# changelog

author: Mike Christie <mchristi@redhat.com>
changelog:
  - update package to open-iscsi svn rev 571
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - From Andy Henson <andy@zexia.co.uk>:
    Autogenerate /etc/initiatorname.iscsi during install if not already present
  - Remove code to autogenerate /etc/initiatorname.iscsi from initscript
  - From dan.y.roche@gmail.com:
    add touch and rm lock code
  - update README
  - update default iscsid.conf. "cnx" was not supported. The correct
    id was "conn".


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to bring in ppc64 unsigned long vs unsigned
    long long fix and iscsadm return value fix. Also drop rdma patch
    becuase it is now upstream.


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-20
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - support ACLs under skel directory
  - refer to PAM in /etc/login.defs
  - userdel option to remove Linux login <-> SELinux login mapping
  - useradd special exit value if SELinux user mapping is invalid
  - usermod special exit value if SELinux user mapping is invalid
  - fix gshadow functions from shadow utils
  - fix find_new_uid/gid for big UID/GID_MAX
  - don't show users who were not logged in lastlog
    Resolves: #586796 #629277 #639900 
    Resolves: #639975 #639976 #667593 #672510
    Resolves: #693377 #706321


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11
changelog:
  - fix license tag (#226416)
  - get rid of tabs in spec file (#226416)
  - convert HOWTO to UTF8 (#226416)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8
changelog:
  - groupmems: check username for valid character (#455603)
  - groupmems: don't segfault on nonexistent group (#456088)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2
changelog:
  - improve audit logging (#211659)
  - improve "-l" option. Do not reset faillog if it's used (#213450).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries 
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-5
changelog:
  - fix memory leak, and CPU spinning when grp_update() and 
    duplicate group entries in /etc/group (#151484)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-4
changelog:
  - use newgrp binary
  - newgrp don't ask for password if user's default GID = group ID,
    ask for password if there is some in /etc/gshadow 
    and in /etc/group is 'x' (#149997)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-35
changelog:
  - make the limit for the group name the same as the username (determined
    by the header files, rather than a constant) (#56850)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-33
changelog:
  - allow for mixed case and dots in usernames (#135401)
  - all man pages to UTF-8, not just Japanese (#133883)
  - add Polish blurb for useradd -n man page option (#82177)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-31
changelog:
  - check for non-standard legacy place for ncsd HUP (/var/run/nscd.pid) and
    then the std FHS place (/var/run/nscd.pid) (#125421)


author: Dan Walsh <dwalsh@redhat.com> 4.0.3-23
changelog:
  - Add get_enforce checks
  - Clean up patch for potential upstream submission
  - Add removemalloc patch to get it to build on 3.4


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-15
changelog:
  - don't convert man pages to UTF-8 for RHEL 3, conditionalized using macro
  - fixup dangling man page references


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-14
changelog:
  - lastlog: don't pass a possibly-smaller field to localtime (#109648)
  - configure: call AC_SYS_LARGEFILE to get large file support


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-6
changelog:
  - adjust mailspool patch to complain if no group named "mail" exists, even
    though that should never happen


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-13
changelog:
  - prevent libshadow from being built more than once, to keep automake happy
  - change how md5 and md5crypt are enabled, to keep autoconf happy
  - remove unpackaged files after %install


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-12
changelog:
  - force .mo files to be regenerated with current gettext to flush out possible
    problems
  - fixup non-portable encodings in translations
  - make sv translation header non-fuzzy so that it will be included (#71281)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-4
changelog:
  - use -O0 instead of -O on ia64
  - build in source directory
  - don't leave lock files on the filesystem when useradd creates a group for
    the user (#50269)
  - fix the -o option to check for duplicate UIDs instead of login names (#52187)


author: Bernhard Rosenkraenzer <bero@redhat.com> 20000902-1
changelog:
  - Create an empty mailspool when creating a user so non-setuid/non-setgid
    MDAs (postfix+procmail) can deliver mail (#41811)
  - 20000902
  - adapt patches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't overwrite user dot files in useradd (#19982)
  - truncate new files when moving overwriting files with the contents of other
    files while moving directories (keeps files from looking weird later on)
  - configure using %{_prefix} as the prefix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - take LOG_CONS out of the openlog() call so that we don't litter the
    screen during text-mode upgrades


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove a fixed-size buffer that caused problems when adding a huge number
    of users to a group (>8192 bytes) (Bugs #3809, #11930)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change symlinked man pages to includers
  - require /usr/bin/newgrp (util-linux) so that /usr/bin/sg isn't left dangling


author: Matt Wilson <msw@redhat.com>
changelog:
  - use mandir for FHS
  - added patches in src/ and po/ to honor DESTDIR
  - use make install DESTDIR=$RPM_BUILD_ROOT


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix usermod patch to check for shadow before doing any shadow-specific stuff
    and merge it into the pwlock patch


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - Serial: 1 because now we are using 19990827 (why the heck can't they have
    a normal version just like everybody else?!)
  - ported all patches to the new code base


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - have userdel remove user private groups when it is safe to do so
  - allow -f to force user removal even when user appears busy in utmp


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Note that /usr/sbin/mkpasswd conflicts with /usr/bin/mkpasswd;
    one of these (I think /usr/sbin/mkpasswd but other opinions are valid)
    should probably be renamed.  In any case, mkpasswd.8 from this package
    needs to be installed. (problem #823)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the spec file
  - updated the patch so that new accounts created on shadowed system won't
    confuse pam_pwdb anymore ('!!' default password instead on '!')
  - fixed a bug that made useradd -G segfault
  - the check for the ut_user is now patched into configure


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch for XOPEN oddities in glibc headers
  - check for ut_user before checking for ut_name -- this works around some
    confusion on glibc 2.1 due to the utmpx header not defining the ut_name
    compatibility stuff. I used a gross sed hack here because I couldn't make
    automake work properly on the sparc (this could be a glibc 2.0.99 problem
    though). The utuser patch works fine, but I don't apply it.
  - sleep after running autoconf


author: Bala.FA <barumuga@redhat.com> - v3.6.0.45-1
changelog:
  - fixes bugs bz#1104459 bz#1139104 bz#1172332 bz#1179563 bz#1180560 
    bz#1181044 bz#1182554 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.33-1
changelog:
  - fixes bugs bz#1061585 bz#1101438 bz#1104635 bz#1107606 bz#1111534 
    bz#1160280 bz#1162468 bz#1163703 bz#991300 bz#BUG: bz#of


author: Bala FA <barumuga@redhat.com> - v3.6.0.32-1
changelog:
  - fixes bugs bz#1102647 bz#1104061 bz#1118359 bz#1130158 bz#1142283
    bz#1146906 bz#1147460 bz#1154836


author: Bala FA <barumuga@redhat.com> - v3.6.0.31-1
changelog:
  - fixes bugs bz#969355 bz#1054712 bz#1055489 bz#1102594 bz#1104061
    bz#1109742 bz#1114999 bz#1115441 bz#1122511 bz#1123732 bz#1138547
    bz#1139156 bz#1142087 bz#1142960 bz#1144423 bz#1144428 bz#1146369
    bz#1146830 bz#1147427 bz#1152990


author: Bala FA <barumuga@redhat.com> - v3.6.0.30-1
changelog:
  - fixes bugs bz#1110864 bz#1113923 bz#1115899 bz#1131466 bz#1157950
    bz#1157975 bz#1157980 bz#1157982


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Bala FA <barumuga@redhat.com> - v3.6.0.26-1
changelog:
  - fixes bugs bz#1111029 bz#1111577 bz#1113852 bz#1116761 bz#1117135 
    bz#1117283 bz#1119223 bz#1120830 bz#1121059 bz#1121603


author: Bala FA <barumuga@redhat.com> - v3.6.0.25-1
changelog:
  - fixes bugs bz#1007033 bz#1101910 bz#1104121 bz#1104921 bz#1109150 
    bz#1116376 bz#1116703 bz#1116992 bz#1117135 bz#1120198 bz#1120245 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.24-1
changelog:
  - fixes bugs bz#1104153 bz#1109149 bz#1112582 bz#1113961 bz#1114008 
    bz#1114592 bz#1115266 bz#1115267


author: Bala FA <barumuga@redhat.com> - v3.6.0.19-1
changelog:
  - fixes bugs bz#1030309 bz#1088231 bz#1090986 bz#1094681 bz#1095314 
    bz#1098971 bz#1108018 bz#1108505 bz#1108570 bz#1109149


author: Bala FA <barumuga@redhat.com> - v3.6.0.18-1
changelog:
  - fixes bugs bz#1006729 bz#1064597 bz#1066389 bz#1082951 bz#1098971 
    bz#1102550 bz#1103688 bz#1105323 bz#1107665 bz#1107961 bz#1108018 bz#1109141


author: Bala FA <barumuga@redhat.com> - v3.6.0.17-1
changelog:
  - fixes bugs bz#1082951 bz#1086145 bz#1097102 bz#1100211 bz#1103680 
    bz#1104159 bz#1104574 bz#1104635 bz#1105102 bz#1107523 bz#1108652


author: Bala FA <barumuga@redhat.com> - v3.6.0.16-1
changelog:
  - fixes bugs bz#1096565 bz#1096614 bz#1097512 bz#1098087 bz#1099385 
    bz#1101407 bz#1101514 bz#1101961 bz#1104602 bz#1105444


author: Bala FA <barumuga@redhat.com> - v3.6.0.13-1
changelog:
  - fixes bugs bz#1046908 bz#1082043 bz#1094832 bz#1095267 bz#1096139 
    bz#1098196 bz#1100282 bz#1104016 bz#1104486


author: Bala FA <barumuga@redhat.com> - v3.6.0.2-1
changelog:
  - fixes bugs bz#1061580 bz#1077452 bz#1091961 bz#1093602 bz#1096616 
    bz#1096700 bz#1097224 bz#1098020 bz#1098053


author: Bala.FA <barumuga@redhat.com> - v3.6.0.0-1
changelog:
  - Initial build fixes bugs bz#1032894, bz#1039544, bz#1040351,
    bz#1046853, bz#1047782, bz#1053579, bz#1061685, bz#1074947,
    bz#1078061, bz#1080970, bz#1089172, bz#1091926, bz#1091934,
    bz#1092841, bz#1093602, bz#1094708, bz#1095097, bz#1095585,
    bz#1096026, bz#874554, bz#959986


author: EL Errata <el-errata_ww@oracle.com> - 3.2.29-81.0.1
changelog:
  - Remove Red Hat references [bug 23087144] (Keshav Sharma)
  - Fix Bug 22584422 yum --enablerepo problem (remove previous uln patch). (leon.w.wang@oracle.com)
  - Bug13869 Fix the CVE duplicate entries problem. (leon.w.wang@oracle.com)
  - Revert bug tracker URL to http://yum.baseurl.org/report by
    disable BZ-528738-bugtracker.patch that changed the URL to the redhat specific one.
    [bug 11713265] (john.haxby@oracle.com)
  - Add kernel-uek packages to install only list (john.haxby@oracle.com)
  - Add uln.patch to fix repository not found [bug 12614512] (leon.w.wang@oracle.com)
  - Add kernel-uek-firmware package to install only list [orabug 13535055]


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-77
changelog:
  - Filter duplicate packages from different repos in doPackageLists(pkgnarrow='obsoletes').
  - Resolves: bug#1272828


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-76
changelog:
  - Remove "username" and "password" options from yum.conf man page.
  - Resolves: bug#1367861
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1155687


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-72
changelog:
  - Add ftp_disable_epsv config option.
  - Resolves: bug#1293363
  - Honor proxy=_none_ set in yum.conf.
  - Resolves: bug#1293385


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-71
changelog:
  - Fix manpage for query_install_excludes option.
  - Resolves: bug#1248715
  - Don't traceback on xml parsing.
  - Resolves: bug#1225481
  - Respect epoch in package names.
  - Resolves: bug#1211390


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-70
changelog:
  - Add links to knowledge base articles.
  - Resolves: bug#1248686
  - Resolves: bug#1248687
  - Resolves: bug#1248690
  - Backport missing_requires to API.
  - Resolves: bug#1197245
  - Get correct rpmdb path from rpm configuration.
  - Resolves: bug#1271584


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-65
changelog:
  - Add query_install_excludes conf./docs and use it for list/info/search/provides.
  - Resolves: bug#1154076
  - Add --assumeno option.
  - Resolves: bug#1174612
  - Fix Obsoletes and Conflicts for yum-plugin-downloadonly.
  - Related: bug#1144503


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-64
changelog:
  - Backport support for RPMCALLBACK_SCRIPT_START and RPMCALLBACK_SCRIPT_STOP callbacks.
  - Resolves: bug#1076076


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-63
changelog:
  - Also ignore ENOTDIR in stat_f.
  - Resolves: bug#1165783
  - Have check provides check directly against the rpm index, and then quit.
  - Resolves: bug#1136212
  - RepoMD.dump_xml: Do not truncate tag strings.
  - Resolves: bug#952291
  - Fix extra '</pkglist>' tags on multi-collection errata.
  - Resolves: bug#887407
  - Change protected_multilib man page entry.
  - Resolves: bug#1136105


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-62
changelog:
  - Workaround history searching for [abc] character lists failures.
  - Resolves: bug#1155994
  - Work around python broken getlocale() call.
  - Resolves: bug#905100
  - Implement pkg.remote_url for YumLocalPackage.
  - Resolves: bug#1016148
  - Expect KB as well as MB in disk requirements message from rpm.
  - Resolves: bug#1051931
  - Add severity and release to updateinfo errata equality test.
  - Resolves: bug#893994
  - Init "found" variable for distro-sync full.
  - Resolves: bug#1181847
  - Show advisory even if package arch changed.
  - Resolves: bug#1171543
  - Move --downloadonly from plugin to core.
  - Resolves: bug#1144503


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-59
changelog:
  - Make environment variables work in yum.conf.
  - Resolves: rhbz#1102575
  - Fix rpmtrans problems when using --installroot.
  - Resolves: rhbz#861204


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-58
changelog:
  - Add strong_requires.
  - Resolves: rhbz#1099195
  - Display script output when transaction fails.
  - Resolves: rhbz#856969
  - Add rules for naming files in /etc/yum/vars to yum.conf man page.
  - Related: rhbz#977380


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-57
changelog:
  - Replace variables in include lines in .repo files.
  - Resolves: rhbz#977380
  - Revert install to use returnPackagesByDep() API again.
  - Resolves: rhbz#965695.


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-55
changelog:
  - Redownload bad metadata when open-checksums are the same.
  - Resolves: rhbz#1081613
  - docs: update "yum check" extra args description.
  - Resolves: rhbz#1014993
  - docs: remove dots after "via" preposition.
  - Resolves: rhbz#1011237
  - Skip unavailable repos with skip_if_unavailable=1 when doing 'yum grouplist'.
  - Resolves: rhbz#1029359


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-51
changelog:
  - Make depsolver respect versions of virtual provides.
  - Resolves: rhbz#1073406
  - Make simple remove transactions work without network.
  - Resolves: rhbz#967121
  - sys.stdout: encode unicode strings only.
  - Resolves: rhbz#969880
  - Remove 'size' option from logrotate config, since it has no effect.
  - Resolves: rhbz#1005879
  - Normalize paths in file URIs.
  - Resolves: rhbz#1009499
  - Fix verifying permissions for ghost files.
  - Resolves: rhbz#1045415
  - Pass any check-update arguments to "list obsoletes".
  - Resolves: rhbz#1069827


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-50
changelog:
  - Add epoch to updateinfo xml output.
  - Resolves: rhbz#1005282
  - Fix RPMDBAdditionalData init.
  - Resolves: rhbz#883463
  - Honor proxy=_none_.
  - Resolves: rhbz#903634
  - Fix "distro" tag parsing/dumping.
  - Resolves: rhbz#1073256


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-48
changelog:
  - Make utils.get_process_info() respect executable names with spaces.
  - Make parts of utils.get_process_info() reusable.
  - Resolves: rhbz#1079401


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-47
changelog:
  - resolveDeps: Keep installedFileRequires in sync.
  - Resolves: rhbz#920758
  - Fix documentation for $arch.
  - Resolves: rhbz#1003554
  - Fix --setopt to accept repos with dots in names.
  - Resolves: rhbz#1024111


author: James Antill <james.antill@redhat.com> - 3.2.29-37
changelog:
  - Move basename checking for nss snafu.
  - Resolves: rhbz#885159
  - Merge "identical" updateinfo errata from different repos.
  - Resolves: rhbz#737173


author: James Antill <james.antill@redhat.com> - 3.2.29-36
changelog:
  - Speedup to_xml, and thus. createrepo.
  - Resolves: rhbz#878335
  - Don't throw an error with yum history list when there is no history.
  - Resolves: rhbz#802462
  - Verify options before doing anything (fix BZ references).
  - Resolves: rhbz#880968


author: James Antill <james.antill@redhat.com> - 3.2.29-31
changelog:
  - new obs. code, for localpkgs etc.
  - Resolves: rhbz#674756
  - plugins can now set a "failure" exit-code, on "success".
  - Resolves: rhbz#684859
  - rebase skip-broken code.
  - Resolves: rhbz#727553
  - merge "identical" updateinfo errata from different repos.
  - Resolves: rhbz#737173
  - Add man page documentation for yum-cron.
  - Resolves: rhbz#744335
  - new installonly provides, for kernel/vms.
  - Resolves: rhbz#748054
  - history stats traceback on empty file.
  - Resolves: rhbz#802462
  - yum man pages typo fixes.
  - Resolves: rhbz#809117
  - updateinfo cache fix.
  - Resolves: rhbz#815568
  - reinstall args. bad.
  - Resolves: rhbz#819522
  - Fix confusion when we try to restore N kernels at once.
  - Resolves: rhbz#820674
  - Fix printing the obsoleters message.
  - Resolves: rhbz#834159
  - Multilib upgrade failure message.
  - Resolves: rhbz#840543
  - Verify options before doing anything.
  - Resolves: rhbz#880968
  - Fix problem with ui_nevra_dict and too many args for format string.
  - Resolves: rhbz#858844


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-29
changelog:
  - Ignore time skew when ordering transactions.
  - Resolves: rhbz#809373
  - Fix _conv_pkg_state
  - Resolves: rhbz#809392


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-23
changelog:
  - Chdir to "/" if "." not readable, or CWD unlinked.
  - Chdir to "/" if CWD unlinked.
  - Resolves: rhbz#711358 rhbz#698795
  - Catch PackageSackError from _rpmdb_warn_checks
  - Resolves: rhbz#735234
  - With no arg. to clean, give the error and then fail.
  - Resolves: rhbz#735333
  - Report transaction verification progress
  - Resolves: rhbz#737826
  - Add reset nice config option
  - Resolves: rhbz#742363
  - 'yum makecache' honours skip_if_unavailable=1
  - Resolves: rhbz#769864
  - quote proxy username and password
  - resolves: rhbz#770117


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-21
changelog:
  - Don't issue bug report warning on rpm depsolve check errors
  - Resolves: rhbz#694401
  - Do not cache updateinfo for too long
  - Resolves: rhbz#733391


author: James Antill <james.antill@redhat.com> - 3.2.29-20
changelog:
  - Fix bugs in the history store patch (unicode and yumdb write fail).
  - Resolves: rhbz#730365
  - history nows stores and display rpmdb/yumdb information (Eg. from_repo).
  - Relates: rhbz#662243


author: Florian Festi <ffesti@redhat.com> - 3.2.29-19
changelog:
  - Removed locking changes from history store and display repo information.
  - Resolves: rhbz#730291
  - Relates: rhbz#662243


author: James Antill <james.antill@redhat.com> - 3.2.29-18
changelog:
  - Deal with pre scripts errors better.
  - Resolves: rhbz#661962
  - history nows stores and display rpmdb/yumdb information (Eg. from_repo).
  - Resolves: rhbz#662243
  - No bug report warning on depsolve check errors.
  - Resolves: rhbz#694401
  - Don't display baseurl in repolist for non-mirrors.
  - Resolves: rhbz#697885
  - Workaround  rpm-python big size problems.
  - Resolves: rhbz#704600
  - Fix false installroot config opt. warning.
  - Resolves: rhbz#707358
  - Fix retrieve gpg syntax bug.
  - Resolves: rhbz#709311
  - Fix for pulp repostorage API usage.
  - Resolves: rhbz#727574
  - Fix stale metadata cache checking.
  - Resolves: rhbz#727586
  - Make -q history info load-ts compatible.
  - Resolves: rhbz#728253
  - Changes needed for createrepo --update with sqlite.
  - Relates: rhbz#716235
  - Add upgrade-to.
  - Resolves: rhbz#728526


author: James Antill <james.antill@redhat.com> - 3.2.29-17
changelog:
  - Turn off repo. checking as rhnplugin uncached repos. aren't setup in init.
  - Resolves: rhbz#700035


author: James Antill <james.antill@redhat.com> - 3.2.29-12
changelog:
  - Better warning for "empty" groups install.
  - Resolves: rhbz#655281
  - Disable translation part of self-test, as we don't use it in RHEL.
  - Resolves: rhbz#633255


author: James Antill <james.antill@redhat.com> - 3.2.29-7
changelog:
  - RFE: Allow importing of some gpg keys, atm. we die if the user says no to
  - anything.
  - Resolves: rhbz#606644


author: James Antill <james.antill@redhat.com> - 3.2.29-6
changelog:
  - Allow 32bit to checksum 2GB files.
  - Relates: rhbz#612409
  - Fix overloaded setup recursion with rhnplugin and some API calls.
  - Resolves: rhbz#678043
  - Turn off download sig. checking so we don't hold the rpmdb ts lock.
  - Resolves: rhbz#677410


author: James Antill <james.antill@redhat.com> - 3.2.29-3
changelog:
  - Rebase yum to 3.2.29-3
  - Resolves: rhbz#659494
  - Fix some bugs with rebase:
  - Locking for non-root when using cache:
  - Resolves: rhbz#590675
  - GPG CA keys auto. import, if already seen:
  - Resolves: rhbz#662712
  - Anaconda no ts_file, 670784 and 670257.
  - Resolves: rhbz#670784
  - Conflict with old PK
  - Relates: rhbz#670163


author: James Antill <james.antill@redhat.com> - 3.2.29-2
changelog:
  - Rebase yum to 3.2.29, for many features bugfixes see:
  - http://yum.baseurl.org/wiki/whatsnew/3.2.29
  - Resolves: rhbz#659494
  - Some of the changes are:
  - yum downgrade for x86_64 package installs i686 packages (dep
  - Resolves: rhbz#584262
  - Lock yum for non-root users, so multiple simultaneous runs d
  - Resolves: rhbz#590675
  - Include yum-cron in RHEL
  - Resolves: rhbz#602149
  - repo file saving error when in repo id is $basearch
  - Resolves: rhbz#604973
  - yum history crashes displaying transaction done by user with
  - Resolves: rhbz#605039
  - RFE: Allow importing of some gpg keys, atm. we die if the us
  - Resolves: rhbz#606644
  - yum localinstall drpms/foo.drpm leads to Traceback
  - Resolves: rhbz#607258
  - reinstall of provides causes traceback, if the package isn't
  - Resolves: rhbz#612201
  - rpmdb open failed exception changed (rpm.error vs. TypeError
  - Resolves: rhbz#614023
  - Change the default bugtracker_url (patch from RHEL-5)
  - Resolves: rhbz#615447
  - reinstall gets confused when run twice on one package
  - Resolves: rhbz#623553
  - yum should treat epoch "None" as epoch "0"
  - Resolves: rhbz#627290
  - Z-stream needed on yum installonly kernel-modules handling
  - Resolves: rhbz#628151
  - yum not working properly with yum-plugin-versionlock
  - Resolves: rhbz#630983
  - /var/cache/yum periodically filling up
  - Resolves: rhbz#632391
  - yum self-test fails
  - Resolves: rhbz#633255
  - yum cannot handle channel with sha384 checksum
  - Resolves: rhbz#633270
  - RFE: parse enhanced updateinfo metadata
  - Resolves: rhbz#634117
  - yum traceback when running concurrent yum and rpm transactio
  - Resolves: rhbz#634595
  - yum group's "installation" is confusing for groups with only
  - Resolves: rhbz#655281
  - RFE: GPG CA keys
  - Resolves: rhbz#662712
  - yum --changelog update traceback
  - Resolves: rhbz#663378


author: James Antill <james.antill@redhat.com> - 3.2.27-15
changelog:
  - Remove kernel-modules from installonly configuration.
  - Resolves: rhbz#628151
  - Handle generated .sqlite files, for unique .xml MD.
  - Resolves: rhbz#632391


author: Seth Vidal <svidal@redhat.com> - 3.2.27-14
changelog:
  - fixed 588911 patch to be correct patch
  - add patch file for 572770 to take the old date from the wrong patch from 588911


author: James Antill <james.antill@redhat.com> - 3.2.27-13
changelog:
  - Don't traceback when proc isn't mounted.
  - Resolves: rhbz#614496
  - Own the /etc/yum/vars dir.
  - Resolves: rhbz#611906


author: James Antill <james.antill@redhat.com> - 3.2.27-10
changelog:
  - Stop downgrade dep. chain removals
  - Resolves: rhbz#584262
  - Fix for rpm bindings api change
  - Resolves: rhbz#598639
  - Add plugin hooks for verify transaction pre/post.
  - Resolves: rhbz#602354
  - Fix groupremove_leaf_only when it empties the transaction.
  - Resolves: rhbz#603002


author: James Antill <james.antill@redhat.com> - 3.2.27-9
changelog:
  - Fix installs of obsoleted multiarch packages.
  - Resolves: rhbz#593522
  - Create a defense against akmod style postinst install hacks.
  - Resolves: rhbz#595553


author: James Antill <james.antill@redhat.com> - 3.2.27-8
changelog:
  - Move rpmdb cache/indexes to /var/lib
  - Resolves: rhbz#590340
  - Fix old missing recheck in depsolve
  - Resolves: rhbz#590339


author: James Antill <james.antill@redhat.com> - 3.2.27-7
changelog:
  - A few minor bugfixes from upstream
  - yum.log perms
  - Resolves: rhbz#588911
  - installroot double prefixing, on anaconda/kickstart install
  - Resolves: rhbz#577627
  - Add nocontexts flag to tsflags, if available.
  - Resolves: rhbz#588910
  - Speedup many install/update of same pkg.
  - Resolves: rhbz#588908
  - Correct os.path.link => os.path.islink typo, for dynamic yum vars.
  - Resolves: rhbz#588907


author: James Antill <james at fedoraproject.org> - 3.2.25-13
changelog:
  - A couple of bugfixes, most notably:
  -  you can now install gpg keys again!
  -  bad installed file requires don't get cached.


author: James Antill <james at fedoraproject.org> - 3.2.25-10
changelog:
  - latest head
  - Fixes for pungi, rpmdb caching and kernel-PAE-devel duplicates finding
  - among others.


author: James Antill <james at fedoraproject.org> - 3.2.25-7
changelog:
  - Fixes the mash bug, lookup in the tsInfo too. :(
  - And fix the txmbr/po confusion ... third build the charm.


