch [bz#1134283]
  - kvm-vmdk-Fix-local_err-in-vmdk_create.patch [bz#1134283]
  - kvm-fpu-softfloat-drop-INLINE-macro.patch [bz#1002493]
  - kvm-block-New-bdrv_nb_sectors.patch [bz#1002493]
  - kvm-vmdk-Optimize-cluster-allocation.patch [bz#1002493]
  - kvm-vmdk-Handle-failure-for-potentially-large-allocation.patch [bz#1002493]
  - kvm-vmdk-Use-bdrv_nb_sectors-where-sectors-not-bytes-are.patch [bz#1002493]
  - kvm-vmdk-fix-vmdk_parse_extents-extent_file-leaks.patch [bz#1002493]
  - kvm-vmdk-fix-buf-leak-in-vmdk_parse_extents.patch [bz#1002493]
  - kvm-vmdk-Fix-integer-overflow-in-offset-calculation.patch [bz#1002493]
  - kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163078]
  - Resolves: bz#1002493
    (qemu-img convert rate about 100k/second from qcow2/raw to vmdk format on nfs system file)
  - Resolves: bz#1134237
    (Opening malformed VMDK description file should fail)
  - Resolves: bz#1134241
    (QEMU fails to correctly read/write on VMDK with big flat extent)
  - Resolves: bz#1134251
    (Opening an obviously truncated VMDK image should fail)
  - Resolves: bz#1134283
    (qemu-img convert from ISO to streamOptimized fails)
  - Resolves: bz#1163078
    (CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-7.1])


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-85.el7
changelog:
  - kvm-block-delete-cow-block-driver.patch [bz#1175325]
  - Resolves: bz#1175325
    (Delete cow block driver)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7
changelog:
  - kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942]
  - kvm-cirrus-fix-blit-region-check.patch [bz#1169456]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456]
  - Resolves: bz#1169456
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-7.1])
  - Resolves: bz#1180942
    (qemu core dumped when unhotplug gpu card assigned to guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.1
changelog:
  - kvm-pc-add-rhel6.6.0-machine-type.patch [bz#1198958]
  - Resolves: bz#1198958
    (Add rhel-6.6.0 machine type to RHEL 7.1.z to support RHEL 6.6 to RHEL 7.1 live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-87.el7
changelog:
  - kvm-trace-add-qemu_system_powerdown_request-and-qemu_sys.patch [bz#1155671]
  - kvm-virtio-net-drop-assert-on-vm-stop.patch [bz#1139562]
  - kvm-socket-shutdown.patch [bz#1086168]
  - kvm-Handle-bi-directional-communication-for-fd-migration.patch [bz#1086168]
  - kvm-migration_cancel-shutdown-migration-socket.patch [bz#1086168]
  - kvm-iscsi-Refuse-to-open-as-writable-if-the-LUN-is-write.patch [bz#1032412]
  - kvm-main-set-current_machine-before-calling-machine-init.patch [bz#1176283]
  - kvm-pc_sysfw-prevent-pflash-and-or-mis-sized-firmware-fo.patch [bz#1176283]
  - kvm-Restore-atapi_dma-flag-across-migration.patch [bz#892258]
  - kvm-atapi-migration-Throw-recoverable-error-to-avoid-rec.patch [bz#892258]
  - kvm-build-reenable-local-builds-to-pass-enable-debug-RHE.patch []
  - kvm-raw-posix-Fail-gracefully-if-no-working-alignment-is.patch [bz#1184363]
  - kvm-block-Add-Error-argument-to-bdrv_refresh_limits.patch [bz#1184363]
  - kvm-Python-lang-gdb-script-to-extract-x86_64-guest-vmcor.patch [bz#828493]
  - kvm-RPM-spec-install-dump-guest-memory.py-RHEL-only.patch [bz#828493]
  - kvm-spec-Enable-build-of-qemu-img-and-libcacard-for-ppc6.patch [bz#1190086]
  - Resolves: bz#1032412
    (opening read-only iscsi lun as read-write should fail)
  - Resolves: bz#1086168
    (qemu-kvm can not cancel migration in src host when network of dst host failed)
  - Resolves: bz#1139562
    (qemu-kvm with vhost=off and sndbuf=100 crashed when stop it during pktgen test from guest to host)
  - Resolves: bz#1155671
    ([Fujitsu 7.2 FEAT]: QEMU: Add tracepoints in system shutdown)
  - Resolves: bz#1176283
    ([migration]migration failed when configure guest with OVMF bios + machine type=rhel6.5.0)
  - Resolves: bz#1184363
    (Qemu process fails to start with a multipath device with all paths failed)
  - Resolves: bz#1190086
    (build qemu-img/libcacard on ppc64le for 7.2)
  - Resolves: bz#828493
    ([Hitachi 7.2 FEAT] Extract guest memory dump from qemu-kvm core)
  - Resolves: bz#892258
    (ide CDROM io/data errors after migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-88.el7
changelog:
  - kvm-vfio-warn-if-host-device-rom-can-t-be-read.patch [bz#1210503]
  - kvm-vfio-Do-not-reattempt-a-failed-rom-read.patch [bz#1210503]
  - kvm-vfio-Correction-in-vfio_rom_read-when-attempting-rom.patch [bz#1210503]
  - kvm-vfio-Fix-overrun-after-readlink-fills-buffer-complet.patch [bz#1210504]
  - kvm-vfio-use-correct-runstate.patch [bz#1210505]
  - kvm-vfio-pci-Fix-BAR-size-overflow.patch [bz#1181267]
  - kvm-vfio-Use-vfio-type1-v2-IOMMU-interface.patch [bz#1210508]
  - kvm-vfio-pci-Enable-device-request-notification-support.patch [bz#1210509]
  - kvm-vfio-pci-Further-fix-BAR-size-overflow.patch [bz#1181267]
  - kvm-vfio-pci-Fix-error-path-sign.patch [bz#1210504]
  - kvm-x86-Use-common-variable-range-MTRR-counts.patch [bz#1210510]
  - kvm-x86-kvm-Add-MTRR-support-for-kvm_get-put_msrs.patch [bz#1210510]
  - kvm-x86-Clear-MTRRs-on-vCPU-reset.patch [bz#1210510]
  - kvm-spec-Exclude-aarch64.patch [bz#1217850]
  - Resolves: bz#1181267
    (vfio-pci: Fix BAR size overflow)
  - Resolves: bz#1210503
    (vfio improve PCI ROM loading error handling)
  - Resolves: bz#1210504
    (vfio: Fix overrun after readlink() fills buffer completely)
  - Resolves: bz#1210505
    (vfio: use correct runstate)
  - Resolves: bz#1210508
    (vfio: Use vfio type1 v2 IOMMU interface)
  - Resolves: bz#1210509
    (vfio-pci: Enable device request notification support)
  - Resolves: bz#1210510
    (Sync MTRRs with KVM and disable on reset)
  - Resolves: bz#1217850
    (qemu-kvm: ExcludeArch: aarch64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-89.el7
changelog:
  - kvm-CVE-2015-1779-incrementally-decode-websocket-frames.patch [bz#1206497]
  - kvm-CVE-2015-1779-limit-size-of-HTTP-headers-from-websoc.patch [bz#1206497]
  - kvm-qemu-iotests-Test-unaligned-4k-zero-write.patch [bz#1200295]
  - kvm-block-Fix-NULL-deference-for-unaligned-write-if-qiov.patch [bz#1200295]
  - kvm-qemu-iotests-Test-unaligned-sub-block-zero-write.patch [bz#1200295]
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219270]
  - Resolves: bz#1200295
    (QEMU segfault when doing unaligned zero write to non-512 disk)
  - Resolves: bz#1206497
    (CVE-2015-1779 qemu-kvm: qemu: vnc: insufficient resource limiting in VNC websockets decoder [rhel-7.2])
  - Resolves: bz#1219270
    (CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-7.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-90.el7
changelog:
  - kvm-qcow2-Pass-discard-type-to-qcow2_discard_clusters.patch [bz#1208808]
  - kvm-qcow2-Discard-VM-state-in-active-L1-after-creating-s.patch [bz#1208808]
  - kvm-configure-Require-libfdt-for-arm-ppc-microblaze-soft.patch [bz#1217850]
  - kvm-configure-Add-handling-code-for-AArch64-targets.patch [bz#1217850]
  - kvm-configure-permit-compilation-on-arm-aarch64.patch [bz#1217850]
  - kvm-spec-Allow-build-on-aarch64.patch [bz#1217850]
  - kvm-Remove-redhat-extensions-from-qmp-events.txt.patch [bz#1222833]
  - kvm-spec-Add-misssing-QMP-documentation-files.patch [bz#1222833]
  - Resolves: bz#1208808