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.25-2
changelog:
  - rebuild yum with latest HEAD patch
  - add rpmdb caching patch james wrote to see if it breaks everyone :)


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.23-9
changelog:
  - update to latest head - make livecd creation work again in rawhide
  - disable one of the man page patches until after 3.2.24 is released b/c
    of the changes to the man page in the head patch


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-20
changelog:
  - Resolves: #855832
    "Installation from NFS: That directory could not be mounted from the server"
    by switching NFS mount default from UDP to TCP.
    There was another place (in uclibc this time) which used UDP.


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-18
changelog:
  - Resolves: #855832
    "Installation from NFS: That directory could not be mounted from the server"
    by switching NFS mount default from UDP to TCP.


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-16
changelog:
  - Resolves: #859817
  - "mknod in busybox can not create device file with major number greater than 255"


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-13
changelog:
  - Resolves: #790335 "busybox various flaws" including:
    "buffer underflow in decompression"
    "udhcpc insufficient checking of DHCP options"


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-12
changelog:
  - Backport 'set -o pipefail' support
  - Resolves: #782018
  - Add btrfs support to findfs and related applets
  - Resolves: #751927


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-11
changelog:
  - Fix cpio applet to print "N blocks" to stderr, not stdout
  - Change .config, making hwclock read adjtime from correct location:
    /etc/adjtime
  - Fix awk to correctly interpret numbers with leading zeros: 02.345
  - Resolves: #615391, #621853, #633961


author: Milos Jakubicek <xjakub@fi.muni.cz> - 1:1.13.2-4
changelog:
  - Fixing FTBFS on i586/x86_64/ppc, ppc64 still an issue:
  - Updated uClibc to 0.9.30.1, subsequently:
  - Removed uClibc-0.9.30 patch (merged upstream).
  - Added uClibc-0.9.30.1-getline.patch -- prevents conflicts with getline()
    from stdio.h
  - Temporarily disable C99 math to bypass ppc bug, see https://bugs.uclibc.org/show_bug.cgi?id=55


author: Ivana Varekova <varekova@redhat.com> - 1:1.1.1-1
changelog:
  - update to 1.1.1
  - fix CVE-2006-1058 - BusyBox passwd command 
    fails to generate password with salt (#187386)
  - add -minimal-toc option
  - add RPM_OPT_FLAGS
  - remove asm/page.h used sysconf command to get PAGE_SIZE
  - add overfl patch to aviod Buffer warning


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - update to 0.60.2
  - include more pieces for the anaconda version so that collage can go away
  - make the mount in busybox.anaconda default to -onolock


author: Gabriel Somlo <somlo at cmu.edu> 2.0.4-1
changelog:
  - update to 2.0.4
  - patch to avoid tcp/dualtest server from quitting (bugzilla #449796), also submitted to iperf sourceforge ticket tracker (#1983829)


author: Gabriel Somlo <somlo at cmu.edu> 2.0.2-1
changelog:
  - initial build for fedora extras (based on Dag Wieers SRPM)
  - fixed license tag: BSD (U. of IL / NCSA), not GPL


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-20.1
changelog:
  - reserve uid 189 for hacluster (#998923)
  - reserve gid 189 for haclient (#998923)
  - reserve 160:160 for swift (openstack-swift) (#998912)
  - reserve 161:161 for glance (openstack-glance) (#998912)
  - reserve 162:162 for nova (openstack-nova) (#998912)
  - reserve 163:163 for keystone (openstack-keystone) (#998912)
  - reserve 164:164 for quantum (openstack-quantum) (#998912)
  - reserve 165:165 uidgid pair for cinder (#998912)
  - reserve 166:166 uidgid pair for ceilometer (#998912)
  - reserve 187:187 for heat (openstack-heat) (#998912)
  - reserve 185:185 for jboss-as (#998912)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-11
changelog:
  - reserve uidgid pair 109:109 for rhevm (#652287)
  - add double quotes arround sourced profile.d scripts -
    allow special characters in script names(#661645)
  - use printf instead of echo in bashrc scripts(#620408)
  - change detection of interactive shell in profile for ksh(#616117)
  - respect profile.d script defined umask even in interactive
    login shells(#661681)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-9
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi
  - update name of group reserved by cyrus-imapd to saslauth


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-6
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)
  - reserve uidgid pair 113:113 for usbmuxd


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-5
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.11-1
changelog:
  - don't have HISTCONTROL ignorespace by default (#520632),
    but do not override it when it is already set
  - add csync alias for port 2005 / tcp, udp


author: Ondrej Vasik <ovasik@redhat.com> 2.8.9-1
changelog:
  - reserve uidgid pair 108:108 for ovirt from libvirt (#513261)
  - reserve uidgid pair 111:111 for saned from sane-backends
    (#520634)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.8-1
changelog:
  - change permissions on /etc/shadow and /etc/gshadow to 0000 and
    use capabilities for them(#517577)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.7-1
changelog:
  - increase threshold for uidgid reservations to 200
  - reserve uidgid pair 107:107 for qemu (libvirt,#511957)
  - reflect threshold in profile and bashrc, do inform about
    uidgid file existence there
  - remove old remnants about portmap from hosts.deny(#509919)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.5-1
changelog:
  - use history-search-backward/forward for pageup/pagedown
    mapping in inputrc (#500989)
  - add HISTCONTROL="ignoreboth" to /etc/profile to not include
    duplicities and lines starting with space into the history
    (#500819)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.4-1
changelog:
  - add oprofile (16:16) to uidgid
  - use os.remove instead of os.execute in lua post
    - no dependency on /bin/sh (thanks Panu Matilainen)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.3-1
changelog:
  - do not disable coredumps in profile/csh.cshrc scripts,
    coredumps already disabled in rawhide's RLIMIT_CORE(#495035)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.1-1
changelog:
  - do ship/generate /etc/{shadow,gshadow} files(#483251)
  - do ship default /etc/hosts with setup (#483244)
  - activate multi on (required for IPv6 only localhost
    recognition out-of-the-box) (#486461)
  - added postun section for cleaning of dangerous .rpmnew
    files after updates
  - make profile and bashrc more portable (ksh, #487419)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-4
changelog:
  - drop <lua> scriptlet completely(audio/video group
    temporarily created by packages which use it for
    updates(#477769))


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-2
changelog:
  - reserve 87 gid for polkituser (just uid was reserved),
    reserve 18 gid for dialout(to prevent conflicts with
    polkituser gid)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-1
changelog:
  - synchronize /etc/services with latest IANA, do not use
    tabs in that file to have consistent output
  - fix indentation in /etc/profile and /etc/bashrc
    (#481074)
  - assign uid 36 for vdsm, gid 36 for kvm
    (#346151,#481021)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.6-1
changelog:
  - make uidgid file better parsable (synchronize tabs)
  - reserve gid 11 for group cdrom (udev,MAKEDEV)
  - reserve gid 33 for group tape (udev,MAKEDEV)
  - reserve gid 87 for group dialout (udev,MAKEDEV)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.5-2
changelog:
  - do not export PATH twice(#449286 NOTABUG revert)
  - do not export INPUTRC(to respect just created ~/.inputrc)
    (#443717)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-3
changelog:
  - update protocols to latest IANA list (2008-04-18)
  - update services to latest IANA list (2008-11-17)
  - mark /etc/protocols and /etc/inputrc %config(noreplace)
  - added URL, fixed few rpmlint warnings
  - do own audio and video group (#458843), create it in default
    /etc/group


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-2
changelog:
  - again process profile.d scripts in noninteractive shells,
    but do not display stderr/stdout messages(#457243)
  - fix wrong prompt for csh/tcsh (#443854)
  - don't show error message about missing hostname in profile
    (#301481)
  - reserve rquotad port 875 in /etc/services (#455859)
  - export PATH after processing profile.d scripts (#449286)
  - assign gid's for audio (:63) and video (:39) group(#458843),
    assign uidgid pair (52:52) for puppet (#471918)
  - fix /etc/services duplicities to pass serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.7.4-1
changelog:
  - Include new serviceslint for speedup (#465642)
  - Cleaned up services due to newly discovered bugs in it with new serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.6.11-1
changelog:
  - Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221)
  - Fixed xterm -title problem (#387581)
  - Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore
    (#381631, #429838)
  - Corrected missing shell for news user in uidgid and passwd


author: Phil Knirsch <pknirsch@redhat.com> 2.6.6-1
changelog:
  - Added another set of proposed changes to /etc/csh.cshrc (#199817)
  - Added missing documentation in /etc/hosts.[allow|deny] (#157053)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-1
changelog:
  - Fixed tcsh behaviour for non login shells (#191233)
  - Fixed umask setting for tcsh to behave identical to bash logins (#199817)
  - Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.49-1
changelog:
  - Really switch to new /etc/services file
  - Added /etc/fstab and /etc/mtab to ownership of setup (#177061)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.48-1
changelog:
  - Switched to the new large /etc/services file which fixes #112298, #133683,
    - Fixed pathmunge problem with bashrc (#123621)
  - Removed /usr/X11R6/bin from default PATH (#173856)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug with PROMPT_COMMAND being broken for wierd dirs (#142125)
  - Added hfsplus to know filesystems (#172820)


author: Bill Nottingham <notting@redhat.com> 2.5.46-1
changelog:
  - add buildrequires on bash, tcsh (#161016)
  - move core dump size setting from csh.login to csh.cshrc (#156914)


author: Bill Nottingham <notting@redhat.com> 2.5.34-1
changelog:
  - add dict (#107807)
  - add cyrus services (#118832)
  - move delete-char binding for csh (#113682)
  - do the same path munging for csh as for bash (#57708)
  - add postfix aliases (#117661)
  - fix bashrc login shell check (#104491)
  - add odmr to services (#101098)
  - add distcc to services (#91535)
  - add xterm forware/backward word bindings (#80860)


author: Jens Petersen <petersen@redhat.com> 2.5.18-1
changelog:
  - bring back the screen case in /etc/bashrc, since /etc/screenrc no
    longer sets defhstatus (#60596, #60597)


author: Jens Petersen <petersen@redhat.com> 2.5.16-1
changelog:
  - dont special case screen in /etc/bashrc, since it overrides the user's
    screenrc title setting (#60596)


author: Bill Nottingham <notting@redhat.com> 2.5.8-1
changelog:
  - add nologin to /etc/shells (#53963)
  - fix some quoting issues (#59627)
  - fix screen status line (#60596)
  - fix path regexps (#59624)
  - move profile.d stuff to csh.cshrc (#59946)


author: Nalin Dahyabhai <nalin@redhat.com> 2.5.7-1
changelog:
  - add entries to services (ipp, wnn4, and so on)
  - try to remove duplicates in services (remove nameserver as alias for domain,
    and readnews as alias for netnews)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - lock only needs to be a gid
  - don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318)


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.15-1
changelog:
  - reorder /etc/services to match comments again
  - protocol 118 is stp, not st
  - update URLs in /etc/protocols and /etc/services


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.10-1
changelog:
  - Fix bugs #24159 and #30634 again; whoever moved bashrc from bash
    to setup used an old version. :((


author: Bill Nottingham <notting@redhat.com>
changelog:
  - overhaul /etc/protocols (#18530)
  - add port 587 to /etc/services (#25001)
  - add corbaloc (#19581)
  - don't set /usr/X11R6/bin in $PATH if it's already set (#19968)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Clean up /etc/services, separating registered numbers from unregistered
    ("squatted") numbers, and adding some.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS
    support (postfix >= 20001030-2)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - split csh.login into csh.login and csh.cshrc (#various)
  - fix pop service names (#6206)
  - fix ipv6 protocols entries (#6219)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rename /etc/csh.cshrc to /etc/csh.login (#2931).
  - (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave)


author: Erik Troan <ewt@redhat.com>
changelog:
  - removed /etc/inetd.conf, /etc/rpc
  - flagged /etc/securetty as missingok
  - fixed buildroot stuff in spec file


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-21
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#956143)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-20
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#827199)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-4
changelog:
  - fix exit status of terminated child processes in su with
    pam(#563852)
  - do not depend on selinux patch application in
    _require_selinux tests


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - require gmp-devel/gmp for large numbers support
  - fix misc/selinux root-only test
  - bring back uname -p/-i functionality except of the
    athlon hack
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-2
changelog:
  - Sanity changes(#548421):
    - use grep instead of deprecated egrep in colorls.sh script
    - remove unnecessary versioned requires
    - remove non-upstream hack for uname -p
    - add dtrdsr patch from RHEL-5 to prevent regression


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji
  - do not use bold attribute in 256-colors dircolor
  - CVE-2009-4135 coreutils: Unsafe temporary directory use
    in "distcheck" rule(#546705)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-43
changelog:
  - fix manpage typos found using aspell (#1011101)
  - fix comments about loading CA certs with NSS in man pages (#1011083)
  - fix handling of DNS cache timeout while a transfer is in progress (#835898)
  - eliminate unnecessary inotify events on upload via file protocol (#883002)
  - use correct socket type in the examples (#997185)
  - do not crash if MD5 fingerprint is not provided by libssh2 (#1008178)
  - fix SIGSEGV of curl --retry when network is down (#1009455)
  - allow to use TLS 1.1 and TLS 1.2 (#1012136)
  - docs: update the links to cipher-suites supported by NSS (#1104160)
  - allow to use ECC ciphers if NSS implements them (#1058767)
  - make curl --trace-time print correct time (#1120196)
  - let tool call PR_Cleanup() on exit if NSPR is used (#1146528)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1154747)
  - allow to enable/disable new AES cipher-suites (#1156422)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161163)
  - disable libcurl-level downgrade to SSLv3 (#1154059)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-42
changelog:
  - do not force connection close after failed HEAD request (#1168137)
  - fix occasional SIGSEGV during SSL handshake (#1168668)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-40
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-38
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1069271)
  - fix a memory leak caused by write after close (#1078562)
  - nss: implement non-blocking SSL handshake (#1083742)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-30
changelog:
  - print reason phrase from HTTP status line on error (#676596)
  - fix typo in curl.1 man page (#729984)
  - introduce the --delegation option of curl (#730445)
  - enforce versioned libssh2 dependency for libcurl (#741935)
  - nss: select client certificates by DER (#746629)
  - fix a build failure when building against newer libssh2-devel (#841905)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-29
changelog:
  - initialize NSS with no database if the selected database is broken (#772642)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-17
changelog:
  - avoid CURLE_OUT_OF_MEMORY given a file name without any slash (#623663)
  - proxy tunnel support for LDAP requests (#655134)
  - proxy with kerberos authentication for https (#625685)
  - improve handling of FTP server session timeout (#651592)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-10
changelog:
  - throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972)
  - add change-log entries for patches applied upstream


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-6
changelog:
  - fix incorrect SSL recv/send timeout handling, patch contributed
    by Kevin Baughman
  - http://permalink.gmane.org/gmane.comp.web.curl.library/26302


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-5
changelog:
  - use different port numbers for 32bit and 64bit builds
  - replace hard wired port numbers in the test suite


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-4
changelog:
  - avoid use of uninitialized value in lib/nss.c
  - make it possible to run test241
  - suppress failure of test513 on s390
  - re-enable SCP/SFTP tests (#539444)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-1
changelog:
  - new upstream release, dropped applied patches
  - fix crash on doubly closed NSPR descriptor, patch contributed
    by Kevin Baughman (#534176)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-4
changelog:
  - use pkg-config to find nss and libssh2 if possible
  - better patch (not only) for SCP/SFTP polling
  - improve error message for not matching common name (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-3
changelog:
  - avoid tight loop during a sftp upload
  - http://permalink.gmane.org/gmane.comp.web.curl.library/24744


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-1
changelog:
  - new upstream release, dropped applied patches
  - changed NSS code to not ignore the value of ssl.verifyhost and produce more
    verbose error messages (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.5-8
changelog:
  - do not pre-login to all PKCS11 slots, it causes problems with HW tokens
  - try to select client certificate automatically when not specified, thanks
    to Claes Jakobsson


author: Kamil Dudka <kdudka@redhat.com> 7.19.4-6
changelog:
  - upstream patch fixing memory leak in lib/nss.c (#453612)
  - remove redundant dependency of libcurl-devel on libssh2-devel


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-2
changelog:
  - drop .easy-leak patch, causes problems in pycurl (#488791)
  - fix libcurl-devel dependencies (#488895)


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-1
changelog:
  - update to 7.19.4 (fixes CVE-2009-0037)
  - fix leak in curl_easy* functions, thanks to Kamil Dudka
  - drop nss-fix patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-2
changelog:
  - spec cleanup, thanks to Paul Howarth (#225671)
    - drop BR: libtool
    - convert CHANGES and README to UTF-8
    - _GNU_SOURCE in CFLAGS is no more needed
    - remove bogus rpath


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-1
changelog:
  - update to curl 7.18.1 (fixes #397911)
  - add ABI docs for libcurl
  - remove --static-libs from curl-config
  - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
    substitution (#432667)


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-3
changelog:
  - drop useless ldap library detection since curl doesn't
    dlopen()s it but links to it -> BR: openldap-devel
  - enable LDAPS support (#225671), thanks to Paul Howarth
  - BR: krb5-devel to reenable GSSAPI support
  - simplify build process
  - update description


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-1
changelog:
  - update to curl 7.17.1
  - include patch to enable SSL usage in NSS when a socket is opened
    nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> 7.16.4-5
changelog:
  - add support for the NSS PKCS#11 pem reader so the command-line is the
    same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com)
  - switch to NSS again


author: Jindrich Novy <jnovy@redhat.com> 7.16.3-1
changelog:
  - update to 7.16.3
  - drop .print patch, applied upstream
  - next series of merge review fixes by Paul Howarth
  - remove aclocal stuff, no more needed
  - simplify makefile arguments
  - don't reference standard library paths in libcurl.pc
  - include docs/CONTRIBUTE


author: Jindrich Novy <jnovy@redhat.com> 7.16.2-4
changelog:
  - another series of review fixes (#225671),
    thanks to Paul Howarth
  - check version of ldap library automatically
  - don't use %makeinstall and preserve timestamps
  - drop useless patches


author: Jindrich Novy <jnovy@redhat.com> - 7.16.0-2
changelog:
  - fix BuildRoot
  - add Requires: pkgconfig for curl-devel
  - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-7
changelog:
  - Remove the gettext-libs docs, as they are talking about autoconf, libtool, 
    which are not directly related to the gettext-libs.
  - Remove unused definition and trailing space.
  - Fix the build failure with mock .


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-6
changelog:
  - Fixed Bug 456666 msghack doesn't check for mandatory cmd line params 
    by adding checking statements and display usage (msghack.py modified)
  - rpath patch for binary-or-shlib-defines-rpath in x86_64.


author: Jens Petersen <petersen@redhat.com> - 0.17-1
changelog:
  - update to 0.17 release
    - update License field to GPLv3
    - add gettext-0.17-open-args.patch to fix build from upstream
    - gettext-tools-tests-lang-gawk-fail.patch, gettext-php-headers.patch,
      gettext-php-prinf-output-237241.patch, and
      gettext-xglade-define-xml-major-version-285701.patch are no longer needed
  - drop superfluous po-mode-init.el source
  - no need to run autoconf and autoheader when building
  - pass -findirect-dispatch to gcj to make java binaries ABI independent
    (jakub,#427796)
  - move autopoint, gettextize, and {_datadir}/{name}/ to main package
  - force removal of emacs/ so install does not fail when no emacs


author: Jens Petersen <petersen@redhat.com> - 0.16.1-12
changelog:
  - add a libs subpackage (suggested by Dwayne Bailey, #294891)
  - move preloadable_libintl.so to the devel subpackage


author: Nils Philippsen <nphilipp@redhat.com> - 0.16.1-11
changelog:
  - remove gettext-xglade-include-expat-285701.patch, add
    gettext-xglade-define-xml-major-version-285701.patch to determine
    XML_MAJOR_VERSION from expat.h and define it in config.h (#285701)


author: Jens Petersen <petersen@redhat.com> - 0.16.1-10
changelog:
  - buildrequire expat-devel
  - add gettext-xglade-include-expat-285701.patch to include expat.h
    to get xgettext to dl the right libexpat (Nils Philippsen, #285701)


author: Jens Petersen <petersen@redhat.com> - 0.16.1-8
changelog:
  - add gettext-php-prinf-output-237241.patch to workaround php test failure
    (#237241)
  - add gettext-php-headers.patch to correct php test headers
    (Robert Scheck, #232832)


author: Jens Petersen <petersen@redhat.com> - 0.16.1-7
changelog:
  - set preloadable_libintl.so executable in %install so it gets stripped
  - force removal of infodir/dir since it is not there when /sbin is not in path


author: Jens Petersen <petersen@redhat.com> - 0.16.1-6
changelog:
  - add buildjar switch for building of libintl.jar
  - lots of spec file cleanup (Mamoru Tasaka, #225791):
  - preserve timestamps of installed files
  - disable building of static library
  - use %find_lang for .mo files
  - remove examples from -devel package
  - do not own en@*quot locale dirs
  - set preloadable_libintl.so executable
  - add ChangeLog to -devel package
  - add %check to run make check
  - add gettext-tools-tests-lang-gawk-fail.patch to work around gawk test failure


author: Jens Petersen <petersen@redhat.com> - 0.16.1-4
changelog:
  - protect install-info in devel %post and %preun too (Ville Skyttä, #223689)
  - forward port fix to reset of timestamp of examples ChangeLog for
    brp-java-repack-jars libintl.jar multilib conflict (#205207)


author: Jens Petersen <petersen@redhat.com> - 0.14.6-1
changelog:
  - update to 0.14.6
  - include preloadable_libintl.so again (Roozbeh Pournader, #149809)
  - remove .la files (Kjartan Maraas, #172624)
  - cleanup spec file


author: Leon Ho <llch@redhat.com>
changelog:
  - updated to 0.14.3
  - fixed compiling problem on gcc4 (#150992)
  - fixed Group for -devel (#138303)
  - moved gettextize and autopoint to -devel (#137542, #145768)
  - moved some of the man pages


author: Leon Ho <llch@redhat.com>
changelog:
  - move java stuff to gettext-devel (#132239)
  - add BuildRequires: gcc-c++ (#132518)
  - add some missing install-info and ldconfig (#131272)
  - fix dir ownership (#133696)
  - run autotools for 1.9


author: Leon Ho <llch@redhat.com>
changelog:
  - use --without-included-gettext to avoid the need of libintl.so (#125497)
  - remove preloadable_libintl.so


author: Leon Ho <llch@redhat.com>
changelog:
  - packaged lib files for devel
  - moved some of the files to different sub-pkg
  - fix problem on x86_64 build


author: Trond Eivind Glomsrød <teg@redhat.com> 0.10.40-1
changelog:
  - 0.10.40 - libintl is now LGPLed (it was GPLed). Note that RHL
    uses the glibc version, and don't include libintl from gettext.
  - include new man pages
  - don't include the elisp mode - bundle it into the main emacs package,
    like we do for XEmacs.
  - README-alpha no longer exists, so don't list it as a doc file


author: Trond Eivind Glomsrød <teg@redhat.com> 0.10.38-6
changelog:
  - Fix handling of multiline entries (rest of #50065)
  - don't use the references of the last entry in a po file
  - remove duplicates when inverting
  - Own the en@quot and en@boldquot locale dirs (#52164)
  - Handle entries with a first line of "" as identical to those
    without


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Bill Nottingham <notting@redhat.com> 4.999.8-0.6.beta
changelog:
  - fix release versioning to match guidelines
  - fix up lzma-compat summary/description
  - tweak licensing


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 0.1.0-47.el6.2.2
changelog:
  - Fix listFileSystems backing device returned for the NVMe
    to make sure /dev/disk/by-id device name is returned
    instead of /dev/nvmexx.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 24434743]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1.0-47.el6.2.1
changelog:
  - Fix sys repo glob.
    We have a problem for the sys repo glob:
    sys_repo = glob.glob(IPlugin.dev_path_prefix + "OVM_SYS_REPO*")
    /opt/storage-connect/OSCPlugin.py: dev_path_prefix = "/dev/mapper"
    So the glob ("/dev/mapperOVM_SYS_REPO*") will not match anything. It should be
    "/dev/mapper/OVM_SYS_REPO*".
    We should always using os.path.join() instead of just string concatenation for
    file path.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 24414865]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 0.1.0-47.el6.2
changelog:
  - blkid command is blocking, make sure it runs on active device mapper
    Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Firas Azar <firas.azar@oracle.com> [bug 22909259]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 0.1.0-47.el6.1
changelog:
  - Add ocfs2 plugin support for NVMe device
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 22163111]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 0.1.0-44
changelog:
  - Fixed createFileSystem error as a result of storage discover removal
    Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Carson Hovey <carson.hovey@oracle.com> [bug 19054993]


author: Chuang Cao <chuang.cao@oracle.com> - 0.1.0-43
changelog:
  - Change the string to int type during the size comparing.
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Acked-by: Cathy Avery <cathy.avery@oracle.com> [bug 18732078]


author: Carson Hovey <carson.hovey@oracle.com> - 0.1.0-40
changelog:
  - Bug 17258567 - Change directory protection from 0555 to 0755 
    Signed-off-by: Cathy.Avery <cathy.avery@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1.0-39
changelog:
  - when the backing device is a linear device mapper, create local filesystem instead of clustered.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Jingjie Jiang <jingjie.jiang@oracle.com> - 0.1.0-37
changelog:
  - hange the /usr/bin/storage_discover to /usr/sbin/storage_discover since the ovs-storage-utils merged into ovs-agant and use the same directory for the commands as ovs-agent.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>


author: Junjie Wei <junjie.wei@oracle.com> - 0.1.0-36
changelog:
  - Set the default node slots to 32.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Xiaodong Yang <xiao.dong.yang@oracle.com> [bug 13847335]


author: Junjie Wei <junjie.wei@oracle.com> - 0.1.0-32
changelog:
  - Add support of ocfs2 device on-disk cluster stack update.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Sunil Mushran <sunil.mushran@oracle.com>


author: Kurt Hackel <kurt.hackel@oracle.com> - 0.1.0-31
changelog:
  - Adds a hack to the ocfs2 plugin so that the server determines independently whether to mkfs with "local" or clustered options.  It will check storage utils (same thing used by discovery so should match the Manager) to see if the LUN is "local".
    We should change this when possible by splitting the ocfs2 plugin into local and cluster personalities and putting all the rules in core to understand when each can be used.