    (creating second and further snapshot takes ages)
  - Resolves: bz#1217850
    (qemu-kvm: Enable build on aarch64)
  - Resolves: bz#1222833
    (We ship incomplete QMP documentation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-91.el7
changelog:
  - kvm-vmdk-Fix-overflow-if-l1_size-is-0x20000000.patch [bz#1217351]
  - kvm-block-ssh-Drop-superfluous-libssh2_session_last_errn.patch [bz#1226683]
  - kvm-block-ssh-Propagate-errors-through-check_host_key.patch [bz#1226683]
  - kvm-block-ssh-Propagate-errors-through-authenticate.patch [bz#1226683]
  - kvm-block-ssh-Propagate-errors-through-connect_to_ssh.patch [bz#1226683]
  - kvm-block-ssh-Propagate-errors-to-open-and-create-method.patch [bz#1226683]
  - kvm-ssh-Don-t-crash-if-either-host-or-path-is-not-specif.patch [bz#1226683]
  - kvm-curl-Replaced-old-error-handling-with-error-reportin.patch [bz#1226684]
  - kvm-curl-Fix-long-line.patch [bz#1226684]
  - kvm-curl-Remove-unnecessary-use-of-goto.patch [bz#1226684]
  - kvm-curl-Fix-return-from-curl_read_cb-with-invalid-state.patch [bz#1226684]
  - kvm-curl-Remove-erroneous-sleep-waiting-for-curl-complet.patch [bz#1226684]
  - kvm-curl-Whitespace-only-changes.patch [bz#1226684]
  - kvm-block-curl-Implement-the-libcurl-timer-callback-inte.patch [bz#1226684]
  - kvm-curl-Remove-unnecessary-explicit-calls-to-internal-e.patch [bz#1226684]
  - kvm-curl-Eliminate-unnecessary-use-of-curl_multi_socket_.patch [bz#1226684]
  - kvm-curl-Ensure-all-informationals-are-checked-for-compl.patch [bz#1226684]
  - kvm-curl-Fix-hang-reading-from-slow-connections.patch [bz#1226684]
  - kvm-curl-Fix-build-when-curl_multi_socket_action-isn-t-a.patch [bz#1226684]
  - kvm-curl-Remove-broken-parsing-of-options-from-url.patch [bz#1226684]
  - kvm-curl-refuse-to-open-URL-from-HTTP-server-without-ran.patch [bz#1226684]
  - kvm-curl-Add-sslverify-option.patch [bz#1226684]
  - kvm-block-Drop-superfluous-conditionals-around-g_free.patch [bz#1226684]
  - kvm-curl-Handle-failure-for-potentially-large-allocation.patch [bz#1226684]
  - kvm-block.curl-adding-timeout-option.patch [bz#1226684]
  - kvm-curl-Allow-a-cookie-or-cookies-to-be-sent-with-http-.patch [bz#1226684]
  - kvm-curl-The-macro-that-you-have-to-uncomment-to-get-deb.patch [bz#1226684]
  - kvm-block-curl-Improve-type-safety-of-s-timeout.patch [bz#1226684]
  - kvm-Enable-ssh-driver-read-only.patch [bz#1226683]
  - kvm-Enable-curl-driver-read-only.patch [bz#1226684]
  - Resolves: bz#1217351
    (Overflow in malloc size calculation in VMDK driver)
  - Resolves: bz#1226683
    ([virt-v2v] Backport upstream ssh driver to qemu-kvm)
  - Resolves: bz#1226684
    ([virt-v2v] Enable curl driver + upstream features + fixes in qemu-kvm and enable https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-92.el7
changelog:
  - kvm-seccomp-add-timerfd_create-and-timerfd_settime-to-th.patch [bz#1185737]
  - kvm-qdict-Add-qdict_join.patch [bz#1226697]
  - kvm-block-Allow-JSON-filenames.patch [bz#1226697]
  - kvm-spice-display-fix-segfault-in-qemu_spice_create_upda.patch [bz#1230808]
  - Resolves: bz#1185737
    (qemu-kvm hang when boot with usb-host and sandbox was enabled)
  - Resolves: bz#1226697
    ([virt-v2v] Allow json: filenames in qemu-img)
  - Resolves: bz#1230808
    ([abrt] qemu-system-x86: __memcmp_sse4_1(): qemu-system-x86_64 killed by SIGSEGV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-93.el7
changelog:
  - kvm-atomics-add-explicit-compiler-fence-in-__atomic-memo.patch [bz#1142857 bz#1142857 (aka bz#8*bz#10^bz#6/bz#7)]
  - Resolves: bz#1142857
    ([abrt] qemu-kvm: bdrv_error_action(): qemu-kvm killed by SIGABRT)
  - Resolves: bz#8*10^6/7)
    (XFree86 apparently sets xhost to ill inital values)
  - Resolves: bz#(aka
    ()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-94.el7
changelog:
  - kvm-qcow2-Put-cache-reference-in-error-case.patch [bz#1129893]
  - kvm-qcow2-Catch-bdrv_getlength-error.patch [bz#1129893]
  - kvm-block-Introduce-qemu_try_blockalign.patch [bz#1129893]
  - kvm-qcow2-Catch-host_offset-for-data-allocation.patch [bz#1129893]
  - kvm-iotests-Add-test-for-image-header-overlap.patch [bz#1129893]
  - kvm-block-Catch-bs-drv-in-bdrv_check.patch [bz#1129893]
  - kvm-qapi-block-Add-fatal-to-BLOCK_IMAGE_CORRUPTED.patch [bz#1129893]
  - kvm-qcow2-Add-qcow2_signal_corruption.patch [bz#1129893]
  - kvm-qcow2-Use-qcow2_signal_corruption-for-overlaps.patch [bz#1129893]
  - kvm-qcow2-Check-L1-L2-reftable-entries-for-alignment.patch [bz#1129893]
  - kvm-iotests-Add-more-tests-for-qcow2-corruption.patch [bz#1129893]
  - kvm-qcow2-fix-leak-of-Qcow2DiscardRegion-in-update_refco.patch [bz#1129893]
  - kvm-qcow2-Do-not-overflow-when-writing-an-L1-sector.patch [bz#1129893]
  - kvm-iotests-Add-test-for-qcow2-L1-table-update.patch [bz#1129893]
  - kvm-block-Add-qemu_-try_-blockalign0.patch [bz#1129893]
  - kvm-qcow2-Calculate-refcount-block-entry-count.patch [bz#1129893]
  - kvm-qcow2-Fix-leaks-in-dirty-images.patch [bz#1129893]
  - kvm-qcow2-Split-qcow2_check_refcounts.patch [bz#1129893]
  - kvm-qcow2-Use-sizeof-refcount_table.patch [bz#1129893]
  - kvm-qcow2-Pull-check_refblocks-up.patch [bz#1129893]
  - kvm-qcow2-Use-int64_t-for-in-memory-reftable-size.patch [bz#1129893]
  - kvm-qcow2-Split-fail-code-in-L1-and-L2-checks.patch [bz#1129893]
  - kvm-qcow2-Let-inc_refcounts-return-errno.patch [bz#1129893]
  - kvm-qcow2-Let-inc_refcounts-resize-the-reftable.patch [bz#1129893]
  - kvm-qcow2-Reuse-refcount-table-in-calculate_refcounts.patch [bz#1129893]
  - kvm-qcow2-Fix-refcount-blocks-beyond-image-end.patch [bz#1129893]
  - kvm-qcow2-Do-not-perform-potentially-damaging-repairs.patch [bz#1129893]
  - kvm-qcow2-Rebuild-refcount-structure-during-check.patch [bz#1129893]
  - kvm-qcow2-Clean-up-after-refcount-rebuild.patch [bz#1129893]
  - kvm-iotests-Fix-test-outputs.patch [bz#1129893]
  - kvm-iotests-Add-test-for-potentially-damaging-repairs.patch [bz#1129893]
  - kvm-qcow2-Drop-REFCOUNT_SHIFT.patch [bz#1129893]
  - kvm-block-Respect-underlying-file-s-EOF.patch [bz#1129893]
  - kvm-qcow2-Fix-header-extension-size-check.patch [bz#1129893]
  - kvm-qcow2.py-Add-required-padding-for-header-extensions.patch [bz#1129893]
  - kvm-block-Don-t-probe-for-unknown-backing-file-format.patch [bz#1129893]
  - kvm-qcow2-Add-two-more-unalignment-checks.patch [bz#1129893]
  - kvm-iotests-Add-tests-for-more-corruption-cases.patch [bz#1129893]
  - kvm-qcow2-Respect-new_block-in-alloc_refcount_block.patch [bz#1129893]
  - kvm-iotests-Add-tests-for-refcount-table-growth.patch [bz#1129893]
  - kvm-qcow2-Fix-header-update-with-overridden-backing-file.patch [bz#1129893]
  - kvm-qcow2-Flush-pending-discards-before-allocating-clust.patch [bz#1129893]
  - Resolves: bz#1129893
    (Backport additional qcow2 corruption prevention and image repair patches)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-95.el7
changelog:
  - kvm-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch [bz#1229646]
  - kvm-target-i386-fix-cpuid-leaf-0x0d.patch [bz#1233350]
  - kvm-target-i386-Intel-MPX.patch [bz#1233350]
  - kvm-always-update-the-MPX-model-specific-register.patch [bz#1233350]
  - kvm-target-i386-bugfix-of-Intel-MPX.patch [bz#1233350]
  - kvm-target-i386-fix-set-of-registers-zeroed-on-reset.patch [bz#1233350]
  - kvm-target-i386-Add-mpx-CPU-feature-name.patch [bz#1233350]
  - kvm-target-i386-Avoid-shifting-left-into-sign-bit.patch [bz#1233350]
  - kvm-target-i386-add-Intel-AVX-512-support.patch [bz#1233350]
  - kvm-configure-Add-support-for-tcmalloc.patch [bz#1213881]
  - Resolves: bz#1213881
    (enable using tcmalloc for memory allocation in qemu-kvm)
  - Resolves: bz#1229646
    (CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pit_ioport_read function [rhel-7.2])
  - Resolves: bz#1233350
    ([Intel 7.2 FEAT] Expose MPX feature to guest - qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-96.el7
changelog:
  - kvm-ahci.c-mask-unused-flags-when-reading-size-PRDT-DBC.patch [bz#1205100]
  - kvm-ide-Correct-handling-of-malformed-short-PRDTs.patch [bz#1205100]
  - Resolves: bz#1205100
    (qemu-kvm: Qemu: PRDT overflow from guest to host [rhel-7.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-97.el7
changelog:
  - kvm-ide-Check-array-bounds-before-writing-to-io_buffer-C.patch [bz#1243690]
  - kvm-ide-atapi-Fix-START-STOP-UNIT-command-completion.patch [bz#1243690]
  - kvm-ide-Clear-DRQ-after-handling-all-expected-accesses.patch [bz#1243690]
  - Resolves: bz#1243690
    (EMBARGOED CVE-2015-5154 qemu-kvm: qemu: ide: atapi: heap overflow during I/O buffer memory access [rhel-7.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-98.el7
changelog:
  - kvm-block-curl-Don-t-lose-original-error-when-a-connecti.patch [bz#1235812]
  - kvm-vfio-pci-Add-pba_offset-PCI-quirk-for-Chelsio-T5-dev.patch [bz#1244347]
  - kvm-block-Print-its-file-name-if-backing-file-opening-fa.patch [bz#1238639]
  - kvm-block-Propagate-error-in-bdrv_img_create.patch [bz#1238639]
  - kvm-iotests-Add-test-for-non-existing-backing-file.patch [bz#1238639]
  - Resolves: bz#1235812
    (block/curl: Fix generic "Input/output error" on failure)
  - Resolves: bz#1238639
    (qemu-img shows error message for backing file twice)
  - Resolves: bz#1244347
    (Quirk for Chelsio T5 MSI-X PBA)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-99.el7
changelog:
  - kvm-usb-ccid-add-missing-wakeup-calls.patch [bz#1243731]
  - kvm-vpc-Handle-failure-for-potentially-large-allocations.patch [bz#1217349]
  - kvm-block-vpc-prevent-overflow-if-max_table_entries-0x40.patch [bz#1217349]
  - kvm-block-qemu-iotests-add-check-for-multiplication-over.patch [bz#1217349]
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249718]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249718]
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248766]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248766]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248766]
  - Resolves: bz#1217349
    (qemu-img vpc driver segfault)
  - Resolves: bz#1243731
    (smart card emulation doesn't work with USB3 (nec-xhci) controller)
  - Resolves: bz#1248766
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-7.2])
  - Resolves: bz#1249718
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-100.el7
changelog:
  - kvm-block-update-test-070-for-vhdx.patch [bz#1171576]
  - kvm-block-coverity-fix-check-return-value-for-fcntl-in-g.patch [bz#1219217]
  - Resolves: bz#1171576
    (test case 064 and 070 of qemu-iotests fail for vhdx with qemu-kvm-1.5.3-83.el7)
  - Resolves: bz#1219217
    (Coverity-detected defect: call to fcntl without checking return value)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-101.el7
changelog:
  - kvm-serial-reset-state-at-startup.patch [bz#922014]
  - kvm-ide-Check-validity-of-logical-block-size.patch [bz#1134670]
  - Resolves: bz#1134670
    (fail to specify the physical_block_size/logical_block_size value not 512 for IDE disk)
  - Resolves: bz#922014
    (RFE: support hotplugging chardev & serial ports (Windows guests))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-102.el7
changelog:
  - kvm-mc146818rtc-add-rtc-reset-reinjection-QMP-command.patch [bz#1191226]
  - Resolves: bz#1191226
    (libvirt requires rtc-reset-reinjection command, backport it to RHEL7.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-103.el7
changelog:
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1218919]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1218919]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1218919]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1218919]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1218919]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1218919]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1218919]
  - Resolves: bz#1218919
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-104.el7
changelog:
  - kvm-qemu-iotests-Filter-qemu-io-output-in-025.patch [bz#1170974]
  - Resolves: bz#1170974
    (test case 025 of qemu-iotests fail for raw with qemu-kvm-1.5.3-83.el7.x86_64)