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1.0-26
changelog:
  - fix umask
    We don't need to calculate the mode or chmod.
    For os.mknod: default mode is 0600, default node type is stat.S_IFREG, umask is 077, the actual mode (mode & ~umask) will be 0600.
    For os.mkdir: default mode is 0777, umask is 077, the actual mode (mode & ~umask) will be 0700.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 12719289]


author: Kurt Hackel <kurt.hackel@oracle.com> - 0.1.0-25
changelog:
  - Allow ocfs2 plugin to create local-only filesystems as well as clustered.
    Use more sensible mkfs params for vm storage.


author: Cathy Avery <cathy.avery@oracle.com> - 0.1.0-23
changelog:
  - listFileSystems no longer throws exception when encountering fs error but logs error.
    Oracle_Bug: 12543055


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 0.1.0-15
changelog:
  - Should not throw an exception if there are no devices on the system, rather just return no file systems..
    bug:11679187


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-9
changelog:
  - OCFS2.py: More updates for spec 1.27 (1.2.7?)
    - Make mount()/unmount()'s keyword arguments match OSCPlugin.py
    - Test the new mount arguments
    - Make the filesys_path -> backing_device changes to testocfs2.py
    - Add isSplittable()
    - Test isSplittable()
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 0.1.0-7
changelog:
  - Updated to spec version 1.27;
    replaced filesys_path with backing_device;
    removed list_can_filter and thin_clone from plugin_ability, and added the backing_device_type (set to single device);
    added create/destroy mount point flags to mount/unmount respectively;
    added kludge to keep the plugin -release in sync with the .spec file (auto patch rev the -release on every patch)
    patch-name:update-to-1.27-spec.patch


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-6
changelog:
  - testocfs2: Fix a few test errors that cause problems on 1.24
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 0.1.0-5
changelog:
  - Changed fillSSInfo to not set fields to None, Changed the AccessGroup return a valid dict (for now) This call should never be called since the flag is set to indicate that Access control is not supported


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-3
changelog:
  - OCFS2/testocfs2: Update to the new filesys_type=Block changes.
    Keep up with OSCPlugin's change of filesys_type to a generic Block type.
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Wiekus Beukes <wiekus.beukes@oracle.com> 0.1.0-2
changelog:
  - Fixing many bugs as uncovered by the cert testing
  - Fixed issues with RPM and generated __init__.py file


author: Tianyue Lan <tianyue.lan@oracle.com> - 1.8.6p3-29.0.1.el6_10.2
changelog:
  - Fixes [OraBug: 28747380]
    sudo does not honor env_keep-="KRB5CCNAME" after "sudo -k" (isaac.chen@oracle.com)


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version
    Resolves: rhbz#554321
  - drop *.pod man page duplicates from docs
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-6
changelog:
  - Hopefully fix RPM provides problem when the GStreamer plugin
    requires a library installed by the package itself


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-5
changelog:
  - Update rpm provides script and patch to:
    - filter out errors
    - only run gst-inspect on gstreamer plugins
    - print out protocol handlers provides correctly


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.18-1
changelog:
  - Update to 0.10.18
  - Add patch to gst-inspect to generate RPM provides
  - Add RPM find-provides script


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.7-0.gst.1
  - new release, with 0.10 majorminor
  - removed compprep and complete
  - added plugins docs
  - renamed libgstcorelements, libgstcoreindexers
  - added libgstnet


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.8.10-0.gst.1
  - new release
  - up glib2 to 2.4 because disting on 2.4 builds marshalling code needing 2.4


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.8.4-0.fdr.1
  - update for new GStreamer release
  - unbreak the postun script by not removing the cache dir


author: Christian Schaller <uraeus@gnome.org>
changelog:
  - Remove docs build from RPM as the build is broken
  - Fix stuff since more files are versioned now
  - Remove wingo schedulers
  - Remove putbits stuff


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Updated to work better with default RH8 rpm
  - Added missing unspeced files
  - Removed .a and .la files from buildroot


author: Thomas Vander Stichele <thomas@apestaart.org>
changelog:
  - added release of gstreamer to req of gstreamer-devel
  - changed location of API docs to be in gtk-doc like other gtk-doc stuff
  - reordered SPEC file


author: Thomas Vander Stichele <thomas@apestaart.org>
changelog:
  - put html docs in canonical place, avoiding %doc erasure
  - added devhelp support, current install of it is hackish


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Split of more plugins from the core and put them into their own modules
  - Includes colorspace, xfree and wav
  - Improved package Require lines
  - Added mp3encode (lame based) to the SPEC


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Updated for 0.2.1 release
  - Split out the GUI packages into their own RPM
  - added new plugins (FLAC, festival, quicktime etc.)


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Visualisation plugins bundled out togheter
  - Moved files sections up close to their respective descriptions


author: kwizart < kwizart at gmail.com > - 1.18-1
changelog:
  - Update to 1.18 (final)
  - Remove upstreamed patches
  - Disable autoreconf - patch libtool to prevent rpath issue


author: kwizart < kwizart at gmail.com > - 1.18-0.1.beta2
changelog:
  - Update to 1.18beta2
   fix bug #487508: CVE-2009-0723 LittleCms integer overflow
   fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
   fix bug #487509: CVE-2009-0581 LittleCms memory leak


author: kwizart < kwizart at gmail.com > - 1.17-3
changelog:
  - Rebuild for gcc 4.3
  - Move libs to mutlilibs
  - Prevent timestramps change
  - Convert files-not-utf8


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:1.11-0.fdr.2
changelog:
  - Renamed to lcms to match upstream.
  - Provides: littlecms.
  - Fixed doc attributes.
  - Excluding empty dir %{_libdir}/python2.2/


author: Konrad Wilk <konrad.wilk@oracle.com> - 2.02-0.8.el6.2
changelog:
  - grub2: Change menu entry: Remove GNU/Linux and use UEK name if applicable.
    and replace it with Unbreakable Enterprise Kernel if it is an
    UEK kernel. Also use /etc/system-release to figure out the OS
    instead of keeping 'GNU/Linux' (this is copied from the 20_linux_xen
    change from bug 21951760).
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Konrad Wilk <konrad.wilk@oracle.com> [bug 24348702]


author: Carson Hovey <carson.hovey@oracle.com> - 2.02-0.8
changelog:
  - Change grub2 menu entry: Add Oracle VM Server, Remove GNU/Linux, add xen version
    Bug-fixed-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Konrad Wilk <konrad.wilk@oracle.com> [bug 21951760]


author: Daniel Kiper <daniel.kiper@oracle.com> - 2.02-0.6
changelog:
  - Fix PXE boot on UEFI platforms (bug 17458093):
      1) update GRUB2 to upstream commit c93d3e694713b8230fa2cf88414fabe005b56782
         (cryptodisk: strip parenthesis from backing device name),
      2) use latest multiboot2 patches (v2 posted on grub-devel and
         Xen-devel on Mon Jul 20 2015).


author: Jiri Popelka <jpopelka@redhat.com> - 4.0.4-5
changelog:
  - Also consider back tick and semicolon as illegal shell escape characters.
  - CVE-2015-8327, CVE-2015-8560


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1
changelog:
  - Updated to 4.0.4 (bug #570234).  No longer buildrequires
    ghostscript-devel (but requires ghostscript) or
    foomatic-filters-int-options patch.


author: Tim Waugh <twaugh@redhat.com> - 4.0.3-10
changelog:
  - Removed old explicit provides for perl(Foomatic::GrovePath).
  - Fixed macro in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING files.
  - Added comments for sources.
  - Use Requires not PreReq (bug #225768).


author: Tim Waugh <twaugh@redhat.com> 4.0.2-5
changelog:
  - Use stcolor driver for Epson Stylus Color 200 (bug #513676).
  - Don't ship 3-distribution symlink as CUPS already searches
    /usr/share/ppd (bug #514244).
  - Remove non-PPD files from PPD directory (bug #514242).


author: Tim Waugh <twaugh@redhat.com> 4.0.2-1
changelog:
  - Updated db-engine to 4.0.2 (bug #503188).
  - Updated foomatic-filters to 4.0.2 (bug #496521).
  - Updated db-hpijs to 20090701.
  - Updated db to 4.0-20090702.
  - This package obsoletes oki4linux (bug #491489).
  - Don't ship ChangeLog/README/USAGE for each of the 4 packages as it
    comes to more than 1MB (bug #492449).
  - Don't use mktemp in foomatic-rip.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-69
changelog:
  - Updated db-hpijs to 20090110.
  - Updated db to 20090110.
  - Updated filters to 3.0-20090110.
  - Updated db-engine to 3.0-20090110.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-68
changelog:
  - Updated db-hpijs to 20081124.
  - Updated db to 20081124.
  - Updated filters to 3.0-20081124.
  - Updated db-engine to 3.0-20081124.
  - Better build root.
  - Fixed summary.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-65
changelog:
  - Removed ampathxml and xml-cflags patches.
  - Updated db-hpijs to 20080904.
  - Updated db to 20080904.
  - Updated filters to 3.0-20080904.
  - Updated db-engine to 3.0-20080904.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-61
changelog:
  - Updated db-hpijs to 20080710.
  - Updated db to 20080710.
  - Updated filters to 3.0-20080710.
  - Updated db-engine to 3.0-20080710.
  - Ship a defaultspooler file to avoid the need for spooler
    auto-detection (bug #454684).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-56
changelog:
  - Updated filters to 3.0-20080211.
  - Updated db-hpijs to 20080211.
  - Updated db-engine to 3.0-20080211.
  - Updated db to 3.0-20080211.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-53
changelog:
  - Updated db-hpijs to 20071218.
  - Updated db to 3.0-20071218.
  - Updated db-engine to 3.0-20071218.
  - Updated filters to 3.0-20071218 (bug #416881).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-51
changelog:
  - Build requires perl(ExtUtils::MakeMaker).
  - Updated filters to 3.0-20070919.
  - Updated db to 20070919.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-50
changelog:
  - Removed references to unshipped drivers:
    * drv_x125
    * ml85p
    * pbm2lxwl
    * pbmtozjs
    * bjc800j


author: Tim Waugh <twaugh@redhat.com> 3.0.2-49
changelog:
  - Safe default margins for PPDs (bug #244161).
  - Added missing IEEE 1284 ID for HP Photosmart 380 (bug #241352).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-48
changelog:
  - Updated db to 3.0-20070614.
  - Updated db-engine to 3.0-20070614.
  - Updated db-hpijs to 20070614.
  - Updated filters to 3.0-20070614.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-43
changelog:
  - Updated db to 3.0-20070105 (bug #214037, bug #191661, bug #198999,
    bug #191504, bug #187387, bug #188762, bug #170373, bug #221121,
    bug #214801).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-39
changelog:
  - Updated db-engine to 3.0-20061031.
  - Updated db to 3.0-20061031.
  - Remove references to foo2zjs and foo2oak (bug #208851).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38
changelog:
  - Change a2ps requirement to mpage.
  - Make CUPS driver work with drivers containing '-' in their names
    (bug #201398).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-32
changelog:
  - Fix foomatic-cleanupdrivers.
  - Updated db-engine to 3.0-20060117.
  - Handle PPDs with default option values of '0'.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-29
changelog:
  - Updated db-engine to 3.0-20051209.
  - Updated db-hpijs to 1.5-20051209.
  - Updated filters to 3.0-20051209.  No longer need rip-cvs patch.
  - Updated db to 3.0-20051209.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-28
changelog:
  - Remove explicit perl module package dependencies.  These should be
    picked up by the RPM during the build process automatically anyway.
    Fixes bug #167997.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-25
changelog:
  - Add IEEE 1284 ID for HP LaserJet 4200 (bug #166638).
  - Add IEEE 1284 ID for HP LaserJet 5000 (bug #167154).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-24
changelog:
  - Updated db to 3.0-20050804.
  - No longer need hplj5 patch.
  - Conflicts with system-config-printer before the parser bug was fixed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add IEEE 1284 ID for Epson Stylus Photo 915 (bug #160030).
  - Add IEEE 1284 ID for Ricoh Aficio 2228C PS (bug #160036).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix Postscript driver (bug #151645).
  - Add IEEE 1284 ID for HP DeskJet 5150 (bug #154518).
  - Add IEEE 1284 ID for HP LaserJet 2420 (bug #114191).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Corrected IEEE 1284 information for HP DeskJet 6540 (bug #147288).
  - Added IEEE 1284 information for Epson Stylus C82 (bug #147230).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Added IEEE 1284 information for Okidata Okipage 6ex (bug #143964).
  - Added IEEE 1284 information for Epson Stylus Photo R300 (bug #143939).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-10
changelog:
  - Added IEEE 1284 information for HP-Color_Inkjet_Printer_CP1700 (bug #141594).
  - Added IEEE 1284 information for Samsung-ML-1710 (bug #141163).
  - Added IEEE 1284 information for HP-OfficeJet_G95 (bug #141057).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-9
changelog:
  - Updated db to 20041124.
  - Updated hpijs-db to 1.5-20041124.
  - No longer need HP DJ 6122 patch.
  - No longer need ieee1284 patch.
  - Updated Omni-printers to 0.9.2.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-6
changelog:
  - Add autodetect information for HP LaserJet 8150 (bug #139683).
  - Add autodetect information for Epson Stylus Color 777 (bug #139629).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-5
changelog:
  - Ship data as non-executable (bug #139271).
  - Corrected autodetect information for HP Business InkJet 1100 (bug #139258).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-4
changelog:
  - Add autodetect information for HP Business InkJet 1100 (bug #139258).
  - Add autodetect information for Epson Stylus Photo 790 (bug #139266).
  - Add autodetect information for HP DJ 3820 (bug #139271).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-2
changelog:
  - Use gimp-print driver for HP 2000C (bug #133647).
  - Add autodetect information for Lexmark Z52 (bug #135178).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-1
changelog:
  - Updated filters to 3.0.2.
  - Updated db-engine to 3.0.2.
  - No longer need Omni PageSize patch or lvalue patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.1-1
changelog:
  - Upgrade db to 20040219.
  - Upgrade hpijs to 1.5-20040219.
  - Upgrade engine to 3.0.1.
  - Upgrade filters to 3.0.1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-23
changelog:
  - Fix up HP Color Inkjet CP1700 support.
  - Remove PrintoutMode option from gimp-print driver to avoid breaking it.
  - Update filters to 3.0.1rc3.
  - Update engine to 3.0.1rc2
  - No long need symlink patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-21
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Revert Omni update temporarily.
  - Downgrade engine to 20031217 to stick to the stable branch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-19
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - No longer need symlink patch.
  - Updated fontpath patch.
  - Updated engine to 20040112.
  - Updated db to 20040112.
  - Updated gimp-print data to 4.2.6.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-18
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Explicitly state conflict with hpijs < 1.5.
  - Make foomatic-ppdfile accept '-t type' like foomatic-datafile used to.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-14
changelog:
  - Updated db to 20031217.
  - Updated engine to 20031217.
  - Updated hpijs to 1.5-20031217.
  - Use relative symlinks.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-12
changelog:
  - Undo over-zealous percent escaping in PostScript.xml
  - Build requires libxml2-devel (bug #110589).
  - Use relative, not absolute, symlink for CUPS filter.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-10
changelog:
  - Updated db to 20031105.
  - Drop filters path patch.
  - Updated fontpath patch, both libdir patches.
  - Updated engine and filters to 3.0-20031105.
  - Updated hpijs db to 1.4-1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-5
changelog:
  - Add some Dell printers.
  - Updated foomatic-db to 20030603.
  - Updated missing UPP list for ghostscript 7.07.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-0.beta2.1
changelog:
  - 3.0.0beta2.
  - Updated path patch.
  - No longer need FOOMATIC_LIBDIR, generic PS, ids, postscript-duplex,
    hpijs13, psc2210, duplex184 patches.
  - Add hpijs support back in.
  - Fix up references to old printer IDs.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-11
changelog:
  - Add autodetect info for HP DeskJet 656C.  It doesn't really do
    IEEE 1284 IDs, but since it's a USB device we can figure out its
    manufacturer and model anyway.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need 67973, 970c patches.
  - Remove cups-drivers-* packages (no longer needed).
  - Remove files not shipped.  Ship filter.conf.
  - Conditionally restart cups.
  - Use libdir.
  - Don't put things in site_perl; use vendor_perl instead (bug #73528).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.3
changelog:
  - Remove explicit perl-Storable dependency; it should be perl(Storable),
    and that is picked up automatically.


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.2
changelog:
  - Fix release number.
  - Drop gen-ppds from the file manifest---use foomatic-compiledb instead
    (bug #63622).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.0.1
changelog:
  - Update to CVS.
  - Updated requirements.
  - Updated path and libdir patches.
  - Drop hpijs 1.0.2 patch.
  - foomatic-datafile has moved to %{_bindir}.
  - Update gimp-print data to 4.2.1.
  - Update Omni printer data to 0.6.1.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020130.1
changelog:
  - Update to CVS.
  - No longer need the cachedir patch.
  - Fix config file path.
  - Look in /usr/local/bin last, not first, in lpdomatic (bug #57915).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020129.1
changelog:
  - Update to CVS.
  - Patches no longer needed: prepend, fd3.
  - Use RPM_OPT_FLAGS.
  - Allow non-root users to use foomatic-datafile (bug #58956).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020124.1
changelog:
  - Update to CVS.
  - Updated Omni printers to those in Omni 0.5.1.
  - Updated patches: prepend, fd3.
  - Patches no longer needed: utf8, lpdomatic.
  - Added gimp-print (formerly stp) foomatic db info, and removed the old
    stp.xml file.
  - Conflict with ghostscript if it doesn't have gimp-print-4.2.0 yet.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20011218.2
changelog:
  - REALLY fix PCL fixup code (bug #55909, others).
  - PreReq fileutils, initscripts (bug #56984).
  - Fix prepends in lpdomatic (bug #57371).
  - Run foomatic-cleanupdrivers during install, to remove driver entries
    with no command line.
  - Put lpdomatic in /usr/sbin again.
  - Fix foomatic-gswrapper's file descriptor manipulations (bug #56871).


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.2
changelog:
  - fix the rest of the quoting issues with foomatic-combo-xml with the patch
  - foomatic-1.1-20011217-quotes.patch. This has been sent upstream.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.1
changelog:
  - respin to pull in latest foomatic database, fixes:
    - properly use the cache in relation to foomatic-combo-xml's output
    - fix _some_ of the quoting issues with calling foomatic-combo-xml


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011205.1
changelog:
  - respin to pull in latest foomatic database, fixes:
    - droping half of a large job
    - -Mutf8 added to the upstream filters
    - miscelaneous printer db updates


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.5
changelog:
  - changed the patch to use the -Mutf8 command line option,
  - and to restart the printserver, after rebuilding the settings.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.4
changelog:
  - grumble. Some drivers use inline perl scripts, and need the 'use utf8;'
  - pragma. Without it, they break on _some_ of their options.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010905.1
changelog:
  - upgraded to latest foomatic, we now have fast overview generation!
  - this means that there is no prebuilt overview file.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010828.1
changelog:
  - WOW! The latest foomatic uses Till Kamppeter's C based combo compiler.
  - It is now fast enough that there is no real benifit to precompiling.
  - NOTE: this forces the package to stop being noarched.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010825.1
changelog:
  - did a fresh database pull, which contains the old japanese printers as well.
  - removed japanese hack.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010717mdk
changelog:
  - Added job listing/removal/manipulation and queue control to
    foomatic-printjob
  - Support for printing multiple copies with PDQ


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010714mdk
changelog:
  - Included the cupsomatic filter script
  - When a queue is set up, default options can be set now
  - Help messages of foomatic-configure and foomatic-printjob cleaned up.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010713mdk
changelog:
  - Many bugfixes in "foomatic-printjob".
  - "foomatic-configure" adds the Foomatic config file directory automatically
    to the search paths of PDQ.
  - Printing a help page under PDQ was broken.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010711mdk
changelog:
  - initial release.
  - Deleted the obsolete drivers "stp", "cZ11", and "hpdj".
  - Patch applied which flushes the memory cache regularly, otherwise
    foomatic-configure would hang when the Foomatic data of GIMP-Print is
    installed.


author: Doug Ledford <dledford@redhat.com> - 2.0.0-3
changelog:
  - Split the library and devel files out to libsysfs and leave the utils
    in sysfsutils.  This is for multilib arch requirements.


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Miloslav Trmac <mitr@redhat.com> - 1:4.2.27-2
changelog:
  - Don't use uninitialized memory in -printf %Z (#174485)
  - Ship more documentation files
  - Clean up the spec file a bit


author: Tim Waugh <twaugh@redhat.com> 1:4.2.26-1
changelog:
  - One further arg_max fix for PPC.
  - Applied arg_max patch from upstream to fix test suite failures.
  - 4.2.26 (fixes bug #173817).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed "G" and "M" size qualifiers from man page, since support for
    those is not in the stable branch (bug #141987).


author: Tim Waugh <twaugh@redhat.com> 1:4.1.20-1
changelog:
  - Clarify find man page (bug #126098).
  - Apply changes by Robert Scheck <redhat@linuxnetz.de> (bug #126352):
    - Upgrade to 4.1.20 and some specfile cleanup


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 4.1.5, FHS paths
  - remove mktemp,getshort patches (don't ship locate)
  - alpha, numblks patch no longer needed


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated updatedb cron script to not look for $TMPNAME.n (which was
    a relic anyway)
  - added -b parameters to all of the patches


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.7.3.1-1.el6.1
changelog:
  - OPENSSL: disable SSLv2 and SSLv3 when no method is specified.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-105
changelog:
  - Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Ke-Chiang Chen <ke-chiang.chen@oracle.com
    In NFS plugin, use by default [tcp, vers=3], then [udp, vers=3] then [vers=4]. [bug 22159263]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-104
changelog:
  - Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    In this workaround, pass "vers=3" then "vers=4" in the NFS plugin mount options if no mount options are passed by the caller. Awaiting fix for UEK bug 22136481. [bug 21866205]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-103
changelog:
  - Signed-off by: Firas Azar <firas.azar@oracle.com>
    Debug NFS mount timeout issues in 3.4. [bug 21866205]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-102
changelog:
  - Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    This patch correct NFS mount options handling if the list of options passed is empty ([]) instead of None, and makes sure the default options are passed ('nosharecache', 'soft', 'fg', 'retry=1') [bug 20142540]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-101
changelog:
  - Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    This patch introduce some overload control for NFS servers with a large number of exports. In listFileSystems the code checks for the number of exports in the NFS server. If it is higher than a threshold (e.g. 100), it tries using UDP to do the mounts / umounts. If mount with UDP fails (for example because the NFS server disabled UDP), then the code tries the remaining mounts with default mount options (TCP), and scatters the mount calls with a sleep statement of 20 seconds every 100 mounts. [bug 20488507]


author: Chuang Cao <chuang.cao@oracle.com> - 1.1.0-99
changelog:
  - Get the correct storage path with split when there is
    a zfs snapshot.
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Signed-off-by: John Haxby <john.haxby@oracle.com>
    Acked-by: Firas Azar <firas.azar@oracle.com> [bug 19951098]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-98
changelog:
  - Signed-off by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Use default NFS mount options in 3.4.1, instead of toggling NFS versions. In OL6 by default mount.nfs will try all NFS versions. [bug 20365100]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 1.1.0-96
changelog:
  - getInfo was returning vol_group instead of vol_group_name
    Signed-off by: Cathy A Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Firas Azar <firas.azar@oracle.com> [bug 18476282]


author: Firas Azar <firas.azar@oracle.com> - 1.1.0-95
changelog:
  - Signed-off by: Cathy A Avery <cathy.avery@oracle.com>
    Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Ken Chen <ke-chiang.chen@oracle.com> [bug 18520749]


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-94
changelog:
  - SPARC - should use san module to retrieve device info
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-93
changelog:
  - Bug 18060881 - IF SPARC SERVER CANNOT ACCESS POOLFS, ADD SERVER TO CLUSTER WILL HANG
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-92
changelog:
  - fix syntax error in generic/scsi_solaris.py
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Carson Hovey <carson.hovey@oracle.com> - 1.1.0-91
changelog:
  - se_record.state field is now filled in with SE_STATES.ONLINE, OFFLINE.
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off-by: Alexandre Chartre  <alexandre.chartre@oracle.com>
    Oracle-bug: Bug 17299685 - CLI ALWAYS REPORTS STATE OF PHYSICAL DISK AS UNKNOWN
    patch_name: Bug17299685.patch


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.1.0-85
changelog:
  - calling `subprocess.Popen()` with `close_fds=True`
    Problem:
    - Fork a process without closing file descriptors will result in the child process holding all parent opened file descriptors.
    - A child of Agent XMLRPC Daemon is holding the socket port 8899.
    - Agent wants to restart XMLRPC Daemon upon `take_ownership()` and after `release_ownership()` : so it cannot bind to port 8899 any more.
    - The fix is to always calling `subprocess.Popen()` with `close_fds=True`.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17533127]


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-83
changelog:
  - SPARC - ZFS disk WWID should be unique accross different servers
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-80
changelog:
  - make iSCSI code modular
    SPARC - add iSCSI support
    SPARC - change LUN identification to be compatible with Linux/x86
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-79
changelog:
  - SPARC - plugin should use Solaris devprop command instead of custom command
    SPARC - "sasinfo lu" fails if there is no SAS adapter
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-78
changelog:
  - include SAS luns to the list of luns on SPARC
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-77
changelog:
  - Bug 16553436 - 3.3.1.175 REFRESH ISCSI/STORAGE FAILS - SERECORD.PATH EXPECTS LIST, NOT STRING
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-75
changelog:
  - add SCSI support for Solaris
    add modules for OS specific SCSI functions
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-71
changelog:
  - Solaris package should not include SCSI plugin and Linux files
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-70
changelog:
  - report all mount errors if mount fails on Solaris (Solaris fix for 14460831)
    select better mount options for NFS on Solaris
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.1.0-67
changelog:
  - Solaris build and package support
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>
    Signed-off-by: Liam Merwick <liam.merwick@oracle.com>


author: Junjie Wei <junjie.wei@oracle.com> - 1.1.0-66
changelog:
  - Add debugging information to umount(). Hopefully there will be more details
    logged once we hit the bug again.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Oracle-bug: 14479264


author: Junjie Wei <junjie.wei@oracle.com> - 1.1.0-64
changelog:
  - Enhance logging in NFSPlugin.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Cathy Avery <cathy.avery@oracle.com> - 1.1.0-60
changelog:
  - Added check to mount to throw exception if the uuid of the fs_record and the uuid of the fs do not match. [bug 14307805]


author: Cathy Avery <cathy.avery@oracle.com> - 1.1.0-52
changelog:
  - Added various mount options for discovery of unpresented luns. The mount will cycle thru to
    obtain a sucessful mount.


author: Kurt Hackel <kurt.hackel@oracle.com> - 1.1.0-51
changelog:
  - * fixes an indentation issue in _getMountInfo
    * workaround the problem in core not stripping trailing slashes from FS mounts
    Signed-off-by:cathy.avery@oracle.com


author: Junjie Wei <junjie.wei@oracle.com> - 1.1.0-48
changelog:
  - Add debug information for mount() and umount().
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.1.0-45
changelog:
  - fix file close
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Junjie Wei <junjie.wei@oracle.com> - 1.1.0-41
changelog:
  - Log umount details for NFSPlugin.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com> [bug 13001348]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.1.0-40
changelog:
  - NFSPlugin listMountPoints(): fix share path dectection
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Wiekus Beukes <wiekus.beukes@oracle.com> [bug 12848852]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.1.0-37
changelog:
  - fix the file/dir creation mode for NFSPlugin
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com> [bug 12719289]


author: Cathy Avery <cathy.avery@oracle.com> - 1.1.0-31
changelog:
  - Fixed list method to return only those iscsi /dev/mpath/ devices that belong to the
    specified ss_name. The get mp page 83 is only temporary. [bug 11847174]


author: Kurt Hackel <kurt.hackel@oracle.com> - 1.1.0-14
changelog:
  - Reinstate filtering out extraneous files systems when fs_record is indicated in listMountPoints. [bug 10334559]


author: Cathy Avery <cathy.avery@oracle.com> - 1.1.0-13
changelog:
  - Added uuid stamps to all subdir mounts. This avoids having to mount the nfs root to get the uuidand cuts down on nfs mount activity. This a patch is a partial fix for bug 10278397. [bug 102778397]


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 1.1.0-11
changelog:
  - Need to make sure in listMountPoints that the mount point to check is not a read-only non stamped mount point
    orabug:10268910


author: Cathy Avery <cathy.avery@oracle.com> - 1.1.0-4
changelog:
  - Fixed .generic_fs_stamp going to null. Fixed emtpy .generic_fs_stamp not being updated with a valid uuid.