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-105.el7
changelog:
  - kvm-qtest-ide-test-disable-flush-test.patch [bz#1270341]
  - Resolves: bz#1270341
    (qemu-kvm build failure race condition in tests/ide-test)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.1
changelog:
  - kvm-rbd-make-qemu-s-cache-setting-override-any-ceph-sett.patch [bz#1279389]
  - kvm-rbd-fix-ceph-settings-precedence.patch [bz#1279389]
  - Resolves: bz#1279389
    (ceph.conf properties override qemu's command-line properties)


author: Doug Ledford <dledford@redhat.com> - 1.0-2
changelog:
  - Attempt to use --subsystem-match=infiniband in the rdma init script use
    of udevtrigger so we don't trigger the whole system
  - Add a requirement to stop opensm to the init script


author: Doug Ledford <dledford@redhat.com> - 1.0-6
changelog:
  - Tweak init script for LSB compliance
  - Tweak ifup-ib script to work properly with bonded slaves that need their
    MTU set
  - Tweak ifup-ib script to properly change connected mode either on or off
    instead of only setting it on but not turning it off if the setting changes


author: Doug Ledford <dledford@redhat.com> - 1.0-8
changelog:
  - Update udev rules syntax to eliminate warnings emitted via syslog (bz603264)
  - Add new init script for starting/stopping nfs over rdma support
  - Require that the nfs-rdma service be down before stopping the rdma
    service (bz613437)
  - Change ifup-ib to properly account for the fact that the [ test program
    does not process tests in order and fail immediately on first failing
    test, resulting in error messages due to unquoted environment variables
    that don't need quoting in the second test due to the fact that the
    first test guarantees they exist.  Or that's how things should be, but
    they aren't, so rewrite tests to accommodate this fact. (bz612284)
  - Use ip instead of ifconfig as ifconfig knows it doesn't handle infinband
    hardware addresses properly (even though we don't care, we aren't using
    it for that) and prints out copious warning messages (bz613086)


author: Doug Ledford <dledford@redhat.com> - 1.0-11
changelog:
  - Remove udev rules file, recent kernels create the proper devices without
    need of the file
  - Remove the nfs-rdma init script so it can be taken over by the nfs-utils
    package
  - Fix up some LSB header bogons in the init script (will convert to
    systemd after this is tested and working and move sysv init script
    to a sub-package)
  - Add ifdown-ib and update ifup-ib so we have more of the same capabilities
    on IPoIB interfaces that RHEL has


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Minor whitespace cleanups
  - Correct the usage of MTRR_SCRIPT in rdma-init-kernel
  - Remove no longer relevant sections of config related to NFSoRDMA
    (now handled by nfs-utils-rdma)


author: Doug Ledford <dledford@redhat.com> - 2.0-4
changelog:
  - Don't add an Install section to our service file, that way we aren't
    started unless our hardware is detected


author: Doug Ledford <dledford@redhat.com> - 2.0-8
changelog:
  - Drop the sysv package
  - Add the SRPT module to the conf file and startup script
  - Add support for the new ocrdma driver from Emulex


author: Doug Ledford <dledford@redhat.com> - 2.0-9
changelog:
  - Add support for P_Key interfaces (IPoIB version of VLANs)
  - Add sample 60-persistent-ipoib.rules file


author: Doug Ledford <dledford@redhat.com> - 2.0-10
changelog:
  - More fixups for ifup-ib and P_Key support
  - Move persistent-ipoib.rules to 70 instead of 60 to match prior
    persistent-net.rules file numbering


author: Doug Ledford <dledford@redhat.com> - 7.0-3.10.1
changelog:
  - Update numbering scheme.  Version now corresponds to the version of
    rhel it is built under, release is a dual component number that
    gives the upstream kernel version of the InfiniBand stack used
    in our current release (aka, the 3.10 above) followed by our
    own release number (aka .1).
  - Make rds loading conditional on the rds module existing (it has
    been disabled in some kernels)
  - Update udev rule script and rdma-kernel-init scripts to offload
    node description setting to udev, and make it more reliable
  - Resolves: bz1018658


author: Doug Ledford <dledford@redhat.com> - 7.0-3.10.2
changelog:
  - Add a comment to the udev rules file for IPoIB renaming
  - Move rdma commands to libexecdir.  They aren't intended to be run
    manually by humans and this avoids the errors about man pages
    not being present
  - Move udev rules to /usr/lib/udev
  - Resolves: bz1012796


author: Doug Ledford <dledford@redhat.com> - 7.0_3.10_rc8-1
changelog:
  - Update Requires to systemd-units instead of just systemd
  - Reset numbering back to what it is supposed to be, but change the
    format to mass rebuilds don't cause a problem in the future
  - Related: bz1018658, bz1056145


author: Doug Ledford <dledford@redhat.com> - 7.0_3.13_rc8-2
changelog:
  - Add a dracut module so the rdma stack can be brought up in
    by the initramfs
  - Related: bz1064316


author: Doug Ledford <dledford@redhat.com> - 7.0_3.13_rc8-3
changelog:
  - Use is_available_wait from new initscripts so we wait for link to
    come up.  These keeps high speed devices from failing to start
    because their link is slow to initialize.
  - Related: bz1078915


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-1
changelog:
  - Update version to match kernel submission
  - Fix for usnic_verbs instead of enic in udev rules file
  - Add support for setting the GUIDs and MACs of SRIOV vfs
  - Resolves: bz1094538


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-4
changelog:
  - Move init of all RDMA related kernel modules from various user space
    driver libraries (libmlx4, libcxgb3, libcxgb4, etc.) to rdma
    package and make those packages require rdma package.  This excludes
    libipathverbs since the modprobe files are provided by upstream.
  - Resolves: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-5
changelog:
  - Bump and rebuild to eliminate an rpm version compare issue on alternate
    arches that don't use the .el7 dist tag
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-6
changelog:
  - The system libmlx4.conf file had the name of the config script
    backwards and on systems with ethernet devices in ib/eth mode,
    the eth port was not getting set properly
  - Related: bz1164618


author: Michal Schmidt <mschmidt@redhat.com> - 7.2_3.17-2
changelog:
  - udev rules: Defer setting of node description to rdma-ndd if it is
    installed.
  - Related: bz1169968