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Hans de Goede <hdegoede@redhat.com> 1:1.0-1
changelog:
  - 1.0 final release
  - need epoch because we were not using the special pre-release
    version-release scheme used now a days in Fedora :(


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0beta2-2
changelog:
  - Put Obsoletes/Provides theora-exp-devel in the -devel package instead of in
    the -tools package (oops)
  - Install png2theora (bz 349951)


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-32.2.2.el6uek]
changelog:
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997978]  {CVE-2016-3157}
  - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (Mike Kravetz)  [Orabug: 22667863]


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-5
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.0.91-6
changelog:
  - add password-auth, fingerprint-auth, and smartcard-auth
    for applications which can use them namely gdm (#494874)
    patch by Ray Strode


author: Tomas Mraz <tmraz@redhat.com> 1.0.90-4
changelog:
  - fix parsing of config files containing non-ASCII characters
  - fix CVE-2009-0579 (mininimum days for password change ignored) (#487216)
  - pam_access: improve handling of hostname resolution


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-2
changelog:
  - new password quality checks in pam_cracklib
  - report failed logins from btmp in pam_lastlog
  - allow larger groups in modutil functions
  - fix leaked file descriptor in pam_tally


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-1
changelog:
  - pam_loginuid: uids are unsigned (#460241)
  - new minor upstream release
  - use external db4
  - drop tests for not pulling in libpthread (as NPTL should
    be safe)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-4
changelog:
  - pam_namespace: allow safe creation of directories owned by user (#437116)
  - pam_unix: fix multiple error prompts on password change (#443872)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-4
changelog:
  - pam_namespace: fix problem with level polyinst (#438264)
  - pam_namespace: improve override checking for umount
  - pam_selinux: fix syslogging a context after free() (#438338)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-2
changelog:
  - if shadow is readable for an user do not prevent him from
    authenticating any user with unix_chkpwd (#433459)
  - call audit from unix_chkpwd when appropriate


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-1
changelog:
  - new upstream release
  - add default soft limit for nproc of 1024 to prevent
    accidental fork bombs (#432903)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-17
changelog:
  - test for setkeycreatecon correctly
  - add exclusive login mode of operation to pam_selinux_permit (original
    patch by Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-9
changelog:
  - do not preserve contexts when copying skel and other namespace.init
    fixes (#298941)
  - do not free memory sent to putenv (#231698)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-6
changelog:
  - do not ask for blank password when SELinux confined (#254044)
  - initialize homedirs in namespace init script (original patch by dwalsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
changelog:
  - most devices are now handled by HAL and not pam_console (patch by davidz)
  - license tag fix
  - multifunction scanner device support (#251468)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-3
changelog:
  - updated db4 to 4.6.18 (#249740)
  - added user and new instance parameters to namespace init
  - document the new features of pam_namespace
  - do not log an audit error when uid != 0 (#249870)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-6
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)
  - pam_namespace: add support for temporary logons (#241226)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-5
changelog:
  - pam_selinux: improve context change auditing (#234781)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-4
changelog:
  - pam_console: always decrement use count (#230823)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)
  - we don't patch any po files anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-3
changelog:
  - correctly relabel tty in the default case (#229542)
  - pam_unix: cleanup of bigcrypt support
  - pam_unix: allow modification of '*' passwords to root


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-1
changelog:
  - upgrade to new upstream version resolving CVE-2007-0003
  - pam_namespace: unmount poly dir for override users


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.0-1
changelog:
  - upgrade to new upstream version
  - drop pam_stack module as it is obsolete
  - some changes to silence rpmlint


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)
  - update gmo files as we patch some po files (#218271)
  - add use_current_range option to pam_selinux (#220487)
  - improve the role selection in pam_selinux
  - remove shortcut on Password: in ja locale (#218271)
  - revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add select-context option to pam_selinux (#213812)
  - autoreconf won't work with autoconf-2.61 as configure.in is not yet adjusted
    for it


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - update internal db4 to 4.5.20 version
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group %group syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.%{version}, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-23
changelog:
  - resolves: #1088998
    count with xz compressed files as well in sa2 script
  - resolves: #1012575
    fix file mode of sysstat cron file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-21
changelog:
  - resolves: #838914
    keep log files for 28 days instead of 7
  - resolves: #916396
    fixed buffer overflow in iostat program when inspecting encrypted disks
  - resolves: #826399, #826403, #804534
    added support for persistent device names
  - resolves: #888823
    increased NR_CPUS and NR_IRQS constants
  - resolves: #820992
    made init script LSB
  - resolves: #850810
    added iostat option to report interval statistics in first report


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-20
changelog:
  - related: #693398
    added note about -S option to the sadc manual page
  - resolved: #801453
    fixed return code of sa2 script
  - resolved: #801702
    increased IOC_MAXMINOR constant for block devices


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-19
changelog:
  - resolves: #766431
    added support for symlinks to the iostat command
  - resolves: #771594
    updated reading /proc/diskstats file according to the kernel
  - resolves: #700797
    fixed minor resource leak
  - resolves: #694759
    fixed iostat command does not reporting shares with long names
  - resolves: #690562
    fixed cifsiostat does not report number of open files correctly
  - resolves: #674648
    added new option -P ON to mpstat, showing only online cpu in statistics
  - resolves: #693398
    updated sysstat configuration


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Charles Bennett <ccb@redhat.com> 5.0.5-5.fc
changelog:
  - bring in filename and append-msg patch
  - append-msg adds verbose text for when saNN data file cpu count
  -  does not match cpu count on the currently running system


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 5.0.5
  - remove some obsolete patches
  - update statreset, overrun, lib64init patches
  - renumber patches


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix spew of crap to console at startup
  - Fix order of startup (#124035)
  - Fix array overrun (#117182)
  - Fix interrupt buffer sizing (caused bogus irq info)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.6
changelog:
  - let user configure how long to keep logs through /etc/sysconfig/sysstat
    (#81294)
  - reset stats at system boot (#102445)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.4
changelog:
  - fix insecure tmp files in scripts (#78212)
  - require tools needed in scripts
  - use IFNAMSIZ from {_includedir}/linux/if.h for maximum interface length


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.3-2
changelog:
  - Do the daily sa2 run just before midnight, not at 4AM... you'd 
    only get 4 hours worth of data that way (#63132)


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.2-1
changelog:
  - 4.0.2
  - the kernel patch for extended statistics is in, don't say it needs
    applying in the man page


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Summarize previous day's activity with sa2, not current day (which is only 4 hours of data when it gets run) (#24820)
  - upgrade to 3.3.4 for full 2.4 compatibility and improved iostat


author: Preston Brown <pbrown@redhat.com>
changelog:
  - make sure disk accounting is enabled to fix iostat -l, -p (#16268)
  - crontab entries were missing the user (root) to run as (#18212)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - packaged for Winston
  - change va patch to indicate kernel is not patched for iostat accounting.
    re-enable if our stock kernel gets this patch.
  - upgrade to 3.2.
  - install crontab entry.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-22
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Tim Waugh <twaugh@redhat.com> - 8.70-4
changelog:
  - Fixed Y-axis when duplexing with cups device (bug #557458).  This
    patch incorporates upstream commits 10625, 10631, and 10890.


author: Tim Waugh <twaugh@redhat.com> - 8.70-3
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - Don't ship libtool la files (bug #542674).
  - Don't build static library for ijs (bug #556051).
  - Added comment next to /usr/lib/cups paths.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.70-2
changelog:
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #550293).
  - Harden ghostscript's debugging output functions (bug #550293).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-68
changelog:
  - Apply upstream patch to fix PageLogFormat reference in documentation
    (bug #951553, STR #3969).
  - Only enable multi-part support for selected user agents
    (bug #1178370, STR #3455).
  - Fix for segfault in send_document (bug #1170002).
  - New SSLOptions directive to enable SSL3 and/or RC4, now disabled by
    default (bug #1161171).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-66
changelog:
  - More STR #4461 fixes from upstream: make rss feeds world-readable,
    but cachedir private.
  - Fix icon display in web interface during server restart (STR #4475).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-63
changelog:
  - Applied upstream patch to fix CVE-2014-5029 (bug #1122600),
    CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767).
  - Fix conf/log file reading for authenticated users (STR #4461).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-60
changelog:
  - CVE-2014-2856: cross-site scripting flaw (bug #1117798)
  - CVE-2014-3537: insufficient checking leads to privilege escalation (bug #1117794)


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-58
changelog:
  - Applied patch to fix 'Bad request' errors as a result of adding in
    httpSetTimeout (STR #4440, also part of svn revision 9967).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-56
changelog:
  - Fixed synconclose patch to avoid 'too many arguments for format' warning.
  - Fixed settimeout patch to include math.h for fmod declaration.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-55
changelog:
  - Fixed typo preventing web interface from changing driver (bug #1104483,
    STR #3601).
  - Fixed SyncOnClose patch (bug #984883).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-53
changelog:
  - Prevent BrowsePoll problems across suspend/resume (bug #769292):
    - Eliminate indefinite wait for response (svn revision 9688).
    - Backported httpSetTimeout API function from CUPS 1.5 and use it in
      the ipp backend so that we wait indefinitely until the printer
      responds, we get a hard error, or the job is cancelled.
    - cups-polld: reconnect on error.
  - Added new SyncOnClose directive to use fsync() after altering
    configuration files: defaults to "Yes". Adjust in cupsd.conf (bug #984883).
  - Fix cupsctl man page typo (bug #1011076).
  - Use more portable rpm specfile syntax for conditional php building
    (bug #988598).
  - Fix SetEnv directive in cupsd.conf (bug #986495).
  - Fix 'collection' attribute sending (bug #978387).
  - Prevent format_log segfault (bug #971079).
  - Prevent stringpool corruption (bug #884851).
  - Don't crash when job queued for printer that times out (bug #855431).
  - Upstream patch for broken multipart handling (bug #852846).
  - Install /etc/cron.daily/cups with correct permissions (bug #1012482).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-51
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-43
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #735505).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-40
changelog:
  - Map ASCII to ISO-8859-1 in the transcoding code (STR #3832, bug #681836).
  - Check for empty values for some configuration directives (STR #3861, bug #706673).
  - The network backends no longer try to collect SNMP supply and status
    information for raw queues (STR #3809, bug #709896).
  - Handle EAI_NONAME when resolving hostnames (bug #712430).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-37
changelog:
  - Fixed cupsSNMPQuirks parsing code in cups-snmp-quirks.patch (bug #580604).
  - lpstat -p reported current job as job id zero (STR #3627, bug #614908).
  - Set the default RIPCache to 128m (STR #3535, bug #616864).
  - Scheduler tracks whether we are shutting down and doesn't start
    new jobs if so (STR #3679, bug #624441).
  - Added 'restartlog' action to initscript usage output (bug #632180).
  - Fixed following rpmlint errors and warnings (bug #634931):
    - Fix character encoding in CREDITS.txt.
    - Mark D-Bus configuration file as config file.
    - Don't mark MIME types and convs files as config files.  Overrides
      can be placed as new *.types/*.convs files in /etc/cups.
    - Don't mark banners as config files.  Better is to provide new banners.
    - Don't mark initscript as config file.
    - Don't mark templates and www files as config files.  A better way to
      provide local overrides is to use a different ServerRoot setting.
      Note that a recent security fix required changed to template files.
    - Provide versioned LPRng symbol for rpmlint.
    - Use mode 0755 for binaries and libraries where appropriate.
    - Move /etc/cups/pstoraster.convs to /usr/share/cups/mime/.
    - Move cups-config man page to the devel sub-package.
  - Revert STR #2537 so non-UTF-8 clients continue to be accepted (bug #642448).
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).
  - Added tolerance for DNS failures (bug #654667).
  - Fixed initscript to stop service on reboot/halt (bug #659692).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-36
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-31
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (web interface CSRF, STR #2398),
    including cancel-RSS fix (bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-27
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #593368).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-25
changelog:
  - Fixed handling of large SNMP value lengths from upstream commit 8941
    (bug #581931).
  - Add an SNMP query for HP's device ID OID (STR #3552).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-23
changelog:
  - The lpstat command did not limit the job list
    to the specified printers (bug #578424, STR #3541).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-21
changelog:
  - Fixed patch for STR #3425 again to correctly
    remove job info files in /var/spool/cups (bug #571860).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-18
changelog:
  - Don't apply gcrypt threading patch (bug #569802).
  - Don't treat SIGPIPE as an error (bug #569777).
  - Fixed cupsGetNamedDest() so it falls back to the real default
    printer when a default from configuration file does not exist
    (bug #569500, STR #3503).
  - Added comments for all patches and sources.
  - Removed use of prereq and buildprereq.
  - Fixed use of '%' in changelog.
  - Versioned explicit obsoletes/provides.
  - Use tabs throughout.


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-17
changelog:
  - Reset status after successful ipp job (bug #555732, STR #3460).
  - Remove wait_bc call on most platforms (bug #562782, STR #3495).
  - Re-initialize the resolver if getnameinfo() returns EAI_AGAIN (bug #567589).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-15
changelog:
  - Fixed ipp authentication for servers requiring authentication for
    IPP-Get-Printer-Attributes (bug #549785, STR #3458).
  - Fixed invalid read in cupsAddDest (bug #550301, STR #3448).
  - Ensure proper thread-safety in gnutls's use of libgcrypt
    (bug #550302).
  - Fixed patch for STR #3425 by adding in back-ported change from svn
    revisions 8929 and 8936 (bug #548906, bug #550037).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-14
changelog:
  - The scheduler did not use the Get-Job-Attributes policy for a
    printer (STR #3431).
  - The scheduler added two job-name attributes to each job object
    (STR #3428).
  - The scheduler did not clean out completed jobs when
    PreserveJobHistory was turned off (STR #3425).
  - The web interface did not show completed jobs (STR #3436).
  - Authenticated printing did not always work when printing directly to
    a remote server (STR #3435).
  - Use upstream patch to stop the network backends incorrectly clearing
    the media-empty-warning state (rev 8896).
  - Use upstream patch to fix interrupt handling in the side-channel
    APIs (rev 8896).
  - Use upstream patch to handle negative SNMP string lengths (rev 8896).
  - Use upstream fix for SNMP detection (bug #542857, STR #3413).
  - Use the text filter for text/css files (bug #545026, STR #3442).
  - Show conflicting option values in web UI (bug #544326, STR #3440).
  - Use upstream fix for adjustment of conflicting options
    (bug #533426, STR #3439).
  - No longer requires paps.  The texttopaps filter MIME conversion file
    is now provided by the paps package (bug #545036).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-6
changelog:
  - Fixed display of current driver (bug #537182, STR #3418).
  - Fixed out-of-memory handling when loading jobs (bug #538054,
    STR #3407).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-5
changelog:
  - Fixed typo in admin web template (bug #537884, STR #3403).
  - Reset SIGPIPE handler for child processes (bug #537886, STR #3399).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-1
changelog:
  - 1.4.2.  No longer need str3380, str3332, str3356, str3396 patches.
  - Removed postscript.ppd.gz (bug #533371).
  - Renumbered patches and sources.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-12
changelog:
  - Fix incorrectly applied patch from #STR3285 (bug #531108).
  - Set the PRINTER_IS_SHARED variable for admin.cgi (bug #529634, #STR3390).
  - Pass through serial parameters correctly in web interface (bug #529635, #STR3391).
  - Fixed German translation (bug #531144, #STR3396).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-4
changelog:
  - Changed cups.init to be LSB compliant (bug #521641), i.e.
    return code "2" (instead of "3") if invalid arguments
    return code "4" if restarting service under nonprivileged user
    return code "5" if cupsd not exist or is not executable
    return code "6" if cupsd.conf not exist


author: Tim Waugh <twaugh@redhat.com> 1:1.4.0-2
changelog:
  - Fixed the dnssd backend so that it only reports devices once avahi
    resolution has completed.  This makes it report Device IDs
    (bug #520858).
  - Fix locale code for Norwegian (bug #520379).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.19
changelog:
  - Prevent infinite loop in cupsDoIORequest when processing HTTP
    errors (bug #518065, bug #519663, STR #3311).
  - Fixed document-format-supported attribute when
    application/octet-stream is enabled (bug #516507, STR #3308, patch
    from Jiri Popelka).
  - Fixed buggy JobKillDelay handling fix (STR #3292).
  - Prevent infinite loop in ppdc (STR #3293).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.16
changelog:
  - Fixed JobKillDelay handling for cancelled jobs (bug #518026, STR
    - Use 'exec' to invoke ghostscript in the pstoraster filter.  This
    allows the SIGTERM signal to reach the correct process, as well as
    conserving memory (part of bug #518026).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.14
changelog:
  - Fixed ppds.dat handling of drv files (bug #515027, STR #3279).
  - Fixed udev rules file to avoid DEVTYPE warning messages.
  - Fixed cupsGetNamedDest() so it does not fall back to the default
    printer when a destination has been named (bug #516439, STR #3285).
  - Fixed MIME type rules for image/jpeg and image/x-bitmap
    (bug #516438, STR #3284).
  - Clear out cache files on upgrade.
  - Require acl.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.13
changelog:
  - Ship udev rules to allow libusb to access printer devices.
  - Fixed duplex test pages (bug #514898, STR #3277).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.12
changelog:
  - Fixed Avahi support in the dnssd backend (bug #513888).
  - Fixed incorrect arguments to sigaction() in dnssd backend (STR #3272).
  - Cheaply restore compatibility with 1.1.x by having cups_get_sdests()
    perform a CUPS_GET_CLASSES request if it is not sure it is talking
    to CUPS 1.2 or later (bug #512866).
  - Prevent ipp backend looping with bad IPP devices (bug #476424,
    STR #3262).
  - Fixed Device ID reporting in the usb backend (STR #3266).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.10
changelog:
  - Applied patch to prevent bad job control files crashing cupsd on
    start-up (STR #3253, bug #509741).
  - Correctly handle CUPS-Get-PPDs requests for models with '+' in their
    names (STR #3254, bug #509586).
  - Accept incorrect device URIs in the (non-libusb) usb backend for
    compatibility with Fedora 11 before bug #507244 was fixed.
  - Applied patch to fix incorrect device URIs (STR #3259, bug #507244).
  - Applied patch to fix job-hold-until for remote queues (STR #3258,
    bug #497376).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.7
changelog:
  - Fixed template problem preventing current printer option defaults
    from being shown in the web interface (bug #506794, STR #3244).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.3
changelog:
  - Don't use RPM_SOURCE_DIR macro.
  - Fixed add/modify-printer templates which had extra double-quote
    characters, preventing the Continue button from appearing in certain
    browsers (bug #506461, STR #3229).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.1
changelog:
  - 1.4rc1.  No longer need str3124, CVE-2009-0163, CVE-2009-0164,
    str3197, missing-devices patches.
  - Disabled avahi patch for the time being.  More work is needed to
    port this to rc1.
  - Removed wbuffer patch as it is not needed (see STR #1968).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.15
changelog:
  - Accept "Host: ::1" (bug #497393).
  - Accept Host: fields set to the ServerName value (bug #497301).
  - Specify that we want poppler's pdftops (not ghostscript) for the
    pdftops wrapper when calling configure.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.14
changelog:
  - Applied patch to fix CVE-2009-0163 (bug #490596).
  - Applied patch to fix CVE-2009-0164 (bug #490597).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.13
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, snmp.conf,
    subscriptions.conf, lpoptions (bug #486287).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.12
changelog:
  - If cups-polld gets EAI_AGAIN when looking up a hostname,
    re-initialise the resolver (bug #490943).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.7
changelog:
  - Prevent cups-deviced missing devices (STR #3108).
  - Actually drop the perl implementation of the dnssd backend and use
    the avahi-aware one.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.6
changelog:
  - Beginnings of avahi support.  The dnssd backend should now work, but
    the scheduler will not yet advertise DNS-SD services.
  - No longer require avahi-tools as the dnssd backend does not use the
    command line tools any longer.
  - Load MIME type rules correctly (bug #426089, STR #3059).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.5
changelog:
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Attempt to unbreak the fix for STR #2831 (bug #474742).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.3
changelog:
  - 1.4b1.
  - No longer need ext, includeifexists, foomatic-recommended,
    getnameddest, str2101, str2536 patches.
  - Require poppler-utils at runtime and for build.  No longer need
    pdftops.conf.
  - Obsolete cupsddk.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.9-1
changelog:
  - 1.3.9, including fixes for CVE-2008-3639 (STR #2918, bug #464710),
    CVE-2008-3640 (STR #2919, bug #464713) and CVE-2008-3641 (STR #2911,
    bug #464716).
  - No longer need str2892 or res_init patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.8-5
changelog:
  - The dnssd backend uses avahi-browse so require it (bug #458565).
  - New php sub-package (bug #428235).
  - cups-polld: reinit the resolver if we haven't yet resolved the
    hostname (bug #354071).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed autoconf requirement by applying autoconf-generated changes
    to patches that caused them.  Affected patches: cups-lspp.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - CVE-2008-1373 patch is no longer needed (applied upstream).
  - Mark HTML files and templates config(noreplace) for site-local
    modifications (bug #441719).
  - The cups-devel package requires zlib-devel (bug #455192).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-3
changelog:
  - If cupsdTimeoutJob is called when the originating connection is still
    known, pass that to the function so that copy_banner can get at it if
    necessary (bug #447200).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-9
changelog:
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-4
changelog:
  - LSB header for initscript (bug #246897).
  - Move HTML-related files to main application directory so that the CUPS
    web interface still works even with --excludedocs (bug #375631).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-3
changelog:
  - Set MaxLogSize to 0 to prevent log rotation.  Upstream default is 1Mb, but
    we want logrotate to be in charge.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-6
changelog:
  - Include fixes from svn up to revision 7304.  No longer need str2703 patch.
    Build with --with-dbusdir.
  - Try out logrotate again (bug #432730).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-4
changelog:
  - Fix compilation of SO_PEERCRED support.
  - Include fixes from svn up to revision 7287.  No longer need str2650 or
    str2664 patches.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Apply patch to prevent overlong PPD lines from causing failures except
    in strict mode (bug #405061).  Needed for compatibility with older
    versions of foomatic (e.g. Red Hat Enterprise Linux 3/4).
  - Applied upstream patch to fix cupsctl --remote-any (bug #421411, STR #2650).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - CVE-2007-4045 patch is not necessarily because cupsd_client_t objects are
    not moved in array operations, only pointers to them.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
    are linked with gnutls.
  - LSPP cupsdSetString/ClearString fixes (bug #378451).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.4-2
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #250161).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #345101).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.3-3
changelog:
  - Use ppdev instead of libieee1284 for parallel port Device ID
    retrieval (bug #311671).  This avoids SELinux audit messages.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.2
changelog:
  - Make cancel man page work properly with alternatives system (bug #249768).
  - Don't call aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.1
changelog:
  - Better buildroot tag.
  - Moved LSPP access check in add_job() to before allocation of the job
    structure (bug #231522).
  - 1.3rc2.  No longer need avahi patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.3
changelog:
  - Change initscript start level to 98, to start after avahi but before
    haldaemon.
  - The devel sub-package requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.2
changelog:
  - Build requires avahi-compat-libdns_sd-devel.  Applied patch to fix
    build against avahi (bug #245824).
  - Build requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Make the initscript use start priority 56 (bug #213828).
  - Better paper-out detection patch (bug #241589).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-7
changelog:
  - Until bug #236736 is fixed, work around the kernel usblp driver's
    quirks so that we can detect paper-out conditions.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-6
changelog:
  - Fixed 'cancel' man page (bug #234088).
  - Added empty subscriptions.conf file to make sure it gets the right
    SELinux file context.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-8
changelog:
  - Removed logrotate config file and maxlogsize patch (bug #227369).  Now
    CUPS is in charge of rotating its own logs, and defaults to doing so once
    they get to 1Mb in size.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-6
changelog:
  - Fixed If-Modified-Since: handling in libcups (bug #217556, STR #2133).
  - Fixed extra EOF in pstops output (bug #216154, STR #2111).
  - Use upstream patch for STR #2121.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-4
changelog:
  - Another LSPP fix (bug #216669).
  - Fixed LSPP SELinux check (bug #216855).
  - Increased PPD timeout in copy_model() (bug #216065).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.5-4
changelog:
  - Fixed support for /dev/ttyUSB devices (bug #212577, STR #2061).
  - Fixed parallel backend (bug #213021, STR #2056).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-22
changelog:
  - Merge Review(226415)
  - changed: License Tag, using RPM macros instead of hardcoded
    dirs, summary ended with dot, added URL, removed CHANGES
    file as obsolete, preserved timestamps and some other cosmetic
    changes
  - no longer shipping old automake tarball, fixed issue with man8_DATA,
    BuildRequire:Automake,Autoconf again(see MergeReview discussion)


author: Tim Waugh <twaugh@redhat.com> 0.6.3-15
changelog:
  - Patch from Ville Skyttä <ville.skytta at iki.fi> (bug #111625):
    - Include /usr/share/xml in xml-common.
    - Own /usr/share/sgml and /usr/share/xml.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-8
changelog:
  - Back to /usr/share/sgml.  Now install docbook-dtds.
  - Use a real install-sh, not the symlink shipped in the tarball.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-6
changelog:
  - Don't create a useless empty catalog.
  - Don't try to put install things outside the build root.
  - Build requires a libxml2 that actually works.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-1
changelog:
  - 0.6.3.  Incorporates oldsyntax and quiet patches.
  - Make /etc/sgml/sgml.conf noreplace.
  - Own /etc/sgml, various other directories (bug #47485, bug #54180).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Install by hand (man/en/...).  Use %{_mandir}.
  - Use %{_tmppath}.
  - Make install-catalog fail silently if given the old syntax.
  - Add CHANGES file.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-3
changelog:
  - fixes bugs bz#1325975 bz#1311839 bz#1321556 bz#1286911 bz#1323042 
    bz#1298724 bz#1327165 bz#1101702 bz#1326498 bz#1326663 bz#1328397 bz#1330881 
    bz#1331376 bz#1330901 bz#1326248 bz#1324338 bz#1115367 bz#1308837 bz#1322695 
    bz#1322247 bz#1329895 bz#1327552 bz#1118770


author: Milind Changire <mchangir@redhat.com> - 3.7.9-2
changelog:
  - fixes bugs bz#1321509 bz#1322765 bz#1314724 bz#1242358 bz#1317790 
    bz#1314391 bz#1318428 bz#1298724 bz#1318170 bz#1283957 bz#1302355 bz#1318427 
    bz#1325750 bz#1309437 bz#1317940 bz#1302688 bz#1320412 bz#1289439 bz#1294062 
    bz#1300875 bz#1305456 bz#1115367 bz#1118770 bz#1314373 bz#1314421 bz#1294790 
    bz#1317908 bz#1323119 bz#1248998 bz#1231150 bz#1311686 bz#1321544 bz#1298955 
    bz#1292034 bz#1319406 bz#1303591 bz#1279628


author: Milind Changire <mchangir@redhat.com> - 3.7.9-1
changelog:
  - rebase to upstream v3.7.9
  - fixes bugs bz#1319658 bz#1319670 bz#1319688 bz#1319695 bz#1319603 
    bz#1273706 bz#1319625 bz#1319619 bz#1319646 bz#1283035 bz#1319710 bz#1319698 
    bz#1319634 bz#1319592 bz#1319638