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use resource-agents macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.8-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#548133, rhbz#565907, rhbz#545602, rhbz#555901
    Resolves: rhbz#564471, rhbz#515717, rhbz#557128, rhbz#536157
    Resolves: rhbz#455300, rhbz#561416, rhbz#562237, rhbz#537201
    Resolves: rhbz#536962, rhbz#553383, rhbz#556961, rhbz#555363
    Resolves: rhbz#557128, rhbz#455300, rhbz#557167, rhbz#459630
    Resolves: rhbz#532808, rhbz#556603, rhbz#554968, rhbz#555047
    Resolves: rhbz#554968, rhbz#555047
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#455300, rhbz#568446, rhbz#561862, rhbz#536902
    Resolves: rhbz#512171, rhbz#519491


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.9-2
changelog:
  - Resolves: rhbz#572993 - Patched build process to correctly generate ldirectord man page
  - Resolves: rhbz#574732 - Add libnet-devel as a dependancy to ensure IPaddrv6 is built


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.10-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#519491, rhbz#570525, rhbz#571806, rhbz#574027
    Resolves: rhbz#574215, rhbz#574886, rhbz#576322, rhbz#576335
    Resolves: rhbz#575103, rhbz#577856, rhbz#577874, rhbz#578249
    Resolves: rhbz#578625, rhbz#578626, rhbz#578628, rhbz#578626
    Resolves: rhbz#579621, rhbz#579623, rhbz#579625, rhbz#579626
    Resolves: rhbz#579059


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.10-2
changelog:
  - New pacemaker agents upstream release
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.11-1
changelog:
  - new upstream release
    Resolves: rhbz#583945, rhbz#581047, rhbz#576330, rhbz#583017
    Resolves: rhbz#583019, rhbz#583948, rhbz#584003, rhbz#582017
    Resolves: rhbz#555901, rhbz#582754, rhbz#582573, rhbz#581533
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#570008


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-1
changelog:
  - New pacemaker agents upstream release: a7c0f35916bf
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - new upstream release
    Resolves: rhbz#585217, rhbz#586100, rhbz#581533, rhbz#582753
    Resolves: rhbz#582754, rhbz#585083, rhbz#587079, rhbz#588890
    Resolves: rhbz#588925, rhbz#583789, rhbz#589131, rhbz#588010
    Resolves: rhbz#576871, rhbz#576871, rhbz#590000, rhbz#589823


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.13-1
changelog:
  - new upstream release
    Resolves: rhbz#592103, rhbz#593108, rhbz#578617, rhbz#594626
    Resolves: rhbz#594511, rhbz#596046, rhbz#594111, rhbz#597002
    Resolves: rhbz#599643


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.14-1
changelog:
  - new upstream release
    Resolves: rhbz#553383, rhbz#557563, rhbz#578625, rhbz#591003
    Resolves: rhbz#593721, rhbz#593726, rhbz#595455, rhbz#595547
    Resolves: rhbz#596918, rhbz#601315, rhbz#604298, rhbz#606368
    Resolves: rhbz#606470, rhbz#606480, rhbz#606754, rhbz#606989
    Resolves: rhbz#607321, rhbz#608154, rhbz#608887, rhbz#609181
    Resolves: rhbz#609866, rhbz#609978, rhbz#612097, rhbz#612110
    Resolves: rhbz#612165, rhbz#612941, rhbz#614127, rhbz#614356
    Resolves: rhbz#614421, rhbz#614457, rhbz#614961, rhbz#615202
    Resolves: rhbz#615203, rhbz#615255, rhbz#617163, rhbz#617566
    Resolves: rhbz#618534, rhbz#618703, rhbz#618806, rhbz#618814


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.16-1
changelog:
  - new upstream release
    Resolves: rhbz#619096, rhbz#614046, rhbz#620679, rhbz#619680
    Resolves: rhbz#621562, rhbz#621694, rhbz#608887, rhbz#622844
    Resolves: rhbz#623810, rhbz#617306, rhbz#623816, rhbz#624691
    Resolves: rhbz#622576


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.17-1
changelog:
  - new upstream release
    Resolves: rhbz#632595, rhbz#633856, rhbz#632385, rhbz#628013
    Resolves: rhbz#621313, rhbz#595383, rhbz#580492, rhbz#605733
    Resolves: rhbz#636243, rhbz#591003, rhbz#637913, rhbz#634718
    Resolves: rhbz#617247, rhbz#617247, rhbz#617234, rhbz#631943
    Resolves: rhbz#639018


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.0-1
changelog:
  - new upstream release
  - spec file update:
    Update upstream URL
    Update source URL
    use standard configure macro
    use standard make invokation


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3.8
changelog:
  - Remove cluster-glue-libs-devel
  - Disable IPv6addr & sfex to fix deps on libplumgpl & libplum (due to
    disappearance of cluster-glue in F18)


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Merges redhat provider into heartbeat provider. Remove
    rgmanager's redhat provider.

    Resolves: rhbz#917681
    Resolves: rhbz#928890
    Resolves: rhbz#952716
    Resolves: rhbz#960555


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Detect duplicate resources with the same volgrpname
    name when using exclusive activation with tags

    Resolves: # rhbz984054


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Add runtime dependencies section for Heartbeat agents.
  - Fix multi-lib inconsistencies found during rpm diff testing.
  - Add dist field back to rpm release name.


author: David Vossel <dvossel@redhat.com> - 3.9.5-10
changelog:
  - Removes ldirectord package
  - Puts sap agents and connector script in subpackage
  - exclude unsupported packages
  - symlink ipaddr to ipaddr2 so only a single agent is supported


author: David Vossel <dvossel@redhat.com> - 3.9.5-14
changelog:
  - Add ability for apache agent to perform simple monitoring
    of server request/response without requiring server-status
    to be enabled.
  - Fixes invalid return statement in LVM agent.
  - Oracle TNS_ADMIN option 

    Resolves: rhbz#917806
    Resolves: rhbz#917681
    Resolves: rhbz#799065


author: David Vossel <dvossel@redhat.com> - 3.9.5-15
changelog:
  - Update VirtualDomain heartbeat agent for heartbeat merger.
  - Includes upstream fixes for pacemaker_remote lxc test case.