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-22
changelog:
  - reserve 142:142 for activemq (#1086921)
  - reserve 167:167 for ceph (ceph-common) (#1221042)
  - change reservation for 185:185 from jboss-as to jboss (#1192412)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-21
changelog:
  - reserve uid 189 for hacluster (#872208)
  - reserve gid 189 for haclient (#872208)
  - reserve 160:160 for swift (openstack-swift) (#991502)
  - reserve 161:161 for glance (openstack-glance) (#991502)
  - reserve 162:162 for nova (openstack-nova) (#991502)
  - reserve 163:163 for keystone (openstack-keystone) (#991502)
  - reserve 164:164 for quantum (openstack-quantum) (#991502)
  - reserve 165:165 uidgid pair for cinder (#991502)
  - reserve 166:166 uidgid pair for ceilometer (#991502)
  - reserve 187:187 for heat (openstack-heat) (#991502)
  - reserve 185:185 for jboss-as (#991502)


author: Alexander Burmashev <alexander.burmashev@oracle.com> - 2.02-0.44.0.18
changelog:
  - modified 10_linux to execute different code on OVS and other platforms
    [27305562]
  - Restore symlink to grub environment file, that was removed during grub2-efi update
    if grub2 package is also installed on UEFI machines
    [27345750]
  - fix symlink removal scriptlet, to be executed only on removal
    [19231481]


author: Alexander Burmashev <alexander.burmashev@oracle.com> - 2.02-0.44.0.7
changelog:
  - Added missing patches from 2.02-0.44 and 2.02-0.42
  - Fixed build on OL6 ( patch grub-2.02~beta2.libc.rhel6.patch )
  - reworked spec to support OL6
  - removed themes support


author: Natalya Naumova <natalya.naumova@oracle.com> - 2.02-0.44.0.1
changelog:
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms
    [bug 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Use different titles for UEK and RHCK kernels [bug 18504756]


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: Peter Jones <pjones@redhat.com> - 2.02-0.36
changelog:
  - Better support for EFI network booting with dhcpv6.
    Resolves: rhbz#1154226
  - Back out a duplicate change resulting in some EFI network firmware drivers
    not working properly.
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765


author: Peter Jones <pjones@redhat.com> - 2.02-0.35
changelog:
  - Don't use legacy methods to make device node variables.
    Resolves: rhbz#1279599
  - Don't pad initramfs with zeros
    Resolves: rhbz#1219864


author: rmarshall@redhat.com 2.02-0.34
changelog:
  - Exit grub-mkconfig with a proper code when the new configuration would be
    invalid.
    Resolves: rhbz#1252311
  - Warn users if grub-mkconfig needs to be run to add support for GRUB
    passwords.
    Resolves: rhbz#1290803
  - Fix the information in the --help and man pages for grub-setpassword
    Resolves: rhbz#1290799
  - Fix issue where shell substitution expected non-translated output when
    setting a bootloader password.
    Resolves: rhbz#1294243
  - Fix an issue causing memory regions with unknown types to be marked available
    through a series of backports from upstream.
    Resolves: rhbz#1288608


author: Peter Jones <pjones@redhat.com> - 2.02-0.30
changelog:
  - Fix security issue when reading username and password
    Resolves: CVE-2015-8370
  - Do a better job of handling GRUB_PASSWORD
    Resolves: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.27
changelog:
  - Remove multiboot and multiboot2 modules from the .efi builds; they
    should never have been there.
    Resolves: CVE-2015-5281


author: Peter Jones <pjones@redhat.com> - 2.02-0.26
changelog:
  - Be more aggressive about trying to make sure we use the configured SNP
    device in UEFI.
    Resolves: rhbz#1257475


author: Peter Jones <pjones@redhat.com> - 2.02-0.19
changelog:
  - Rebuild for Aarch64
  - Deal with some coverity nits.
    Related: rhbz#1215839
    Related: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Handle ipv6 better
    Resolves: rhbz#1154226
  - On UEFI, use SIMPLE_NETWORK_PROTOCOL when we can.
    Resolves: rhbz#1233378
  - Handle rssd disk drives in grub2 utilities.
    Resolves: rhbz#1087962
  - Handle xfs CRC disk format.
    Resolves: rhbz#1001279
  - Calibrate TCS using the EFI Stall service
    Resolves: rhbz#1150698
  - Fix built-in gpg verification when using TFTP
    Resolves: rhbz#1167977
  - Generate better stanza titles so grubby can find them easier.
    Resolves: rhbz#1177003
  - Don't strip the fw_path variable twice when we're using EFI networking.
    Resolves: rhbz#1211101


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Document network boot paths better
    Resolves: rhbz#1148650
  - Use an rpm-based version sorted in grub2-mkconfig
    Resolves: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.11
changelog:
  - Fix grub2 segfault when root isn't set.
    Resolves: rhbz#1084536
  - Make the aarch64 loader be SB-aware.
    Related: rhbz#1100048
  - Enable regexp module
    Resolves: rhbz#1125916


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Make editenv utilities (grub2-editenv, grub2-set-default, etc.) from
    non-UEFI builds work with UEFI builds as well, since they're shared
    from grub2-tools.
    Resolves: rhbz#1119943
  - Make more grub2-mkconfig generate menu entries with the OS name and version
    included.
    Resolves: rhbz#996794
  - Minimize the sort ordering for .debug and -rescue- kernels.
    Resolves: rhbz#1065360
  - Add GRUB_DISABLE_UUID to disable filesystem searching by UUID.
    Resolves: rhbz#1027833
  - Allow "fallback" to specify titles like the documentation says
    Resolves: rhbz#1026084


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.5
changelog:
  - Add man pages for common grub utilities.
    Resolves: rhbz#948847
  - Fix shift key behavior on UEFI.
    Resolves: rhbz#1068215


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.3
changelog:
  - Don't emit "Booting <foo>" message.
    Resolves: rhbz#1023142
  - Don't require a password for booting, only for editing entries.
    Resolves: rhbz#1030176
  - Several network fixes from IBM
    Resolves: rhbz#1056324
  - Support NVMe device names
    Resolves: rhbz#1019660
  - Make control keys work on UEFI systems.
    Resolves: rhbz#1056035


author: Peter Jones <pjones@redhat.com> - 2.00-22.3
changelog:
  - Use linux16 when appropriate:
    Resolves: rhbz#880840
  - Enable pager by default:
    Resolves: rhbz#985860
  - Don't ask the user to hit keys that won't work.
    Resolves: rhbz#987443
  - Sign grub2 during builds
    Resolves: rhbz#1017855


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1037650


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055882


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953085


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-4
changelog:
  - Sync with current Fedora build, including:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Disable symbolic links by default in /etc/my.cnf
  Resolves: #553653
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.
  Resolves: #553632
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
    (see 547485)
  - Stop waiting during "service mysqld start" if mysqld_safe exits
  Resolves: #544095


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Resolves: #549327
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Karel Zak <kzak@redhat.com> 4.80-1
changelog:
  - upgrade to 4.80
    - lsof_4.78C-inode.patch - merged upstream
    - lsof_4.78C-selinux.patch - merged upstream
    - lsof_4.78C-threads.patch - rebased


author: Karel Zak <kzak@redhat.com> 4.78-6
changelog:
  - fix #280651 - lsof prints entries in multiple lines when SElinux is disabled
  - fix #243976 - mmap'd files with large inode numbers confuse lsof


author: Maciej Lesniewski <nimir@kis.p.lodz.pl>
changelog:
  [4.34-1]
  - New version
  - Spec rewriten to use %{name} and %{version} macros
  - Removed old log enteries


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-19
changelog:
  - libxl: fix vm lock overwritten bug
  - libxl: fix coverity issues introduced by 6a95edf
  - libxl: add tunnelled migration support
  - libxl: add p2p migration


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-18
changelog:
  - xlconfigtest: add tests for 'nestedhvm' support
  - xenconfig: add conversions for xen-xl
  - libxl: set nestedhvm for mode host-passthrough
  - cpu: Introduce virCPUCheckFeature
  - cpu: Add x86FeatureInData
  - cpu: Make x86ModelFromCPU a bit smarter


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-17
changelog:
  - libxl: describe host cpu features based on hwcaps
  - libxl: describe host topology in capabilities
  - xenconfig: fix handling of NULL disk source
  - xenFormatXLDisk: Don't leak @target
  - xenconfig: fix xml to xl.cfg conversion with no graphics
  - xenFormatXLDomainDisks: avoid double free on OOM testing
  - virConfSaveValue: protect against a NULL pointer reference


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Adam Jackson <ajax@redhat.com> 0.9.1-3.20071031
changelog:
  - libpciaccess-fd-cache.patch: Cache sysfs PCI config space file
    descriptors for great boot speed justice.


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Šimon Lukašík <slukasik@redhat.com> - 1.2.7-1
changelog:
  - upgrade to the latest upstream release (#1259037)
  - Introduced '--verbose' mode (#1287295)
  - Detailed OVAL results present in HTML report (#1140240)
  - fixed issues in scap-as-rpm tool (#1226398, #1258958)
  - introduced support for non-decimal OVAL vetsions (#1248378)
  - 'oscap oval eval --report' command (#1258958)
  - 'oscap xccdf generate --profile <custom-profile> guide' (#1139822)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 4:1.0.5-1.0.3
changelog:
  - BUILDINFO: commit=d08acaed2f1b553d0dd6a9900fe70aa4b45d7a65
  - libibcm: Bump Epoch to 4 and release number (Mukesh Kacker)  
  - libibcm: consolidate spec files for ol6,ol7 that are identical (Mukesh Kacker)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.5-1.0.2
changelog:
  - libibcm: Bump release to rebuild with new headers (Mukesh Kacker)  
  - libibcm: add support for Oracle Linux 7 (OL7) builds (Mukesh Kacker)


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-1004
changelog:
  - update Intel changelog to 20190514a correction (no functional change)
  - update 06-2d-07 to 0x718
  - update 06-3f-04 to 0x15
  - update 06-4f-01 to 0xb000037


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-1001
changelog:
  - update 06-3e-04 to 0x42e
  - update 06-3e-07 to 0x715
  - update 06-3f-02 to 0x43
  - update 06-3f-04 to 0x14
  - update 06-4f-01 to 0xb000036
  - update 06-55-04 to 0x200005e


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-1000
changelog:
  - new release for use with Oracle dracut early load support
  - rebase Intel microcode to 20190312 release


author: Petr Oros <poros@redhat.com> - 1:1.17-27
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527354


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7.2
changelog:
  - moved fw_nm into the base sub package to fix a bug introduced with the
    RHBZ#720831 fix (RHBZ#1164223)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7
changelog:
  - Fixed screen corruption introduced with (RHBZ#720831)
  - Replaced pickle by json introduced with (RHBZ#711231)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-6
changelog:
  - Added missing dependency for newt-python (RHBZ#756048)
  - Latest translations from transifex (RHBZ#819809)
  - Allow user to select and add trust and masq interfaces (RHBZ#720831)
  - New D-Bus methods to read an write service settings, use in s-c-fw (RHBZ#711231)
  - Drop eth from std device names list (rhbz#682391)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985, rhbz#719871)
  - stop D-BUS firewall mechanism on update


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.26-1
changelog:
  - added libvirt services (rhbz#565625)
  - added Bakula service (rhbz#588377)
  - fixed DBUS mechanism to report complete syslog message (rhbz#604623)
  - fixed crash because of missing /etc/services file (rhbz#604726)
  - updated translations: ar, as, bn_IN, da, de, es, fi, fr, gu, he, hi, is, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, ru, ta, te, 
                          zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.25-1
changelog:
  - fixed lokkit: do not create or alter firewall in selinux only mode
    (rhbz#583986)
  - use new icons (rhbz#583715)
  - fixed treeviewtooltips to not show the tooltip if an overlapping window has
    the focus
  - updated translations: bn_IN, de, es, gu, it, kn, ml, mr, nl, or, pa, pl, pt,
                          pt_BR, ru, sk, sr, sr@latin, te


author: Thomas Woerner <twoerner@redhat.com> 1.2.24-1
changelog:
  - DBUS-mechanism: report errors to syslog and print traceback (rhbz#563354)
  - fixed minor misspellings (rhbz#566468)
  - msgmerged po files
  - added missing default values for ip*tables-config content (rhbz#566869)
  - autofoo utils update
  - fixed max length of user defined interface name in interfaceDialog
  - added missing range check to port_entry_changed_cb
  - fixed sensitiveness of protocol label in portDialog
  - fixed misuse of MARK extension in nat table, now in mangle table
  - port forwarding dialog usability fixes (rhbz#507638)
  - use new fw_functions.checkInterface function in tui and gui
  - new function to check interface names in fw_functions
  - use new checkInterface function in parser for trust, masq and forward-port
  - add wlan standard device
  - fixed build (fw_nm.py not packaged)
  - updated translations: bn_IN, cs, da, de, el, en_GB, es, fi, fr, hu, is, it,
                          ja, nb, nl, or, pl, pt, pt_BR, ru, sr, sr@latin, sv,
                          te, uk


author: Thomas Woerner <twoerner@redhat.com> 1.2.22-1
changelog:
  - using NetworkManager DBUS interface to replace NCDeviceList from
    system-config-network
  - not opening orig port for local port forwarding, only new port is open
  - added isakmp support for IPsec (rhbz#504446)
  - added amanda client support (rhbz#541679)
  - fixed requirement for setenforce: libselinux-utils instead of libselinux
  - removed unused import socket
  - added download url to Source tag in spec file
  - fixed wrong license header in src/fw_tui.py (LGPL instead of GPL)
  - update cluster-suite service: disable rgmanager and cssd
  - removed separator at the end of the Options menu (rhbz#531635)
  - removed 2049/udp from NFS4 service (rhbz#532491)


author: Thomas Woerner <twoerner@redhat.com> 1.2.21-1
changelog:
  - fixed Policykit v0 compatibility for Fedora version 10 and 11: python-slip
    for PolicyKit v0 does not provide dbus
  - updated translations: bn_IN, uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.19-1
changelog:
  - enhanced build environment to support usermode and policykit switches, new
    options for configure and spec file
  - make toplevel invisible to not show half initialized window while policykit
    dialog is shown
  - system-config-firewall.desktop.in moved to config subdir
  - disable dbus usage if gui is used as root (needed for policykit v0)
  - do not report dbus error if there is no firewall configuration (empty or
    missing /etc/sysconfig/system-config-firewall)
  - resize main window to comfortably fit in a 800x600 gnome desktop
  - moved all config files into config subdir: sysconfig, dekstop, pam and console
  - new infrastructure to enable policy translations
  - print exception if polkit authorization failes to console
  - show dbus error dialog if dbus conection can not be established
  - set title to APP_NAME for dialogs if there is no title
  - center dialogs on screen if there is no parent
  - make main app invisible at first to prevent to show an empty app while
    PolicyKit password dialog is visible
  - updated translations: as, bn_IN, ca, da, de, ca, cs, es, fi, fr, gu, hi, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk,
                          sr, sr@latin, sv, ta, te, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.18-1
changelog:
  - added support for PolicyKit
  - removed unused inconsistent flag from CellRendererToggle in serviceView (rhbz#521144)
  - made "Port/Protocol" cell resizable in "Trusted Services"-view
  - fixed hidden one line label after resize caused by fix for bgo#315462
  - fixed startup busy loops if assistive technologies is enabled (rhbz#515048)
    by moving set_model after adding the columns to a TreeView
  - fixed tui to create valid empty self.config object (rhbz#518210)
  - failing to load the icon in fw_gui.setupScreen should not be fatal
    (rhbz#508186)
  - made description column in settings dialog resizable
  - removed rhpl usage (rhbz#508991)
  - fixed not reappearing TreeViewTooltips if mouse moved in the tooltip popup
  - hide TreeViewTooltips while scrolling
  - code cleanup
  - sort ports in fw_services by protocol, id
  - updated translations: as, bn_IN, ca, da, de, es, fi, fr, gu, hi, kn, hu, it, 
                          ja, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk, sr,
  			sr@latin, ta, te, uk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.17-1
changelog:
  - Added Red Hat Cluster Suite to trusted services (rhbz#493668)
  - Fixed wrong patch for system-config-firewall-tui (rhbz#461046)
  - Fixed sysctl parser to also support ';' for comments
  - Fixed port range check for service names containing '-'
  - New column in serviceView for conntrack helper, removed from tooltip
  - New column in icmpView for protocol types, removed from tooltip
  - Added TFTP and TFTP client support (rhbz#494417)
  - Fixed sensitiveness of OK button in portDialog if editing an Port
    (rhbz#500380)
  - Added missing tooltips for buttons in mainNotebook tabs. (rhbz#493872)
  - updated po files


author: Thomas Woerner <twoerner@redhat.com> 1.2.16-1
changelog:
  - fixed build system to update desktop file from desktop.in
    fixes icon reference in desktop file (rhbz#493674)
  - updated translations: fr


author: Thomas Woerner <twoerner@redhat.com> 1.2.15-1
changelog:
  - fixed icon reference in desktop file (rhbz#493674)
  - fixed po/POTFILES.in
  - updated translations: as, bn_IN, el, fi, gu, hi, hu, it, kn, ko, mai, ml, mr, or, pa, pt, ru, sk, sv, ta, te, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new build environment using configure, autofoo and intltool
  - fixed typo in router-solicitation description (rhbz#490979)
  - new themable application icon: preferences-system-firewall (rhbz#454402)
  - make backup copies before overwriting files (rhbz#437374)
  - updated translations:


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - fixed two typos in fw_icmp (rhbz#467334)
  - added ability to sort custom rules files (rhbz#467696)
  - fixed modified test in sysctl writer: fixes rhbz#462325
    also removed quotes around values for new keys
  - some build fixes
  - updated translations for: as, de, fi, fr, he, hi, ko, hu, it, ja, ko, ml,
                              pl, pt_BR, ru, sk, sr, sr@latin, sv, ta, te, 
                              zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - only provide lang files in tui sub-package (rhbz#465572)
  - updated translations for: as, bn_IN, ca, cs, es, fr, gu, it, ja, kn, mr, nl,
                              pa, or, pl, pt_BR, sk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - use dialogs for parser errors in tui (rhbz#457485)
  - enable to add protocol specific (IPv4, IPv6) icmp types for ICMP filtering
  - updated translations for he, ja, ko and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - lokkit: fixed path for system-config-firewall-tui (rhbz#454108)
  - updated translations for: it, fr, nl, ru, sr, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - fixed format string to silence inttool
  - new remider to check if the ip*tables services are enabled
  - use proper dialog functions in the tui
  - updated translations: cs, de, es, gu, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-1
changelog:
  - new tui interface
  - new system-config-firewall-tui
  - new client services for ipp and samba
  - lokkit: fixed disabling of firewall in force mode (rhbz#443411)
  - disabled port forwarding for IPv6
  - some minor fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.7-1
changelog:
  - fixed crash if encoding is not UTF-8 (rhbz#439902)
  - updated translations: bn_IN, cs, de, es, fi, fr, gu, hi, it, kn, ko, ml,
                          mr, pa, pl, pt_BR, ru, sr, sr@latin, ta, te, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-1
changelog:
  - new ICMP filter to block specified ICMP types
  - fixed minor problem in lokkit (initialize old_config)
  - set starting diretory for custom rules files to /etc/sysconfig
  - more build environment changes for git
  - use gtk.CellRendererToggle instead of own CellRendererCheck
  - several parser changes for transparent error handling and output
  - some minor enhancements
  - translation updates


author: Thomas Woerner <twoerner@redhat.com> 1.2.4-1
changelog:
  - fixed overwrite problem if IPTABLES_SAVE_ON_RESTART is set (rhbz#431961)
  - use SELECTION_NONE for trustedView


author: Thomas Woerner <twoerner@redhat.com> 1.2.3-1
changelog:
  - fixed traceback for empty configuration use in life installer (rhbz#430963)
  - use config-util for userhelper configuration (rhbz#428392)
  - mark dirty after applying new default configuration
  - do not overwrite attributes filename and converted in config
  - use new shared ChooserButton
  - fixed forward dialog and labels to use current dialog width
  - use tempfile.mkdtemp for better security
  - updated translations: fi, fr, it, ja, nl, pt_BR, sr and sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.2-1
changelog:
  - fixed icmp handling for ip6tables in FORWARD chain
  - do state established, related test early in FORWARD chain
  - fixed typo in address for port-forwarding
  - added IPv4 only message to masquerading and port-forwarding for lokkit
  - updated translations: es, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.1-1
changelog:
  - fixed traceback for clean selinux configuration (rhbz#430963)
  - fixed icmp handling for ip6tables
  - updated translations: as, de, it, ja, pl, pt_BR, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.0-1
changelog:
  - added port forwarding
  - using INPUT chain in table filter instead of RH-Firewall-1-INPUT
  - fixed masquerading
  - rewrite of firewall generation code
  - trusted hosts now also allowed for FORWARD
  - lots of bug fixes
  - gui enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1
changelog:
  - new fw_compat, used in config-convert and fw_sysconfig to automatically 
    convert old system-config-securitylevel configurations
  - new wizard look
  - fixed range check for user defined ports
  - some code cleanup
  - updated translations for fi, fr and ja


author: Thomas Woerner <twoerner@redhat.com> 1.1.2-1
changelog:
  - fw_gui: fixed row activation for masquerading
  - fw_gui: fixed _setInterfaces to use internal functions to correctly set
    toggles
  - fw_gui: show info dialog if no config exists and firewall gets enabled: new
    function enableFirewall
  - fw_gui, fw_tui: disable firewall if no config exists
  - fw_gui, fw_tui: do not print traceback if NCDeviceList.getDeviceList raises
    and exception
  - forward masqueraded connections
  - gtk_cellrenderercheck: fixed size calculations
  - fw_sysconfig: set config.filename to None for merged configuration in
    read_sysconfig_config if no configuration exists
  - new translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - use radio buttons for skill menu entries to show active level
  - fixed convert-config problem if there is no configuration to convert
    (rhbz#426477)
  - minor string changes
  - new it and pt_BR translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-1
changelog:
  - new default configurations: server, desktop
  - cleanup of wizard: dropped network connection tab
  - new option in wizard to keep configuration or load a default configuration
  - new menu entry and dialog to configure iptables and ip6tables service settings
  - some enhancements to the gtk_cellrenderercheck for better look and feel


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-0
changelog:
  - ports are ports and services are services: there is a new service tag to
    enable services; a port is not enabling a service anymore
  - new conversion tool for 1.0.X to 1.1.X configuration
  - new version option for lokkit
  - wizard
    - dropped network connection selection tab
    - using keep configuration check instead of clear configuration check
    - added default configuration selection
  - gui: new menu for skill level and load default configuration
  - use choices in optparse, removed obsolete check functions


author: Thomas Woerner <twoerner@redhat.com> 1.0.12-1
changelog:
  - allow to activate checkboxes by row activation in treeviews
  - code cleanup in view_toggle_cb
  - fixed port display for IPSec
  - use system icons where possible, new wizard icons
  - added fallback for CellRendererCheck if icons are missing, size fixes
  - added tooltips for toolbar and menu entries (if needed)
  - improved more english texts (rhbz#395801)
    thanks to Paul W. Frields for the initial patch


author: Thomas Woerner <twoerner@redhat.com> 1.0.11-1
changelog:
  - fixed crash on startup for network device aliases (rhbz#384891)
    thanks to Loran Freval for the patch
  - added port entry max length in other ports dialog (rhbz#385931)
  - added version number to about dialog (rhbz#387891)
  - improved some english texts (rhbz#383741)
    thanks to Paul W. Frields for the initial patch
  - code cleanup with start speedup
  - do not allow to add custm rules for ipv6:nat
  - also translate parser error messages


author: Thomas Woerner <twoerner@redhat.com> 1.0.10-1
changelog:
  - fixed problem with network devices (rhbz#331671)
  - dropped obsolete translation no.po (rhbz#332331)


author: Thomas Woerner <twoerner@redhat.com> 1.0.9-1
changelog:
  - do not report configuration failed if ipv6 is disabled (rhbz#355561)
  - print messages if lokkit failed
  - lokkit be more verbose on restarting ipXtables in verbose mode


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-2
changelog:
  - lokkit: write new config with nostart option (rhbz#353961)
  - translation fixes for de, it, nb, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-1
changelog:
  - use extension match for protocols (rhbz#229879)
  - use ipv6-icmp instead of icmpv6 (rhbz#291001)
  - use ':' in tui as port/proto delimiter for other ports (rhbz#292171)
  - some translation fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.7-1
changelog:
  - new translations
  - added openvpn to services (rhbz#)
  - fixed typo in description text for ipsec
  - using port numbers instead of port names for services
  - renamed some variables to be consistent
  - make tolltip better: bigger text, helper modules
  - dropped unused code: inconsistent handling
  - make port check button inactive in add_port_cb
  - new function _addDevice: code cleanup
  - allow to set variables in ipXtablesConfig, which were not set before
  - fixed os.system calls in ipXtablesClass to return proper return values
  - fixed status funciton in ipXtablesClass
  - new _append_unique function in fw_parser to prevent duplicates
  - added warning dialog for missing or unusable /etc/sysconfig/ip*tables files
  - fixed expand of the warning label in the startup dialog


author: Thomas Woerner <twoerner@redhat.com> 1.0.6-1
changelog:
  - dropped --stop option from fw_gui::genArgs
  - new translations
  - sysctl support for masquerading (net.ipv4.ip_forward will be set)
  - glade file: fixed spacings, dropped not needed containers


author: Thomas Woerner <twoerner@redhat.com> 1.0.5-4
changelog:
  - fixed problem if /etc/sysconfig/system-config-securtylevel and 
    /etc/sysconfig/system-config-firewall are not readable


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-1
changelog:
  - more translations
  - build environment changes
  - dropped build stage, because it is not needed at all


author: Thomas Woerner <twoerner@redhat.com> 1.0.3-1
changelog:
  - added missing system-config-securitylevel compatibility files
  - string and documentation fixes
  - fixed typos reported by Alain Portal
  - more translations
  - fixed buildroot
  - cleanup and changes according to review (rhbz#253232)
  - moved doc to tui sub package


author: Thomas Woerner <twoerner@redhat.com> 1.0.2-1
changelog:
  - obsolete and provide system-config-securitylevel package
  - added compat files for anaconda, firstboot and system-config-kickstart
  - lokkit fixes for nostart option:
    - only write config for iptables and ip6tables if enabled
    - stop iptables and ip6tables if disabled
    - unlink iptables and ip6tables rule files if disabled
  - lokkit: new option --update to regenerate firewall configuration if not 
    disabled
  - check for include files only when writing firewall configuration
  - clean buildroot in install
  - made system-config-securitylevel a synonym for system-config-firewall
  - ip6tables: reject with icmp6-adm-prohibited instead of icmp6-port-unreachable
    (rhbz#250915)
  - moved config files from /etc/sysconfig into tui sub package
  - removed x bit from import files


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-2
changelog:
  - fixed disabled string in fw_gui
  - set mode after copying of ip*tables-config to 0600
  - fixed categories in desktop file


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-1
changelog:
  - fixed startup and description texts
  - added missing requirement for system-config-network-tui
  - moved base python files into tui sub package
  - fixed requirements
  - made package noarch


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Tim Waugh <twaugh@redhat.com> 2.17-5
changelog:
  - Fix init script (bug #52862).
  - Avoid temporary file vulnerability in init script.
  - Update README: it's --add, not -add.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - pulled into distribution
  - used setserial-2.12_CTI.tgz instead of setserial-2.12.tar.gz (former is
    all that sunsite has) - not sure what the difference is.


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - added %attr's
  - added sanity check for RPM_BUILD_ROOT
  - setserial is now installed into /bin, where util-linux puts it and all
    startup scripts expect it.


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.6.1.el6uek]
changelog:
  - vfs: rename: check backing inode being equal (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - vfs: add vfs_select_inode() helper (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: verify upper dentry before unlink and rename (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: fix getcwd() failure after unsuccessful rmdir (Rui Wang)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - xen: use same main loop for counting and remapping pages (Juergen Gross)  [Orabug: 24012238]  
  - Revert "ocfs2: bump up o2cb network protocol version" (Junxiao Bi)  [Orabug: 23710417]  
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23704078]  {CVE-2016-2117} 
  - Revert "perf tools: Bump default sample freq to 4 kHz" (ashok.vairavan)  [Orabug: 23634802]  
  - block: Initialize max_dev_sectors to 0 (Keith Busch)  [Orabug: 23333444]  
  - sd: Fix rw_max for devices that report an optimal xfer size (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Optimal I/O size is in bytes, not sectors (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Reject optimal transfer length smaller than page size (Martin K. Petersen)  [Orabug: 23333444]  
  - Fix kabi issue for upstream commit ca369d51 (Joe Jin)  [Orabug: 23333444]  
  - block/sd: Fix device-imposed transfer length limits (Joe Jin)  [Orabug: 23333444]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.5.1.el6uek]
changelog:
  - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23520741]  
  - ocfs2: bump up o2cb network protocol version (Junxiao Bi)  [Orabug: 23515810]  
  - IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23283954]  {CVE-2016-4565}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.4.1.el6uek]
changelog:
  - move part of fix for "unix: properly account for FDs passed over unix sockets" (Chuck Anderson)  [Orabug: 23294626]  {CVE-2013-4312} {CVE-2013-4312}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.3.1.el6uek]
changelog:
  - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279022]  {CVE-2016-0758} 
  - uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers (Todd Vierling)  [Orabug: 23270829]  
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262277]  {CVE-2013-4312} {CVE-2013-4312} 
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222731]  {CVE-2015-8767}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.2.1.el6uek]
changelog:
  - arch/sparc: Sonoma epsc group patch (Joe Moriarty)  [Orabug: 23055865]  
  - arch/sparc: Sonoma piggyback patch (Joe Moriarty)  [Orabug: 23055807]  
  - sparc64: bypass iommu to use 64bit address space (Tushar Dave)  [Orabug: 21149316]  
  - sparc64: correctly recognize Sonoma chips - add missing break (Chuck Anderson)  [Orabug: 22088766]  
  - sparc64/uek-rpm: enable sun4v_wdt watchdog driver (Chuck Anderson)  [Orabug: 22329522]  
  - bnx2x: Fix VLANs null-pointer for 57710, 57711 (Yuval Mintz)  [Orabug: 23093255]  
  - proc: fix PAGE_SIZE limit of /proc/$PID/cmdline (Alexey Dobriyan)  [Orabug: 23081539]  
  - secureboot: enable secureboot if boot param is set (Brian Maly)  [Orabug: 23038345]  
  - RHEL: uefi: copy secure_boot flag in boot params across kexec (Brian Maly)  [Orabug: 23038345]  {CVE-2015-7837}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.1.1.el6uek]
changelog:
  - sparc64/uek-rpm: enable sunhv console driver polling support (Chuck Anderson)  [Orabug: 23026831]  
  - sparc64: correctly recognize Sonoma chips (Allen Pais)  [Orabug: 22088766]  
  - Add sun4v_wdt watchdog driver (wim.coekaerts@oracle.com)  [Orabug: 22329522]  
  - Revert "Add sun4v_wdt watchdog driver" (Allen Pais)  [Orabug: 22329522]  
  - sparc64:piggback program generates a.out header with incorrect section sizes (Allen Pais)   
  - fuse: Fix return value from fuse_get_user_pages() (Ashish Samant)   
  - Btrfs: fix shrinking truncate when the no_holes feature is enabled (Filipe Manana)  [Orabug: 23017131]  
  - Btrfs: incremental send, don't delay directory renames unnecessarily (Filipe Manana)  [Orabug: 22370277]  
  - Btrfs: fix stale directory entries after fsync log replay (Filipe Manana)  [Orabug: 22628079]  
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997967]  {CVE-2016-3157}


author: Alexander Burmashev <alexander.burmashev@oracle.com> - 2.02-0.44.0.21
changelog:
  - According to rpm packaging guidelines, obsoletes for legacy grub are now followed by provides
    [28175090]
    [28158210]


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0.1-3
changelog:
  - Add requirement on python-elementtree, which was a separate package
    before Python 2.5.
  - Re-add changelog entries accidentally removed earlier.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0-1
changelog:
  - Update to 2.0.
  - Adjusted source URL.
  - License changed to BSD only.
  - Upstream now provides a script to run markdown from the cmdline.


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.7
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420486 bz#1420488]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420486 bz#1420488]
  - Resolves: bz#1420486
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
  - Resolves: bz#1420488
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418230 bz#1419416]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418230 bz#1419416]
  - Resolves: bz#1418230
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])
  - Resolves: bz#1419416
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.5
changelog:
  - kvm-net-check-packet-payload-length.patch [bz#1398213]
  - Resolves: bz#1398213
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.8.z])


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.491.el6.4
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1408389]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1408389]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1408389]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1408389]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1408389]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1408389]
  - Resolves: bz#1408389
    ([RHEL6.8.z] KVM guest shuts itself down after 128th reboot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.3
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
  - Resolves: bz#1359724
    (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-6.8.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.491.el6_8.2
changelog:
  - kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
  - Resolves: bz#1347192
    (Regression from CVE-2016-3712: windows installer fails to start)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.1
changelog:
  - kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
  - kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
  - kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
  - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
  - kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
  - kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
  - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
  - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
  - Resolves: bz#1331407
    (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.490.el6
changelog:
  - kvm-qemu-ga-implement-win32-guest-set-user-password.patch [bz#1174181]
  - kvm-util-add-base64-decoding-function.patch [bz#1174181]
  - kvm-qga-convert-to-use-error-checked-base64-decode.patch [bz#1174181]
  - kvm-qga-use-more-idiomatic-qemu-style-eol-operators.patch [bz#1174181]
  - kvm-qga-use-size_t-for-wcslen-return-value.patch [bz#1174181]
  - kvm-qga-use-wide-chars-constants-for-wchar_t-comparisons.patch [bz#1174181]
  - kvm-qga-fix-off-by-one-length-check.patch [bz#1174181]
  - kvm-qga-check-utf8-to-utf16-conversion.patch [bz#1174181]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root account password (Linux guest))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.489.el6
changelog:
  - kvm-hw-qxl-qxl_send_events-nop-if-stopped.patch [bz#1290743]
  - kvm-block-mirror-fix-full-sync-mode-when-target-does-not.patch [bz#971312]
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)
  - Resolves: bz#971312
    (block: Mirroring to raw block device doesn't zero out unused blocks)


author: Miroslav Rezanina <mrezanin@redhat.com - 0.12.1.2-2.488.el6
changelog:
  - Fixed qemu-ga path configuration [bz#1213233]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.487.el6
changelog:
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249740]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249740]
  - Resolves: bz#1249740
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.486.el6
changelog:
  - kvm-blockdev-Error-out-on-negative-throttling-option-val.patch [bz#1294619]
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298046]
  - Resolves: bz#1294619
    (Guest should failed to boot if set iops,bps to negative number)
  - Resolves: bz#1298046
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.485.el6
changelog:
  - kvm-Change-fsfreeze-hook-default-location.patch [bz#1213233]
  - kvm-qxl-replace-pipe-signaling-with-bottom-half.patch [bz#1290743]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.484.el6
changelog:
  - kvm-qga-flush-explicitly-when-needed.patch [bz#1210246]
  - kvm-qga-add-guest-set-user-password-command.patch [bz#1174181]
  - kvm-qcow2-Zero-initialise-first-cluster-for-new-images.patch [bz#1223216]
  - kvm-Documentation-Warn-against-qemu-img-on-active-image.patch [bz#1297424]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678]
  - kvm-qemu-options-Fix-texinfo-markup.patch [bz#1250442]
  - kvm-qga-Fix-memory-allocation-pasto.patch []
  - kvm-block-raw-posix-Open-file-descriptor-O_RDWR-to-work-.patch [bz#1268347]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root/administrator account password)
  - Resolves: bz#1210246
    ([virtagent]The 'write' content is lost if 'read' it before flush through guest agent)
  - Resolves: bz#1223216
    (qemu-img can not create qcow2 image when backend is block device)
  - Resolves: bz#1250442
    (qemu-doc.html bad markup in section 3.3 Invocation)
  - Resolves: bz#1268347
    (posix_fallocate emulation on NFS fails with Bad file descriptor if fd is opened O_WRONLY)
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297424
    (Add warning about running qemu-img on active VMs to its manpage)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.483.el6
changelog:
  - kvm-rtl8139-Fix-receive-buffer-overflow-check.patch [bz#1262866]
  - kvm-rtl8139-Do-not-consume-the-packet-during-overflow-in.patch [bz#1262866]
  - Resolves: bz#1262866
    ([RHEL6] Package is 100% lost when ping from host to Win2012r2 guest with 64000 size)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.482.el6
changelog:
  - kvm-qemu-kvm-get-put-MSR_TSC_AUX-across-reset-and-migrat.patch [bz#1265428]
  - kvm-qcow2-Discard-VM-state-in-active-L1-after-creating-s.patch [bz#1219908]
  - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1286597]
  - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1286567]
  - Resolves: bz#1219908
    (Writing snapshots with "virsh snapshot-create-as" command slows as more snapshots are created)
  - Resolves: bz#1265428
    (contents of MSR_TSC_AUX are not migrated)
  - Resolves: bz#1286567
    (CVE-2015-7512 qemu-kvm: Qemu: net: pcnet: buffer overflow in non-loopback mode [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.481.el6
changelog:
  - kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263275]
  - Resolves: bz#1263275
    (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.480.el6
changelog:
  - kvm-virtio-rng-fix-segfault-when-adding-a-virtio-pci-rng.patch [bz#1230068]
  - kvm-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1213236]
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248763]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248763]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248763]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248763]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248763]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248763]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248763]
  - Resolves: bz#1213236
    ([virtagent] 'guest-fstrim' failed for guest with os on spapr-vscsi disk)
  - Resolves: bz#1230068
    (Segmentation fault when re-adding virtio-rng-pci device)
  - Resolves: bz#1248763
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    ()


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.478.el6
changelog:
  - kvm-vdi-Avoid-direct-AIO-callback.patch [bz#1130046]
  - kvm-vdi-Initialize-acb-bh-in-vdi_aio_setup.patch [bz#1130046]
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.477.el6
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225887]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225887]
  - Resolves: bz#1225887
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer flow in the tx path [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.476.el6
changelog:
  - kvm-block-Fix-bdrv_aio_cancel-RHEL-only.patch [bz#1220674]
  - Resolves: bz#1220674
    (Received no response to QMP command 'system_reset')


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.475.el6
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219268]
  - Resolves: bz#1219268
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.474.el6
changelog:
  - kvm-block-avoid-useless-checks-on-acb-bh.patch [bz#1130014]
  - kvm-clean-unnecessary-code-don-t-check-g_strdup-arg-for-.patch [bz#1205288]
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1205288]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1205288]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1205288]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1205288]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1205288]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1205288]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1205288]
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)
  - Resolves: bz#1205288
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.473.el6
changelog:
  - kvm-blockdev-preserve-I-O-throttling-across-drives_reope.patch [bz#1211513]
  - Resolves: bz#1211513
    (IO throttling doesn't work after migration)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.472.el6
changelog:
  - kvm-virtio-pci-avoid-repeatedly-deassigning-notifers-of-.patch [bz#1124311]
  - Resolves: bz#1124311
    (Qemu-kvm aborted when boot with 232 virtio NICs (multiple function is on))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.471.el6
changelog:
  - kvm-aio-switch-aiocb_size-type-int-size_t.patch [bz#1069519]
  - kvm-aio-use-g_slice_alloc-for-AIOCB-pooling.patch [bz#1069519]
  - kvm-aio-rename-AIOPool-to-AIOCBInfo.patch [bz#1069519]
  - kvm-ide-ahci-Check-for-ECANCELED-in-aio-callbacks.patch [bz#1069519]
  - kvm-block-Add-refcnt-in-BlockDriverAIOCB.patch [bz#1069519]
  - kvm-block-Add-bdrv_aio_cancel_async.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_co_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_aiocb_info.cancel.patch [bz#1069519]
  - kvm-posix-aio-Remove-raw_aiocb_info.cancel.patch [bz#1069519]
  - kvm-linux-aio-Convert-laio_aiocb_info.cancel-to-.cancel_.patch [bz#1069519]
  - kvm-dma-Convert-dma_aiocb_info.cancel-to-.cancel_async.patch [bz#1069519]
  - kvm-blkdebug-Drop-blkdebug_aiocb_info.cancel.patch [bz#1069519]
  - kvm-curl-Drop-curl_aiocb_info.cancel.patch [bz#1069519]
  - kvm-qed-Drop-qed_aiocb_info.cancel.patch [bz#1069519]
  - kvm-rbd-Drop-rbd_aiocb_info.cancel.patch [bz#1069519]
  - kvm-vdi-Drop-vdi_aio_cancel.cancel.patch [bz#1069519]
  - kvm-gluster-Drop-gluster_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-AIOCBInfo.cancel.patch [bz#1069519]
  - kvm-block-Rename-qemu_aio_release-qemu_aio_unref.patch [bz#1069519]
  - kvm-scsi-Drop-scsi_req_abort.patch [bz#1069519]
  - kvm-scsi-generic-Handle-canceled-request-in-scsi_command.patch [bz#1069519]
  - kvm-scsi-Unify-request-unref-in-scsi_req_cancel.patch [bz#1069519]
  - kvm-scsi-Drop-SCSIReqOps.cancel_io.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_complete.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_async.patch [bz#1069519]
  - kvm-virtio-scsi-Handle-TMF-request-cancellation-asynchro.patch [bz#1069519]
  - kvm-scsi-fix-cancellation-when-I-O-was-completed-but-DMA.patch [bz#1069519]
  - kvm-block-Fix-bdrv_aio_co_cancel_em-RHEL-only.patch [bz#1069519]
  - kvm-qcow2-Zero-write-support.patch [bz#1130014]
  - Resolves: bz#1069519
    ([FJ6.5 Bug] A KVM guest hangs up for about 30 seconds after issuing SG_IO ioctl to a virtio-scsi device.)
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.470.el6
changelog:
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157644]
  - Resolves: bz#1157644
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.469.el6
changelog:
  - kvm-qcow2-Ignore-reserved-bits-in-L1-L2-entries.patch [bz#1129892]
  - kvm-qcow2-Factor-out-count_cow_clusters.patch [bz#1129892]
  - kvm-qcow2-Ignore-reserved-bits-in-count_contiguous_clust.patch [bz#1129892]
  - kvm-qcow2-Fail-write_compressed-when-overwriting-data.patch [bz#1129892]
  - kvm-qcow2-Refactor-qcow2_free_any_clusters.patch [bz#1129892]
  - kvm-qcow2-Simplify-count_cow_clusters.patch [bz#1129892]
  - kvm-qcow2-Ignore-reserved-bits-in-check_refcounts.patch [bz#1129892]
  - kvm-qcow2-cache-Empty-cache.patch [bz#1129892]
  - kvm-qcow2-Catch-bdrv_getlength-error.patch [bz#1129892]
  - kvm-block-Introduce-qemu_try_blockalign.patch [bz#1129892]
  - kvm-iotests-Add-test-for-image-header-overlap.patch [bz#1129892]
  - kvm-block-Catch-bs-drv-in-bdrv_check.patch [bz#1129892]
  - kvm-qapi-block-Add-fatal-to-BLOCK_IMAGE_CORRUPTED.patch [bz#1129892]
  - kvm-qcow2-Add-qcow2_signal_corruption.patch [bz#1129892]
  - kvm-qcow2-Use-qcow2_signal_corruption-for-overlaps.patch [bz#1129892]
  - kvm-qcow2-Check-L1-L2-reftable-entries-for-alignment.patch [bz#1129892]
  - kvm-iotests-Add-more-tests-for-qcow2-corruption.patch [bz#1129892]
  - kvm-qcow2-Do-not-overflow-when-writing-an-L1-sector.patch [bz#1129892]
  - kvm-iotests-Add-test-for-qcow2-L1-table-update.patch [bz#1129892]
  - kvm-block-Add-qemu_-try_-blockalign0.patch [bz#1129892]
  - kvm-qcow2-Calculate-refcount-block-entry-count.patch [bz#1129892]
  - kvm-qcow2-Split-qcow2_check_refcounts.patch [bz#1129892]
  - kvm-qcow2-Use-sizeof-refcount_table.patch [bz#1129892]
  - kvm-qcow2-Pull-check_refblocks-up.patch [bz#1129892]
  - kvm-qcow2-Use-int64_t-for-in-memory-reftable-size.patch [bz#1129892]
  - kvm-qcow2-Split-fail-code-in-L1-and-L2-checks.patch [bz#1129892]
  - kvm-qcow2-Let-inc_refcounts-return-errno.patch [bz#1129892]
  - kvm-qcow2-Let-inc_refcounts-resize-the-reftable.patch [bz#1129892]
  - kvm-qcow2-Reuse-refcount-table-in-calculate_refcounts.patch [bz#1129892]
  - kvm-qcow2-Fix-refcount-blocks-beyond-image-end.patch [bz#1129892]
  - kvm-qcow2-Do-not-perform-potentially-damaging-repairs.patch [bz#1129892]
  - kvm-qcow2-Rebuild-refcount-structure-during-check.patch [bz#1129892]
  - kvm-qcow2-Clean-up-after-refcount-rebuild.patch [bz#1129892]
  - kvm-iotests-Fix-test-outputs.patch [bz#1129892]
  - kvm-iotests-Add-test-for-potentially-damaging-repairs.patch [bz#1129892]
  - kvm-qcow2-Drop-REFCOUNT_SHIFT.patch [bz#1129892]
  - kvm-qcow2-Fix-header-extension-size-check.patch [bz#1129892]
  - kvm-qcow2.py-Add-required-padding-for-header-extensions.patch [bz#1129892]
  - kvm-block-Don-t-probe-for-unknown-backing-file-format.patch [bz#1129892]
  - kvm-block-remove-QED-.bdrv_make_empty-implementation.patch [bz#1130022]
  - kvm-qed-Disable-buggy-zero-write-support.patch [bz#1130022]
  - kvm-qemu-iotests-Disable-test-030-for-QED.patch [bz#1130022]
  - Resolves: bz#1129892
    (Backport additional qcow2 corruption prevention and image repair patches)
  - Resolves: bz#1130022
    (test case 020 030 034 and 041 of qemu-iotests fail for qed)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.468.el6
changelog:
  - kvm-Revert-virtio-blk-Check-return-value-of-blk_aio_ioct.patch [bz#1006871]
  - kvm-Revert-virtio-blk-Use-blk_aio_ioctl.patch [bz#1006871]
  - kvm-virtio-blk-remove-dead-variable-in-virtio_blk_handle.patch [bz#1006871]
  - kvm-virtio-blk-report-non-zero-status-when-failing-SG_IO.patch [bz#1006871]
  - kvm-virtio-blk-fix-use-after-free-while-handling-scsi-co.patch [bz#1006871]
  - kvm-virtio-blk-Use-blk_aio_ioctl-v2.patch [bz#1006871]
  - kvm-virtio-blk-Check-return-value-of-blk_aio_ioctl-v2.patch [bz#1006871]
  - Resolves: bz#1006871
    ([FJ6.4 Bug] SG_IO ioctl issued to a virtio block device not return)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.467.el6
changelog:
  - kvm-virtio-blk-Use-blk_aio_ioctl.patch [bz#1006871]
  - kvm-virtio-blk-Check-return-value-of-blk_aio_ioctl.patch [bz#1006871]
  - kvm-configure-Fix-usb_redir-probing.patch [bz#1208605]
  - kvm-configure-cull-BRLAPI-options.patch [bz#1208605]
  - kvm-configure-properly-check-if-lrt-and-lm-is-needed.patch [bz#1208605]
  - kvm-configure-duplicate-incorrect-order-of-lrt.patch [bz#1208605]
  - kvm-curl-Fix-local-build-issue.patch [bz#1208605]
  - kvm-block-migration-Flush-requests-in-blk_mig_cleanup.patch [bz#916067]
  - kvm-slim-down-qdev-core.h.patch [bz#1141594]
  - kvm-qdev-add-qbus_reset_all.patch [bz#1141594]
  - kvm-virtio-scsi-abort-in-flight-I-O-when-the-device-is-r.patch [bz#1141594]
  - Resolves: bz#1006871
    ([FJ6.4 Bug] SG_IO ioctl issued to a virtio block device not return)
  - Resolves: bz#1141594
    (qemu-kvm core dumped when win7 guest doing system_reset more than 20 times)
  - Resolves: bz#1208605
    (support local builds of qemu-kvm on Fedora systems)
  - Resolves: bz#916067
    (when cancel the migration with ctrl+c during block migration(full disk copy or incremental disk copy), then migration again will cause domain destroyed)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.466.el6
changelog:
  - kvm-block-Fix-query-block-after-disabling-throttling.patch [bz#1211545]
  - Resolves: bz#1211545
    (query-block doesn't reflect the correct value after live throttling)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.465.el6
changelog:
  - kvm-block-Add-Error-parameter-to-bdrv_find_protocol.patch [bz#1202666]
  - kvm-net-add-netdev-options-to-man-page.patch [bz#1110634]
  - kvm-hw-qxl-fix-condition-for-exiting-guest_bug.patch [bz#1200019]
  - kvm-block-update-test-084.out-to-match-error-output-repo.patch [bz#1130046]
  - kvm-iotests-Remove-006.patch [bz#1130015]
  - kvm-iotests-Drop-vpc-from-004-s-and-104-s-format-list.patch [bz#1130015]
  - kvm-block-update-test-088.out-to-match-error-output-repo.patch [bz#1130015]
  - Resolves: bz#1110634
    (Should update manpage of qemu-kvm in the "Network options:" part)
  - Resolves: bz#1130015
    (test case 004 006 and 088 of qemu-iotests fail for vpc)
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)
  - Resolves: bz#1200019
    (Coverity-detected defect: constant expression result)
  - Resolves: bz#1202666
    (improve the error hint when show rbd storage info via qemu-img)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.464.el6
changelog:
  - kvm-cirrus-fix-blit-region-check.patch [bz#1169455]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169455]
  - Resolves: bz#1169455
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blt region checks [rhel-6.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.463.el6
changelog:
  - kvm-Revert-spec-Enable-rbd-driver-add-dependency.patch []
  - kvm-Revert-configure-Fix-bad-import-from-upstream.patch []
  - kvm-Revert-Revert-rbd-link-and-load-librbd-dynamically.patch []
  - kvm-Revert-Revert-rbd-Only-look-for-qemu-specific-copy-o.patch []
  - kvm-Revert-Revert-Build-rbd-block-driver-only-for-qemu-k.patch []
  - Reverts: 1154876
    (Enable native qemu support for Ceph)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.462.el6
changelog:
  - Use  syntax to avoid errors with undefined variable [bz#1170757]
  - Resolves: bz#1170757
    (RHEL6 as a guest on IBM's Power/KVM - guest agent)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.461.el6
changelog:
  - kvm-posix-aio-merge-posix_aio_process_queue-and-posix_ai.patch [bz#1005016]
  - kvm-aio-remove-process_queue-callback-and-qemu_aio_proce.patch [bz#1005016]
  - kvm-aio-return-AIO-in-progress-state-from-qemu_aio_wait.patch [bz#1005016]
  - kvm-aio-simplify-qemu_aio_wait.patch [bz#1005016]
  - kvm-aio-Fix-qemu_aio_wait-to-maintain-correct-walking_v2.patch [bz#1005016]
  - kvm-aio-Another-fix-to-the-walking_handlers-logic_v2.patch [bz#1005016]
  - kvm-aio-introduce-AioContext-move-bottom-halves-there.patch [bz#1005016]
  - kvm-aio-add-I-O-handlers-to-the-AioContext-interface.patch [bz#1005016]
  - kvm-aio-test-node-deleted-before-calling-io_flush.patch [bz#1005016]
  - kvm-aio-add-non-blocking-variant-of-aio_wait.patch [bz#1005016]
  - kvm-aio-prepare-for-introducing-GSource-based-dispatch.patch [bz#1005016]
  - kvm-aio-add-Win32-implementation.patch [bz#1005016]
  - kvm-aio-make-AioContexts-GSources.patch [bz#1005016]
  - kvm-main-loop-use-msec-based-timeout-in-glib_select_fill.patch [bz#1005016]
  - kvm-main-loop-switch-to-g_poll-on-POSIX-hosts.patch [bz#1005016]
  - kvm-main-loop-switch-POSIX-glib-integration-to-GPollFD.patch [bz#1005016]
  - kvm-slirp-slirp-slirp.c-coding-style-cleanup.patch [bz#1005016]
  - kvm-slirp-switch-to-GPollFD.patch [bz#1005016]
  - kvm-slirp-Properly-initialize-pollfds_idx-of-new-sockets.patch [bz#1005016]
  - kvm-iohandler-switch-to-GPollFD.patch [bz#1005016]
  - kvm-main-loop-drop-rfds-wfds-xfds-for-good.patch [bz#1005016]
  - kvm-aio-extract-aio_dispatch-from-aio_poll.patch [bz#1005016]
  - kvm-aio-convert-aio_poll-to-g_poll-3.patch [bz#1005016]
  - kvm-aio-Fix-return-value-of-aio_poll.patch [bz#1005016]
  - kvm-aio-fix-aio_ctx_prepare-with-idle-bottom-halves.patch [bz#1005016]
  - Commit id: 078c7d29e94c6c6ed7f089270a33df7fff2a30a4 [bz#1170757]
  - Commit id: f99da979a46bc957b7bdb5edb8d0e22ef0d2df9b [bz#1170757]
  - Commit id: 95e56aae9369684d97310a2192fca67939caf2e9 [bz#1170757]
  - Commit id: 8100b3a63c93ec21fd2b9e2108763f9a3f052ca8 [bz#1170757]
  - Commit id: 0fe3847ff1841b8200959f75e233f683f561d38b [bz#1170757]
  - kvm-rng-initialize-file-descriptor-to-1.patch [bz#1119575]
  - kvm-qom-fix-leak-for-objects-created-with-object.patch [bz#1119575]
  - kvm-virtio-rng-unreference-rng-backend-in-pci-exit-only-.patch [bz#1119575]
  - Resolves: bz#1005016
    (Qemu w/ macvtap backend virtual network hangs when the fd is over 1024)
  - Resolves: bz#1119575
    ([virtio-win][rng] Core dump occurs after busy virtio-rng-pci is deleted from windows guest)
  - Resolves: bz#1170757
    (RHEL6 as a guest on IBM's Power/KVM - guest agent)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.460.el6
changelog:
  - Commit id 9e50814b1ea77527b8e4125467071b7e7c519849 [bz#1128594]
  - Commit id 319181316d540e0a328de6268fbc51d3a454f953 [bz#1061502]
  - Commit id e89c0d0cdd5f2a50ab72b9ed915cf938193ca0a7 [bz#1204858]
  - Resolves: bz#1128594
    (wrong executable authority for qemu-iotests test for the RHEL 6 internal repository)
  - Resolves: bz#1061502
    (Remove support for qemu-kvm-test.patch from qemu-kvm SRPM)
  - Resolves: bz#1204858
    ("null" block driver is not whitelisted for running guests)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.459.el6
changelog:
  - kvm-vga-raise-xres-yres-limits.patch [bz#1053039]
  - kvm-vga-make-vram-size-configurable.patch [bz#1053039]
  - kvm-qxl-add-vgamem_size_mb-and-vgamem_size.patch [bz#1053039]
  - kvm-qxl-add-4k-8k-resolutions.patch [bz#1053039]
  - kvm-hw-display-qxl-fix-signed-to-unsigned-comparison.patch [bz#1053039]
  - kvm-qxl-add-2000x2000-and-2048x2048-video-modes.patch [bz#1053039]
  - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1053039]
  - kvm-vbe-rework-sanity-checks.patch [bz#1053039]
  - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1053039]
  - Resolves: bz#1053039
    ([SPICE] Add 2048x2048, 4096x2160 and 3840x2160 resolutions to QXL driver)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.458.el6
changelog:
  - kvm-hmp-info-spice-Show-string-channel-name.patch [bz#822418]
  - kvm-fix-bz-1196970.patch [bz#1196970]
  - Resolves: bz#1196970
    (Migrate status is failed after migrate_cancel.)
  - Resolves: bz#822418
    (RFE: print channel name in addition to code in 'info spice')