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.
  - Fixes bash syntax error in VirtualDomain during 'stop'
  - Fixes VirtualDomain default hypervisor usage.
  - Fixes VirtualDomain 'start' of pre-defined domain

    Resolves: rhbz#917681
    Resolves: rhbz#1014641
    Resolves: rhbz#1016140


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Split send_ua utility out of IPv6addr.c source so it can be
    re-used in IPaddr2 without requiring cluster-glue.
  - Fixes issue with pgsql and SAPInstance not setting transient
    attributes correctly when local corosync node name is not
    equal to 'uname -n'
  - High: ocft: Fedora supported test cases

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-18
changelog:
  - Remove support for (nginx, mysql-proxy, rsyslog). nginx and
    mysql-proxy are not a supported projects. Rsyslog is not an
    agent we will be supporting in an HA environment.

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-20
changelog:
  - tomcat agent updates for pacemaker support
  - slapd agent updates for pacemaker support
  - Fixes missing etab file required for nfsserver

    Resolves: rhbz#1033016
    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-24
changelog:
  - Addition of the clvmd resource-agent
  - Support monitoring qemu based VirtualDomain resources without
    requiring libvirtd to be running.

    Resolves: rhbz#1064512
    Resolves: rhbz#1060367


author: David Vossel <dvossel@redhat.com> - 3.9.5-25
changelog:
  - Rename clvmd agent to clvm to avoid problems associated
    with having a resource-agent named the same exact name
    as the binary the agent manages.

    Resolves: rhbz#1064512


author: David Vossel <dvossel@redhat.com> - 3.9.5-26
changelog:
  - Handle monitor qemu based VirtualDomain resources without
    requiring libvirtd even if configuration file does not
    contain an 'emulator' value pointing to the emulator binary.

    Resolves: rhbz#1060367


author: David Vossel <dvossel@redhat.com> - 3.9.5-28
changelog:
  - Updates to nfs server related agent.
  - Introduces nfsnotify for sending NFSv3 NSM state change
    notifications allowing NFSv3 clients to reclaim locks.

    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-29
changelog:
  - Support the check_user and check_passwd galera resource-agent
    options.
  - Minor NFS agent updates.

    Resolves: rhbz#1116166
    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-30
changelog:
  - Support monitor of lxc without requiring libvirt.
  - Wait for filesystem modules to load during start.
  - Warn users managing clustered LVM when lvmetad is in use.
  - Restore VirtualDomain default start stop timeout values.
  - Support exit reason string
  - Auto set lvm locking type to clustered when clvmd is in use.

  Resolves: rhbz# 1083041
  Resolves: rhbz# 1083231
  Resolves: rhbz# 1097593
  Resolves: rhbz# 1105655
  Resolves: rhbz# 1128933
  Resolves: rhbz# 773395


author: David Vossel <dvossel@redhat.com> - 3.9.5-31
changelog:
  - Man page updates give pcs config examples
  - add iscsi agent support
  - add infiniband support to ethmonitor
  - add resource-agent support of exit reason string
  - add safe umount option to Filesystem resource agent

    Resolves: rhbz#1058102
    Resolves: rhbz#1118029
    Resolves: rhbz#1122285
    Resolves: rhbz#1128933
    Resolves: rhbz#1095944


author: David Vossel <dvossel@redhat.com> - 3.9.5-32
changelog:
  - Fixes iSCSILogicalUnit syntax error
  - Fixes mysql stop operation when db storage is unavailable

    Resolves: rhbz#1118029
    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-33
changelog:
  - Merges latest upstream patches for galera agent
  - Merges latest upstream patchs for exit reason string

    Resolves: rhbz#1116166
    Resolves: rhbz#1128933


author: David Vossel <dvossel@redhat.com> - 3.9.5-34
changelog:
  - Fixes mysql agents behavior when monitoring resource instance
    when environment validation fails.

    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-35
changelog:
  - Introduces docker resource-agent for managing docker containers.
    The docker agent is being released as tech preview.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-36
changelog:
  - Fixes cleaning up stale docker containers during stop if
    container instance failed.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-37
changelog:
  - Rename docker agent's 'container' arg to 'name' to avoid confusion
    with pacemaker's metadata 'container' argument.
  - Introduce monitor_cmd into docker agent.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-42
changelog:
  - Improve galera resource-agent to not require use of read-only
    mode to retrieve last known write sequence number.

    Resolves: rhbz#1170376


author: David Vossel <dvossel@redhat.com> - 3.9.5-44
changelog:
  - For IPsrcaddr, properly handle misconfiguration in a way that
    doesn't result in fencing.
  - Return exit reason for invalid netmask in IPaddr2

    Resolves: rhbz#1200756
    Resolves: rhbz#773399


author: David Vossel <dvossel@redhat.com> - 3.9.5-45
changelog:
  - Fix clvmd usage of daemon_options
  - Use better default nfsserver start timeouts
  - Make nfsserver preserve options in /etc/sysconfig/nfs
  - Add link_status_only option to ethmonitor agent
  - Add support for nginx agent
  - Add support for db2 agent
  - CTDB agent updates

    Resolves: rhbz#1171162
    Resolves: rhbz#1173193
    Resolves: rhbz#1182787
    Resolves: rhbz#1213971
    Resolves: rhbz#1183136
    Resolves: rhbz#1059988
    Resolves: rhbz#1077888


author: David Vossel <dvossel@redhat.com> - 3.9.5-46
changelog:
  - iface-vlan agent
  - Allow partial activation when physical volumes are missing.
  - Properly handle 'includes' during apache config parsing
  - Support for NovaCompute resource-agent

    Resolves: rhbz#1160365
    Resolves: rhbz#1214781
    Resolves: rhbz#1223615
    Resolves: rhbz#1214360


author: David Vossel <dvossel@redhat.com> - 3.9.5-47
changelog:
  - NovaCompute and NovaEvacuate updates
  - dhcpd chroot fix
  - redis 0byte error fix