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.457.el6
changelog:
  - kvm-qemu-img-Tighten-parsing-of-size-arguments.patch []
  - kvm-cutils-change-strtosz_suffix_unit-function.patch []
  - kvm-qemu-img-report-size-overflow-error-message.patch []
  - kvm-qemu-img-decrease-progress-update-interval-on-conver.patch []
  - kvm-qemu-img-Plug-memory-leak-in-convert-command.patch []
  - kvm-qemu-option-has_help_option-and-is_valid_option_list.patch []
  - kvm-qemu-img-create-Support-multiple-o-options.patch []
  - kvm-qemu-img-convert-Support-multiple-o-options.patch []
  - kvm-qemu-img-Allow-o-help-with-incomplete-argument-list.patch []
  - kvm-qemu-img-convert-Fix-progress-output.patch []
  - kvm-block-add-null-protocol-for-performance-tests.patch [bz#1193917]
  - Resolves: bz#1193917
    (Include null block driver)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.456.el6
changelog:
  - kvm-qemu-img-add-support-for-skipping-zeroes-in-input-du.patch [bz#1006681]
  - Resolves: bz#1006681
    (qemu-img convert -p option display error)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.455.el6
changelog:
  - kvm-implement-vnc_dpy_setdata.patch [bz#1161084]
  - kvm-spice-call-qemu_spice_set_passwd-during-init.patch [bz#1138647]
  - kvm-Revert-Build-rbd-block-driver-only-for-qemu-kvm-rhev.patch [bz#1154876]
  - kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1154876]
  - kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1154876]
  - kvm-configure-Fix-bad-import-from-upstream.patch [bz#1154876]
  - Resolves: bz#1138647
    (fail to login spice session with password + expire time)
  - Resolves: bz#1154876
    (Enable native qemu support for Ceph)
  - Resolves: bz#1161084
    (Black screen after X started in qemu-kvm with -vga std parameter under RHEL6.6)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.454.el6
changelog:
  - kvm-PCI-Bus-number-from-the-bridge-not-the-device.patch [bz#1010828]
  - kvm-spice-set-spice-uuid-and-name.patch [bz#1129780]
  - kvm-qxl-keep-going-if-reaching-guest-bug-on-empty-area.patch [bz#1151363]
  - kvm-spice-auth-fixes.patch [bz#1115237]
  - Resolves: bz#1010828
    (The addr was wrong in qtree info when assign VFs with multifunction=on and specified the addr (QLogic card))
  - Resolves: bz#1115237
    (spice connection break while set_password with sasl enabled)
  - Resolves: bz#1129780
    (Send vm name and uuid via spice)
  - Resolves: bz#1151363
    (User interface freezes when entering space character in Xfig)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.453.el6
changelog:
  - kvm-main-loop-Assert-that-fd-doesn-t-exceed-FD_SETSIZE.patch [bz#1024684]
  - kvm-block-add-cache-directsync-parameter-to-drive.patch [bz#1186914]
  - kvm-mc146818rtc-add-rtc-reset-reinjection-QMP-command.patch [bz#1190248]
  - kvm-qemu-tool-add-qemu_timer_pending-stub-function.patch [bz#1132848]
  - kvm-throttle-Add-a-new-throttling-API-implementing-conti.patch [bz#1132848]
  - kvm-block-Repair-the-throttling-code.patch [bz#1132848]
  - kvm-block-Enable-the-new-throttling-code-in-the-block-la.patch [bz#1132848]
  - kvm-qemu-options.hx-conditionally-remove-bps-and-iops-op.patch [bz#1134230]
  - Resolves: bz#1024684
    (Report error if there are too many open file descriptors)
  - Resolves: bz#1132848
    (IO throttling will ignore the limited of iops if from set iops=10 back to the previous value)
  - Resolves: bz#1134230
    (qemu-kvm's help output shows bps= is supported, even though it's not)
  - Resolves: bz#1186914
    (RHEL6 qemu-kvm: backport cache=directsync)
  - Resolves: bz#1190248
    (qemu-kvm: backport rtc-reset-reinjection command)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.452.el6
changelog:
  - kvm-Revert-Documentation-Mention-qcow2-full-preallocatio.patch [bz#1040220]
  - kvm-Revert-qcow2-Add-full-image-preallocation-option.patch [bz#1040220]
  - kvm-rename-parse_enum_option-to-qapi_enum_parse-and-make.patch [bz#1040220]
  - kvm-qapi-introduce-PreallocMode-and-new-PreallocModes-fu.patch [bz#1040220]
  - kvm-raw-posix-Add-falloc-and-full-preallocation-option.patch [bz#1040220]
  - kvm-qcow2-Add-falloc-and-full-preallocation-option.patch [bz#1040220]
  - kvm-block-raw-posix-Fix-preallocating-write-loop.patch [bz#1040220]
  - kvm-block-raw-posix-Only-sync-after-successful-prealloca.patch [bz#1040220]
  - kvm-block-raw-posix-Catch-fsync-errors.patch [bz#1040220]
  - kvm-ide-Check-validity-of-logical-block-size.patch [bz#1134693]
  - (no patch file - commit af477bddc913d0e7c51bf6626445fac02f52ef2b) [bz#1061502]
  - Resolves: bz#1040220
    ([Fujitsu 6.7 FEAT] qemu-img should use fallocate() system call for "preallocation=full" option)
  - Resolves: bz#1134693
    (fail to specify the physical_block_size/logical_block_size value not 512 for IDE disk)
  - Resolves: bz#1061502
    (Remove support for qemu-kvm-test.patch from qemu-kvm SRPM)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.451.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni-v2.patch [bz#970103]
  - kvm-virtio-net-drop-assert-on-vm-stop.patch [bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage-v2.patch [bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t-v2.patch [bz#970103]
  - kvm-migration-Only-call-memmove-when-there-is-anything-t.patch [bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct-v2.patch [bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage-v2.patch [bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-v2.patch [bz#970103]
  - kvm-buffered_flush-return-errors.patch [bz#970103]
  - kvm-bandwidth_limit-standarize-in-size_t.patch [bz#970103]
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.450.el6
changelog:
  - kvm-qom-Fix-class-cast-of-NULL-classes.patch [bz#1102730]
  - Resolves: bz#1102730
    (Unnecessary or missing NULL checks in object_class_dynamic_cast_assert)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.449.el6
changelog:
  - kvm-ide-Add-wwn-support-to-IDE-ATAPI-drive.patch [bz#1130475]
  - kvm-trace-add-qemu_system_powerdown_request-and-qemu_sys.patch [bz#1149120]
  - kvm-slirp-udp-fix-NULL-pointer-dereference-because-of-un.patch [bz#1144819]
  - kvm-scsi-disk-Improve-error-messager-if-can-t-get-versio.patch [bz#1021785]
  - kvm-scsi-Improve-error-messages-more.patch [bz#1021785]
  - kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163077]
  - Resolves: bz#1021785
    (the error message "scsi generic interface too old" is wrong more often than not)
  - Resolves: bz#1130475
    (fail to specify wwn for virtual IDE CD-ROM)
  - Resolves: bz#1144819
    (CVE-2014-3640 qemu-kvm: qemu: slirp: NULL pointer deref in sosendto() [rhel-6.7])
  - Resolves: bz#1149120
    ([Fujitsu 6.7 FEAT]: QEMU: Add tracepoints in system shutdown)
  - Resolves: bz#1163077
    (CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.441.el6
changelog:
  - kvm-block-Improve-bdrv_aio_co_cancel_em.patch [bz#1018537]
  - kvm-usb-Avoid-reentrancy-of-ehci_advance_async_state-dow.patch [bz#1018537]
  - kvm-scripts-add-sample-model-file-for-Coverity-Scan.patch [bz#1102409]
  - Resolves: bz#1018537
    (qemu core dump after run read/randwr fio in guest with usb or scsi disk)
  - Resolves: bz#1102409
    (Unable to handle NULL pointer dereference in qcow2_check_refcounts)


author: Jeff E. Nelson <> - 0.12.1.2-2.440.el6
changelog:
  - kvm-hw-qdev-emit-DEVICE_DELETED-event-only-if-the-device.patch [bz#1124314]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1120541]
  - Resolves: bz#1120541
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1124314
    (incorrect event reported by QMP on hot plugging an in-use VF to guest)


author: Jeff E. Nelson <> - 0.12.1.2-2.439.el6
changelog:
  - kvm-spice-fix-libvirt-snapshots.patch [bz#1010670]
  - kvm-ide-Ignore-double-DMA-transfer-starts-stops.patch [bz#1104573]
  - kvm-ide-Reset-current_addr-after-stopping-DMA.patch [bz#1104573]
  - kvm-ide-Reset-BMIDEA-bit-when-the-bus-master-is-stopped.patch [bz#1104573]
  - Resolves: bz#1010670
    (spice session is closed when taking snapshot with ram)
  - Resolves: bz#1104573
    (DMA error when install RHEL.5.11.x86_64 guest (ide drive) on RHEL6.5.z host)


author: Jeff E. Nelson <> - 0.12.1.2-2.438.el6
changelog:
  - kvm-hda-audio-fix-non-mixer-codecs.patch [bz#1080546]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#995931]
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#995931]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#995931]
  - Resolves: bz#1080546
    (pulse sound no longer works after changing KVM win 7 guest SID in RHEL 6.5)
  - Resolves: bz#995931
    (Qemu core dump (red_get_image: unknown type 184) when reboot a RHEL.6.4-64 guest 25 times)


author: Jeff E. Nelson <> - 0.12.1.2-2.437.el6
changelog:
  - kvm-vmschk-check-rhel6.py-quickly-compare-RHEL6-jsons-ba.patch [bz#1125792]
  - kvm-tests-add-rhel6.0-to-rhel6.6-vmstate-json-files.patch [bz#1125792]
  - kvm-scsi-Ensure-command-and-transfer-lengths-are-set-for.patch [bz#1113068]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#1122885]
  - Resolves: bz#1113068
    (Qemu crashes when some commands are passed from guest to host tape device.)
  - Resolves: bz#1122885
    (qemu-img man doc should tell "should report progress bar when receives "SIGUSR1" signal if -p option is not used")
  - Resolves: bz#1125792
    (Add vmstate json representation files for RHEL6 releases to source tree)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.436.el6
changelog:
  - kvm-qcow2-Reject-too-large-header-extensions.patch [bz#1124443]
  - kvm-block-Fix-is_allocated_above-with-resized-files.patch [bz#1122992]
  - kvm-block-mirror-Use-bdrv_is_allocated_above.patch [bz#1122992]
  - kvm-qemu-io-New-command-map.patch [bz#1122410]
  - kvm-qemu-io-Implement-write-c-for-compressed-clusters.patch [bz#1122410]
  - kvm-qemu-img-Add-compare-subcommand.patch [bz#1122410]
  - kvm-qemu-img-Fix-overwriting-ret-before-using.patch [bz#1122410]
  - kvm-QMP-add-get_events-wait-True-option.patch [bz#1122410]
  - kvm-qmp-Check-for-returned-data-from-__json_read-in-get_.patch [bz#1122410]
  - kvm-QMP-add-server-mode-to-QEMUMonitorProtocol.patch [bz#1122410]
  - kvm-qemu-iotests-Import-from-upstream.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-tests-that-require-sample-image.patch [bz#1122410]
  - kvm-block-parse-cache-mode-flags-in-a-single-place.patch [bz#1122410]
  - kvm-qemu-io-Add-command-line-switch-for-cache-mode.patch [bz#1122410]
  - kvm-qemu-io-correctly-print-non-integer-values-as-decima.patch [bz#1122410]
  - kvm-qemu-iotests-Modify-scripts-to-run-with-qemu-kvm-rhe.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-cases-requiring-not-backported-.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-028.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-029.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-030.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-060.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-031.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-040.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-041.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-049.patch [bz#1122410]
  - kvm-qemu-iotests.-Backport-067.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-080.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-086.patch [bz#1122410]
  - kvm-qemu-iotests-Trivial-test-case-backports.patch [bz#1122410]
  - kvm-virtio-rng-Add-human-readable-error-message-for-nega.patch [bz#1119207]
  - kvm-virtio-rng-Move-error-checking-forward-to-prevent-me.patch [bz#1119207]
  - Resolves: bz#1119207
    ([rng]qemu-kvm process still can start when specify negative value for max-bytes)
  - Resolves: bz#1122410
    (backport qemu-iotests to the RHEL 6 internal repository)
  - Resolves: bz#1122992
    (Full mirroring with smaller backing file causes qemu to hang)
  - Resolves: bz#1124443
    (qcow2 doesn't catch invalid header extension sizes)


author: Jeff E. Nelson <> - 0.12.1.2-2.435.el6
changelog:
  - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118718]
  - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118718]
  - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118718]
  - Resolves: bz#1118718
    (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.434.el6
changelog:
  - kvm-block-gluster-code-movements-state-storage-changes.txt [bz#1118543]
  - kvm-block-gluster-add-reopen-support.txt [bz#1118543]
  - Resolves: bz#1118543
    (Can not continue live commiting when using glusterfs(native) backend after relaunch qemu)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.433.el6
changelog:
  - kvm-qxl-dont-update-invalid-area.txt [bz#994388]
  - kvm-qxl-update_area_io-cleanup-invalid-parameters-handling.txt [bz#994388]
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.txt [bz#845667]
  - kvm-migrate-vPMU-state.txt [bz#845667]
  - kvm-vPMU-do-not-migrate-for-M-rhel6.5.0-or-older.txt [bz#845667]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.txt [bz#1123698]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.txt [bz#1113917]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.txt [bz#1113917]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.txt [bz#1113917]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.txt [bz#1113917]
  - kvm-virtio-scsi-implement-parse_cdb.txt [bz#1113917]
  - Resolves: bz#1113917
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)
  - Resolves: bz#1123698
    (qemu-kvm core dump when hot-plug a virtio-scsi disk to guest and reboot)
  - Resolves: bz#845667
    (Virtual PMU support during live migration)
  - Resolves: bz#994388
    (SpiceWorker-CRITICAL **: red_worker.c:4894:red_update_area: condition `area->left >= 0 && area->top >= 0 && area->left < area->right && area->top < area->bottom' failed)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.432.el6
changelog:
  - kvm-vmdk-refuse-enabling-zeroed-grain-with-flat-images.txt [bz#1088788]
  - kvm-vmdk-Only-read-cid-from-image-file-when-opening.txt [bz#1088788]
  - kvm-vmdk-Fix-creating-big-description-file.txt [bz#1088788]
  - kvm-vmdk-Check-VMFS-extent-line-field-number.txt [bz#1088788]
  - kvm-vmdk-Fix-big-flat-extent-IO.txt [bz#1088788]
  - kvm-scsi-disk-rd-wr-vr-protect-0-is-an-error.txt [bz#1064643]
  - kvm-scsi-disk-improve-the-lba-out-of-range-tests-for-read-.txt [bz#1064643]
  - kvm-scsi-disk-Fail-medium-writes-with-proper-sense-for-rea.txt [bz#1064643]
  - kvm-scsi-disk-improve-out-of-range-LBA-detection-for-WRITE.txt [bz#1064643]
  - kvm-scsi-disk-introduce-check_lba_range.txt [bz#1064643]
  - kvm-scsi-disk-fix-check-for-out-of-range-LBA.txt [bz#1064643]
  - kvm-virtio-blk-Fix-commit-f0f6bce-fail-unaligned-requests.txt [bz#1064643]
  - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_hand.txt [bz#1064643]
  - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on-i.txt [bz#1064643]
  - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-ide-Treat-read-write-beyond-end-as-invalid.txt [bz#1064643]
  - kvm-scsi-Report-error-when-lun-number-is-in-use.txt [bz#1095609]
  - Resolves: bz#1064643
    (qemu makes no distinction between external and guest triggered block I/O errors)
  - Resolves: bz#1088788
    (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat)
  - Resolves: bz#1095609
    (qemu-kvm should give some hint when hot-plug a devices with the same existing "scsi-id  and lun")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.431.el6
changelog:
  - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1102659]
  - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1102659]
  - kvm-dump-simplify-write_start_flat_header.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1102659]
  - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1102659]
  - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1102659]
  - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1102659]
  - kvm-dump-simplify-get_len_buf_out.patch [bz#1102659]
  - kvm-virtio-rng-check-return-value-of-virtio_load-RHEL-6-.patch [bz#1102668]
  - kvm-block-add-ROUND_UP-into-osdep.h.patch [bz#1063559]
  - kvm-block-vhdx-add-migration-blocker.patch [bz#1063559]
  - kvm-block-vhdx-minor-comments-and-typo-correction.patch [bz#1063559]
  - kvm-block-vhdx-add-header-update-capability.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-VHDXMetadataEntries-and-BDR.patch [bz#1063559]
  - kvm-block-vhdx-log-support-struct-and-defines.patch [bz#1063559]
  - kvm-block-vhdx-break-endian-translation-functions-out.patch [bz#1063559]
  - kvm-block-vhdx-update-log-guid-in-header-and-first-write.patch [bz#1063559]
  - kvm-block-vhdx-code-movement-move-vhdx_close-above-vhdx_.patch [bz#1063559]
  - kvm-block-vhdx-log-parsing-replay-and-flush-support.patch [bz#1063559]
  - kvm-block-vhdx-add-region-overlap-detection-for-image-fi.patch [bz#1063559]
  - kvm-block-vhdx-add-log-write-support.patch [bz#1063559]
  - kvm-block-vhdx-write-support.patch [bz#1063559]
  - kvm-block-vhdx-remove-BAT-file-offset-bit-shifting.patch [bz#1063559]
  - kvm-block-vhdx-move-more-endian-translations-to-vhdx-end.patch [bz#1063559]
  - kvm-block-vhdx-break-out-code-operations-to-functions.patch [bz#1063559]
  - kvm-block-vhdx-fix-comment-typos-in-header-fix-incorrect.patch [bz#1063559]
  - kvm-block-vhdx-add-.bdrv_create-support.patch [bz#1063559]
  - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1063559]
  - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1063559]
  - kvm-vpc-vhdx-add-get_info.patch [bz#1063559]
  - kvm-block-vhdx-improve-error-message-and-.bdrv_check-imp.patch [bz#1063559]
  - kvm-block-vhdx-Error-checking-fixes.patch [bz#1063559]
  - kvm-spec-explicitly-enable-vhdx-in-build.patch [bz#1063559]
  - kvm-Fix-multiboot-compilation.patch [bz#820641]
  - kvm-docs-update-qemu-img-man-page-to-reflect-vhdx-image-.patch [bz#1017649]
  - kvm-tracetool-add-tracetool-simpletrace_stap-format.patch [bz#905761]
  - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#905761]
  - kvm-trace-install-trace-events.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-script.patch [bz#905761]
  - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#905761]
  - kvm-simpletrace-install-simpletrace.py.patch [bz#905761]
  - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#905761]
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1092117]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1092117]
  - Resolves: bz#1017649
    (need to update qmeu-img man help docs page about "VHDX" format disk)
  - Resolves: bz#1063559
    (VHDX: journal log should not be replayed by default, but rather via qemu-img check -r all)
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1102659
    (Use-after-free of file descriptor in create_kdump_vmcore)
  - Resolves: bz#1102668
    (Return value of virtio_load not checked in virtio_rng_load)
  - Resolves: bz#820641
    (Unable to run kvm unit tests with -append option)
  - Resolves: bz#905761
    ([Fujitsu 6.6 FEAT]: QEMU: enable easy introspection of the list of trace events and their arguments)