    Resolves: rhbz#1214360
    Resolves: rhbz#1227293
    Resolves: rhbz#1231032


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.1.7-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> - 0.2.0-18
changelog:
  - Fixed typo causing rpcbind to run as root (bz 734598)
  - Added /etc/sysconfig/rpcbind config file (bz 861025)


author: Steve Dickson <steved@redhat.com> - 0.2.0-25
changelog:
  - Fixed some warnings in in6_fillscopeid() (bz 884165)
  - Fixed typo in rpcinfo manpage (bz 963512)
  - Removed unnecessary targets from rpcbind.service  (bz 1036791)


author: Steve Dickson <steved@redhat.com> - 0.2.0-27
changelog:
  - Add nss-altfiles to rpcbind user lookup path (bz 1171291)
  - Add support for systemd socket activation (bz 1203820)
  - Added a tmpfiles.d configuration (bz 1181779)
  - Shutdown cleanly (bz 1174653)


author: Steve Dickson <steved@redhat.com> - 0.2.0-29
changelog:
  - Change RPCBDIR to be /run since that will exist after a
    reboot and bindings wil be perserved during upgrades
    but not reboots. (bz 1240817)


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1014656 - Split out a samba-winbind-modules package.


author: - Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-4
changelog:
  - resolves: #1034048 - Fix group name substitution in template homedir.
  - resolves: #1018041 - Fix CVE-2013-4408.
  - related: #884169 - Fix several covscan warnings.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-9
changelog:
  - resolves: #1033122 - Fix dropbox regression.
  - resolves: #1040464 - Fix %G substituion for config parameters.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-12
changelog:
  - resolves: #1050886 - Fix full CPU utilization in winbindd.
  - resolves: #1051400 - Fix segfault in smbd.
  - resolves: #1051402 - Fix SMB2 server panic when a smb2 brlock times out.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-17
changelog:
  - resolves: #1067606 - Fix wbinfo with one-way trust.
  - resolves: #1069569 - Fix memory leak reading the printer list.


author: - Alexander Bokovoy <abokovoy@redhat.com> - 4.1.1-30
changelog:
  - resolves: #1083859  - Force KRB5CCNAME in Samba systemd units.
  - related: #1082598 - Fully enables systemd integration.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-34
changelog:
  - resolves: #1105505 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108845 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105574 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-37
changelog:
  - resolves: #1072352 - Make pidl a noarch subpackage.
  - resolves: #1133516 - Create a samba-test-libs package.
  - resolves: #1132873 - Add support to rebuild without clustering.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-2
changelog:
  - resolves: #1138554 - Fix consuming a lot of CPU when re-reading printcap info.
  - resolves: #1134323 - Fix running Samba on little endian Power8 (ppc64le).
  - resolves: #1113064 - Fix case sensitivity options with SMB2 protocols.
  - resolves: #1088924 - Fix applying ACL masks when setting ACLs.
  - resolves: #1135723 - Fix 'force user' regression.
  - resolves: #1117770 - Fix empty full_name field with samlogon.
  - resolves: #1101210 - Fix telling systemd that nmbd is waiting for interfaces.
  - resolves: #1127931 - Fix getgroups() with idmap_ad returning non-mapped groups.
  - resolves: #1144963 - Fix idmap_ad with SFU against trusted domains.
  - resolves: #1140568 - Fix a segfault in the smbclient echo command.
  - resolves: #1089940 - Improve service principal guessing in 'net ads'.
  - resolves: #955561 - Fix overwriting of SPNs in AD during 'net ads join'.
  - resolves: #955562 - Add precreated SPNS from AD during keytab initialization.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.12-3
changelog:
  - resolves: #878351 - Fix usage of AES keys by default.
  - resolves: #861366 - Fix KRB5 locator to use same KDC for joining and DNS update.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-9
changelog:
  - resolves: #1162552 - Fix net ads join segfault on big endian systems.
  - resolves: #1164203 - Fix net ads join segfault with existing keytab.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-11
changelog:
  - resolves: #1163748 - Fix smbclient -L fails against new Windows versions
                         over TCP.
  - resolves: #1167849 - Fix smbstatus --profile always returning EXIT_FAILURE.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-13
changelog:
  - resolves: #1172089 - Fix 'net rpc join' with schannel changes.
  - resolves: #1170883 - Fix 'net time system' segfault.


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1196140 - Rebase Samba to version 4.2.2
  - resolves: #1186403 - Split patches to fix multiarch conflicts
  - resolves: #1167325 - Retrieve printer GUID from AD if it is not in the
                         registry
  - resolves: #1220174 - Fix issues with winbind library dependencies
  - resolves: #1211658 - Fix stale cache entries on printer rename
  - resolves: #1228809 - Fix reconnect on session exparation


author: Andreas Schneider <asn@redhat.com> - 4.2.2-2
changelog:
  - related: #1196140 - Add missing build dependency for libarchive
  - related: #1196140 - Make sure we do a hardened build


author: Andreas Schneider <asn@redhat.com> - 4.2.3-1
changelog:
  - related: #1196140 - Rebase to version 4.2.3
  - resolves: #1237036 - Fix DCERPC PDU calculation
  - resolves: #1237039 - Fix winbind request cancellation
  - resolves: #1223981 - Fix possible segfault with smbX protocol setting


author: Andreas Schneider <asn@redhat.com> - 4.2.3-2
changelog:
  - resolves: #1238194 - Fix the 'dfree command'
  - resolves: #1216062 - Document netbios name length limitation


author: Andreas Schneider <asn@redhat.com> - 4.2.3-6
changelog:
  - resolves: #1255322 - Fix 'map to guest = Bad uid' option
  - resolves: #1255326 - Fix segfault with 'mangling method = hash'


author: Andreas Schneider <asn@redhat.com> - 4.2.3-9
changelog:
  - resolves: #1273912 - Fix dependencies to samba-common
  - resolves: #1273393 - Fix user after free in smb name resolution


author: Guenther Deschner <gdeschner@redhat.com> - 4.2.3-11
changelog:
  - resolves: #1290710
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