author: Jeff E. Nelson <> - 0.12.1.2-2.430.el6
changelog:
  - kvm-qxl-render-add-sanity-check.txt [bz#1095612]
  - kvm-qxl-always-update-displaysurface-on-resize.txt [bz#1112078]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)
  - Resolves: bz#1112078
    (RHEL7 guest desktop hang when boot with qxl and vnc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.429.el6
changelog:
  - kvm-hw-qxl-support-client-monitor-configuration-via-devi.patch [bz#1075139]
  - kvm-usb-move-usb_-hi-lo-helpers-to-header-file.patch [bz#949547]
  - kvm-usb-add-vendor-request-defines.patch [bz#949547]
  - kvm-Add-rhel6.6.0-machine-type.patch [bz#949547]
  - kvm-add-msos-desc-compat-prop.patch [bz#949547]
  - kvm-usb-add-support-for-microsoft-os-descriptors.patch [bz#949547]
  - kvm-usb-hid-add-microsoft-os-descriptor-support.patch [bz#949547]
  - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097021]
  - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#998426]
  - kvm-qcow-Return-real-error-code-in-qcow_open.patch [bz#1097228]
  - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097228]
  - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097228]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097228]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097235]
  - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097235]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1106420]
  - kvm-Fix-pkgversion-value.patch [bz#1074396]
  - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990254]
  - kvm-block-fix-signed-int-overflow-in-qcow2_co_get_block_.patch [bz#1101430]
  - kvm-qemu-img-add-special-exit-code-if-bdrv_check-is-not-.patch [bz#1054753]
  - kvm-qemu-img-Report-error-even-with-oformat-json.patch [bz#1054753]
  - kvm-qemu-img-Document-check-exit-codes.patch [bz#1054753]
  - kvm-blockdev-preserve-readonly-and-snapshot-states-acros.patch [bz#1105428]
  - kvm-target-i386-Broadwell-CPU-model.patch [bz#1100380]
  - kvm-target-i386-support-invariant-tsc-flag.patch [bz#996771]
  - kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#996771]
  - Resolves: bz#1054753
    (qemu-img doesn't print error in json for raw images)
  - Resolves: bz#1074396
    (QMP: "query-version" doesn't include the -rhev prefix from the qemu-kvm-rhev package)
  - Resolves: bz#1075139
    (multi-monitor doesn't work with a RHEL 7 guest.)
  - Resolves: bz#1097021
    ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images)
  - Resolves: bz#1097228
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.6])
  - Resolves: bz#1097235
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.6])
  - Resolves: bz#1100380
    ([Intel 6.6 FEAT] Broadwell new instructions support for KVM - qemu-kvm)
  - Resolves: bz#1101430
    (qemu-kvm get "Unknown error 1539571707" when execute block-stream)
  - Resolves: bz#1105428
    (readonly=on has no effect for drive with no media)
  - Resolves: bz#1106420
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#949547
    (qemu-kvm process consumes 8% cpu even when windows guest is idle inside and 70% when guest uses 10% cpu inside)
  - Resolves: bz#990254
    (qemu-kvm failing when invalid machine type is provided)
  - Resolves: bz#996771
    (nonstop_tsc cpu flag support for KVM guests - QEMU support)
  - Resolves: bz#998426
    (there are four "gluster" in qemu-img supported format list)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.428.el6
changelog:
  - kvm-qcow2-preserve-free_byte_offset-when-qcow2_alloc_byt.patch [bz#1101701]
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1092117]
  - kvm-PCI-Convert-pci_info-to-QObject.patch [bz#813748]
  - kvm-PCI-do_pci_info-PCI-bridge-devices-support.patch [bz#813748]
  - kvm-PCI-show-also-host-bridge-data-in-info-pci-output.patch [bz#813748]
  - kvm-pci-fix-info-pci-with-host-bridge.patch [bz#813748]
  - kvm-qapi-Convert-query-pci.patch [bz#813748]
  - kvm-qdev-DEVICE_DELETED-event.patch [bz#813748]
  - kvm-hmp-Fix-freeing-of-PciInfoList.patch [bz#813748]
  - Resolves: bz#1092117
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1101701
    (comparison always false at qcow2_refcount.c:613)
  - Resolves: bz#813748
    ([RFE] Report whether hot unplug completed)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.427.el6
changelog:
  - kvm-Introduce-range.h.patch [bz#1004420]
  - kvm-qcow2-fix-typo-in-documentation-for-qcow2_get_cluste.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-get_cluster_offset.patch [bz#1004420]
  - kvm-qcow2-Ignore-reserved-bits-in-refcount-table-entries.patch [bz#1004420]
  - kvm-qcow2-handle_alloc-Get-rid-of-keep_clusters-paramete.patch [bz#1004420]
  - kvm-qcow2-Finalise-interface-of-handle_alloc.patch [bz#1004420]
  - kvm-qcow2-Metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-Employ-metadata-overlap-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Move-OFLAG_COPIED-checks.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-OFLAG_COPIED-errors.patch [bz#1004420]
  - kvm-qcow2-refcount-Repair-shared-refcount-blocks.patch [bz#1004420]
  - kvm-qmp-Documentation-for-BLOCK_IMAGE_CORRUPTED.patch [bz#1004420]
  - kvm-qcow2-Correct-snapshots-size-for-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Correct-endianness-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Switch-L1-table-in-a-single-sequence.patch [bz#1004420]
  - kvm-qcow2-Use-pread-for-inactive-L1-in-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Remove-wrong-metadata-overlap-check.patch [bz#1004420]
  - kvm-qcow2-Use-negated-overflow-check-mask.patch [bz#1004420]
  - kvm-qcow2-Make-overlap-check-mask-variable.patch [bz#1004420]
  - kvm-qcow2-Add-more-overlap-check-bitmask-macros.patch [bz#1004420]
  - kvm-qcow2-fix-wrong-value-of-L1E_OFFSET_MASK-L2E_OFFSET_.patch [bz#1004420]
  - kvm-qcow2-refcount-Sanitize-refcount-table-entry.patch [bz#1004420]
  - kvm-qcow2-Correct-comment-for-realloc_refcount_block.patch [bz#1004420]
  - kvm-qcow2-Fix-fail-path-in-realloc_refcount_block.patch [bz#1004420]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1099599]
  - kvm-device-assignment-don-t-update-msix-if-vector-s-unch.patch [bz#1096984]
  - Resolves: bz#1004420
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1096984
    ([Intel 6.6 Bug] 2x RHEL 5.10 VM running on RHEL 6.5 KVM have low TCP_STREAM throughput)
  - Resolves: bz#1099599
    (Some vCPU topologies not accepted by libvirt)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.426.el6
changelog:
  - kvm-Python-lang-gdb-script-to-extract-x86_64-guest-vmcor.patch [bz#826266]
  - kvm-dump-guest-memory.py-port-guest_phys_blocks_append-t.patch [bz#826266]
  - kvm-dump-guest-memory.py-ram_blocks-is-a-QLIST-not-a-QTA.patch [bz#826266]
  - kvm-dump-guest-memory.py-convert-PhysPageDesc.phys_offse.patch [bz#826266]
  - kvm-dump-guest-memory.py-hoist-gdb-round-trip-from-inner.patch [bz#826266]
  - kvm-dump-guest-memory.py-trim-logs-in-memory-listener-ca.patch [bz#826266]
  - kvm-RPM-spec-install-dump-guest-memory.py-RHEL-only.patch [bz#826266]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1081451]
  - kvm-spice-fix-info-spice.patch [bz#1029983]
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1096089]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1096117]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_02.patch [bz#1096117]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1096097]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1096093]
  - kvm-posix-aio-compat-fix-latency-issues.patch [bz#1097031]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1096093 bz#1096124]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1066430]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095780]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096826]
  - Resolves: bz#1029983
    (spice-server reports incorrect listening address on monitor with "ipv6" option)
  - Resolves: bz#1066430
    (CVE-2013-4148 qemu: virtio-net: buffer overflow on invalid state load [rhel-6.6])
  - Resolves: bz#1081451
    (qemu-kvm-rhev does not support Non Zero PCI domain for SRIOV Virtual Functions)
  - Resolves: bz#1095780
    (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-6.6])
  - Resolves: bz#1096089
    (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-6.6])
  - Resolves: bz#1096093
    (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-6.6])
  - Resolves: bz#1096097
    (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-6.6])
  - Resolves: bz#1096117
    (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-6.6])
  - Resolves: bz#1096124
    (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-6.6])
  - Resolves: bz#1096826
    (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-6.6])
  - Resolves: bz#1097031
    (Improve posix-aio-compat latency by backporting upstream fix)
  - Resolves: bz#826266
    ([Hitachi 6.6 FEAT] Extract guest memory dump from qemu-kvm core)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.425.el6
changelog:
  - kvm-blkdebug-pass-getlength-to-underlying-file.patch [bz#1023874 bz#1031883]
  - kvm-qapi-generate-list-struct-and-visit_list-for-enum.patch [bz#1035162]
  - kvm-qapi-Fix-potential-NULL-pointer-segfault.patch [bz#1035162]
  - kvm-dump-change-cpu_get_note_size-to-return-ssize_t.patch [bz#1035162]
  - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1035162]
  - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1035162]
  - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1035162]
  - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1035162]
  - kvm-dump-add-API-to-write-vmcore.patch [bz#1035162]
  - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1035162]
  - kvm-dump-add-support-for-lzo-snappy.patch [bz#1035162]
  - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1035162]
  - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-header.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1035162]
  - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1035162]
  - kvm-dump-add-API-to-write-dump-pages.patch [bz#1035162]
  - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1035162]
  - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1035162]
  - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1035162]
  - kvm-x86-fix-migration-from-pre-version-12.patch [bz#1023268]
  - kvm-x86-cpuid-reconstruct-leaf-0Dh-data.patch [bz#1023268]
  - kvm-net-Update-netdev-peer-on-link-change.patch [bz#965396]
  - kvm-qga-Don-t-require-time-argument-in-guest-set-time-co.patch [bz#1066191]
  - kvm-only-unset-set-mask-notifier-when-kvm-irqchip-is-sup.patch [bz#1074762]
  - kvm-qdev-Allow-vlan-or-netdev-for-device-not-both.patch [bz#998865]
  - kvm-spice-add-SASL-support.patch [bz#1021575]
  - kvm-block-fix-snapshot-on-QED.patch [bz#1012244]
  - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088610]
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087979]
  - Resolves: bz#1012244
    (make live snapshot with QED disk specified qcow2 format will cause guest hang and host call trace)
  - Resolves: bz#1021575
    (Missing SASL support for SPICE)
  - Resolves: bz#1023268
    (Error Code: 0x0000000A at first reboot after fresh installing Win8.1-32 guest on AMD system)
  - Resolves: bz#1023874
    ([Regression] Prompt error of trigger blkdebug: BLKDBG_CLUSTER_FREE event is not the same as expected)
  - Resolves: bz#1031883
    (qemu-io error prompt "Operation is supported" is not expected)
  - Resolves: bz#1035162
    ([FEAT RHEL6.6]: qemu: Support compression for dump-guest-memory command)
  - Resolves: bz#1066191
    (RHEL6: backport guest-set-time command to qemu-guest-agent)
  - Resolves: bz#1074762
    (qemu-kvm  Segmentation fault when using -no-kvm-irqchip option and virtio-nic-pci device as the same time)
  - Resolves: bz#1087979
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.6])
  - Resolves: bz#1088610
    (qemu-img coredumpd when try to create a gluster format image)
  - Resolves: bz#965396
    (turn down tap link off under hmp, rhel6.4 guest boot stalled  at "starting certmonger" after “system-reset”)
  - Resolves: bz#998865
    (Add vlan parameter in device_add command would cause device_add qemu_new_net_client: Assertion `!peer')


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.424.el6
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518]
  - Resolves: bz#1078605
    (EMBARGOED CVE-2014-0150 qemu: virtio-net: fix guest-triggerable buffer overrun [rhel-6.6])
  - Resolves: bz#1079314
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.6])
  - Resolves: bz#1079319
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.6])
  - Resolves: bz#1079324
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.6])
  - Resolves: bz#1079331
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.6])
  - Resolves: bz#1079338
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.6])
  - Resolves: bz#1079344
    ()
  - Resolves: bz#1079453
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.6])
  - Resolves: bz#1079518
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.423.el6
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1017858]
  - kvm-sasl-Avoid-Could-not-find-keytab-file-in-syslog.patch [bz#1018434]
  - Resolves: bz#1017858
    ([Intel 6.6 Bug] virsh setvcpus can not setup correct vcpu number)
  - Resolves: bz#1018434
    (qemu-kvm: Could not find keytab file: /etc/qemu/krb5.tab: No such file or directory)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.422.el6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1067576]
  - Resolves: bz#1067576
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.421.el6
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1060024]
  - Resolves: bz#1060024
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.420.el6
changelog:
  - kvm-build-add-rules-for-nesting.patch [bz#786407]
  - kvm-build-add-rule-to-create-directories.patch [bz#786407]
  - kvm-support-to-nested-declare-for-common-obj-y.patch [bz#786407]
  - kvm-qapi-add-string-based-visitors.patch [bz#786407]
  - kvm-introduce-two-error-to-qerror.h.patch [bz#786407]
  - kvm-qom-Unify-type-registration.patch [bz#786407]
  - kvm-qom-add-QEMU-Object-Model-infrastructure.patch [bz#786407]
  - kvm-vl-add-object-option-to-create-QOM-objects-from-the-.patch [bz#786407]
  - kvm-rng-add-RndBackend-abstract-object-class.patch [bz#786407]
  - kvm-rng-random-add-an-RNG-backend-that-uses-dev-random-v.patch [bz#786407]
  - kvm-rng-egd-introduce-EGD-compliant-RNG-backend.patch [bz#786407]
  - kvm-rng-egd-don-t-use-gslist_free_full.patch [bz#786407]
  - kvm-virtio-rng-hardware-random-number-generator-device.patch [bz#786407]
  - kvm-virtio-rng-add-rate-limiting-support.patch [bz#786407]
  - kvm-virtio-rng-pci-create-a-default-backend-if-none-exis.patch [bz#786407]
  - kvm-virtio-rng-remove-extra-request-for-entropy.patch [bz#786407]
  - kvm-virtio-use-unsigned-int-for-counting-bytes-in-vq.patch [bz#786407]
  - kvm-virtio-Introduce-virtqueue_get_avail_bytes.patch [bz#786407]
  - kvm-virtio-rng-use-virtqueue_get_avail_bytes-fix-migrati.patch [bz#786407]
  - kvm-virtio-limit-avail-bytes-lookahead.patch [bz#786407]
  - kvm-virtio-rng-disable-timer-on-device-removal.patch [bz#786407]
  - kvm-virtio-rng-fix-typos-comments.patch [bz#786407]
  - kvm-introduce-qemu_close.patch [bz#786407]
  - kvm-rng-random-Use-qemu_open-qemu_close.patch [bz#786407]
  - kvm-rng-random-backend-check-for-EAGAIN-errors-on-read.patch [bz#786407]
  - kvm-virtio-virtqueue_get_avail_bytes-fix-desc_pa-when-lo.patch [bz#786407]
  - kvm-qemu-options.hx-Document-missing-drive-options.patch [bz#1024335]
  - kvm-Monitor-Make-mon_set_cpu-public.patch [bz#1026903]
  - kvm-qapi-Convert-human-monitor-command.patch [bz#1026903]
  - kvm-hmp-human-monitor-command-stop-using-the-Memory-char.patch [bz#1026903]
  - kvm-chardev-drop-the-Memory-chardev-driver.patch [bz#1026903]
  - kvm-chardev-remove-the-headers-of-Memory-chardev-driver.patch [bz#1026903]
  - kvm-pc-drop-unused-compat-property-for-the-virtio-balloo.patch [bz#1027561]
  - kvm-blockdev-Clean-up-how-readonly-persists-across-virtu.patch [bz#1025235]
  - kvm-virtio-rng-add-check-of-period.patch [bz#786407]
  - kvm-rng-egd-remove-redundant-free.patch [bz#786407]
  - kvm-rng-egd-offset-the-point-when-repeatedly-read-from-t.patch [bz#786407]
  - kvm-Improve-reporting-of-fatal-errors.patch [bz#1054137]
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1007708 bz#1029852]
  - Resolves: bz#1007708
    ([RFE] Enable qemu-img to support VMDK version 3)
  - Resolves: bz#1024335
    (Manpage doesn't document -drive rerror/werror/readonly)
  - Resolves: bz#1025235
    (the readonly permission of floppy will be changed after eject/change)
  - Resolves: bz#1026903
    (QMP: human-monitor-command: fix buffer duplication)
  - Resolves: bz#1027561
    (Cleanup unused event_idx compat property from rhel6.0.0 and rhel6.1.0 machine types)
  - Resolves: bz#1029852
    (qemu-img fails to convert vmdk image with "qemu-img: Could not open 'image.vmdk'")
  - Resolves: bz#1054137
    (improve error reporting)
  - Resolves: bz#786407
    ([RFE] Add ability to pull system entropy from host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.419.el6
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005037]
  - kvm-qxl-Fix-QXLRam-initialisation.patch [bz#1013300]
  - kvm-virtio-net-broken-RX-filtering-logic-fixed.patch [bz#1010688]
  - Resolves: bz#1005037
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1010688
    ([whql][netkvm][wlk] Virtio-net device handles RX multicast filtering improperly)
  - Resolves: bz#1013300
    (Guest coredump while boot guest with " MALLOC_PERTURB_=234 ....--vnc :10,acl,sasl -vga qxl")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.418.el6
changelog:
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1018451]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1028252]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1028252]
  - Resolves: bz#1018451
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1028252
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.417.el6
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1022548 bz#1025596]
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.416.el6
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.405.el6
changelog:
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1002888]
  - kvm-virtio-net-revert-mac-on-reset.patch [bz#890265]
  - kvm-virtio-net-fix-up-HMP-NIC-info-string-on-reset.patch [bz#890265]
  - Resolves: bz#1002888
    (usb hub doesn't work properly (win2012 sees downstream port #1 only))
  - Resolves: bz#890265
    (change the mac of virtio_net device temporary but will effect forever after reboot guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.404.el6
changelog:
  - kvm-target-i386-kvm-save-restore-steal-time-MSR.patch [bz#903123]
  - Resolves: bz#903123
    (The value of steal time in "top" command always is "0.0% st" after guest migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.403.el6
changelog:
  - kvm-block-Remove-semicolon-in-BDRV_SECTOR_MASK-macro.patch [bz#914802]
  - kvm-block-implement-is_allocated-for-raw.patch [bz#914802]
  - kvm-qemu-io-fix-the-alloc-command.patch [bz#914802]
  - kvm-stream-complete-early-if-end-of-backing-file-is-reac.patch [bz#914802]
  - kvm-block-cow-Return-real-error-code.patch [bz#914802]
  - kvm-cow-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#914802]
  - kvm-cow-make-reads-go-at-a-decent-speed.patch [bz#914802]
  - kvm-cow-make-writes-go-at-a-less-indecent-speed.patch [bz#914802]
  - kvm-cow-do-not-call-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-block-keep-bs-total_sectors-up-to-date-even-for-grow.patch [bz#914802]
  - kvm-block-make-bdrv_co_is_allocated-static.patch [bz#914802]
  - kvm-block-do-not-use-total_sectors-in-bdrv_co_is_allocat.patch [bz#914802]
  - kvm-block-remove-bdrv_is_allocated_above-bdrv_co_is_allo.patch [bz#914802]
  - kvm-block-expect-errors-from-bdrv_co_is_allocated.patch [bz#914802]
  - kvm-qemu-img-always-probe-the-input-image-for-allocated-.patch [bz#914802]
  - kvm-block-make-bdrv_has_zero_init-return-false-for-copy-.patch [bz#914802]
  - kvm-block-introduce-bdrv_get_block_status-API.patch [bz#914802]
  - kvm-block-define-get_block_status-return-value.patch [bz#914802]
  - kvm-block-return-get_block_status-data-and-flags-for-for.patch [bz#914802]
  - kvm-block-use-bdrv_has_zero_init-to-return-BDRV_BLOCK_ZE.patch [bz#914802]
  - kvm-block-return-BDRV_BLOCK_ZERO-past-end-of-backing-fil.patch [bz#914802]
  - kvm-qemu-img-add-a-map-subcommand.patch [bz#914802]
  - kvm-docs-qapi-document-qemu-img-map.patch [bz#914802]
  - kvm-block-add-default-get_block_status-implementation-fo.patch [bz#914802]
  - kvm-qemu-img-fix-invalid-JSON.patch [bz#914802]
  - Resolves: bz#914802
    (Support backup vendors in qemu to access qcow disk readonly (qemu-img metadata dump))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.402.el6
changelog:
  - Move VPC from r/w whitelist to r/o whitelist [bz#999779]
  - kvm-migrate-add-migration-blockers.patch [bz#999779]
  - kvm-qed-add-migration-blocker-v2.patch [bz#999779]
  - kvm-qed-remove-incoming-live-migration-blocker.patch [bz#999779]
  - kvm-vpc-Add-migration-blocker.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.401.el6
changelog:
  - Add block VHD/VPC format to block driver whitelist [bz#999779]
  - kvm-block-vpc-Fix-conversion-from-size-to-disk-geometry.patch [bz#999779]
  - kvm-vpc-Read-write-multiple-sectors-at-once.patch [bz#999779]
  - kvm-vpc-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#999779]
  - kvm-vpc-fix-a-file-descriptor-leak.patch [bz#999779]
  - kvm-vpc.c-Use-get_option_parameter-does-the-search.patch [bz#999779]
  - kvm-block-vpc.c-Detect-too-large-vpc-file.patch [bz#999779]
  - kvm-vpc-Add-missing-error-handling-in-alloc_block.patch [bz#999779]
  - kvm-vpc-Add-support-for-Fixed-Disk-type.patch [bz#999779]
  - kvm-vpc-Round-up-image-size-during-fixed-image-creation.patch [bz#999779]
  - kvm-block-vpc-initialize-the-uuid-footer-field.patch [bz#999779]
  - kvm-block-vpc-support-for-2-TB-disks.patch [bz#999779]
  - kvm-vpc-Fix-bdrv_open-error-handling.patch [bz#999779]
  - Resolves: bz#999779
    (Add vpc file format support in qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.400.el6
changelog:
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995865]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995865]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995865]
  - kvm-vmdk-support-vmfs-files.patch [bz#995865]
  - kvm-block-initialize-do_check_io_limits-error-pointer-to.patch [bz#1001436]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#997220]
  - Resolves: bz#1001436
    (Qemu core dumped when set iops,bps... to a negative value var monitor)
  - Resolves: bz#995865
    (fix vmdk support to ESX images)
  - Resolves: bz#997220
    (Race in gluster_finish_aiocb)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.399.el6
changelog:
  - kvm-block-migration-propagate-return-value-when-bdrv_wri.patch [bz#994813]
  - kvm-block-migration-actually-disable-dirty-tracking-on-c.patch [bz#994813]
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#994813
    ([FJ6.4 Bug] the guest doesn't operate normally after block live migration with out of disk space)
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.398.el6
changelog:
  - kvm-block-use-Error-in-do_check_io_limits.patch [bz#987725]
  - kvm-block-refuse-negative-iops-and-bps-values.patch [bz#987725]
  - Resolves: bz#987725
    (Guest should failed to be booted if specifying iops,bps as negative value)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.397.el6
changelog:
  - kvm-block-Decouple-block-device-commit-all-from-DriveInf.patch [bz#856505]
  - kvm-block-Monitor-command-commit-neglects-to-report-some.patch [bz#856505]
  - kvm-block-for-HMP-commit-operations-on-all-skip-non-COW-.patch [bz#856505]
  - Resolves: bz#856505
    (Missing error message in bdrv_commit to read-only backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.396.el6
changelog:
  - Fix glusterfs support in the qemu white-list
  - Related: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.394.el6
changelog:
  - kvm-dump-clamp-guest-provided-mapping-lengths-to-rambloc.patch [bz#989585]
  - kvm-dump-introduce-GuestPhysBlockList.patch [bz#989585]
  - kvm-dump-populate-guest_phys_blocks.patch [bz#989585]
  - kvm-dump-rebase-from-host-private-RAMBlock-offsets-to-gu.patch [bz#989585]
  - kvm-virtio-net-remove-layout-assumptions-for-ctrl-vq.patch [bz#904927]
  - kvm-virtio-net-introduce-a-new-macaddr-control.patch [bz#904927]
  - kvm-net-add-compat-property-to-disable-ctrl_mac_addr-fea.patch [bz#904927]
  - kvm-virtio-net-rename-ctrl-rx-commands.patch [bz#904927]
  - kvm-target-i386-fix-bits-39-32-of-the-final-physical-add.patch [bz#880990]
  - kvm-qxl-Don-t-drop-client-capability-bits.patch [bz#880990]
  - kvm-block-fix-null-pointer-bug-on-error-case-in-block-co.patch [bz#880990]
  - Resolves: bz#880990
    ([coverity] suspicious use of sizeof, bad use of strncpy(), etc)
  - Resolves: bz#904927
    (RFE: (qemu) Introduce a vq command to robust virtio net mac programming)
  - Resolves: bz#989585
    (crash command can not read the dump-guest-memory file when paging=false [RHEL-6])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.393.el6
changelog:
  - kvm-add-timestamp-to-error_report.patch [bz#906931]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906931]
  - Resolves: bz#906931
    ([Hitachi 6.5 FEAT][QEMU]Add a time stamp to error message (*))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.392.el6
changelog:
  - Whitelist rbd block driver [bz#988079]
  - kvm-ceph-rbd-block-driver-for-qemu-kvm.patch [bz#988079]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#988079]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#988079]
  - kvm-Build-rbd-block-driver-only-for-qemu-kvm-rhev.patch [bz#988079]
  - kvm-block-call-the-snapshot-handlers-of-the-protocol-dri.patch [bz#988079]
  - Resolves: bz#988079
    ([6.5 FEAT] qemu runtime support for librbd backend (ceph))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.391.el6
changelog:
  - Set qemu-guest-agent to be started automatically [bz#888297]
  - kvm-migration-add-migrate_set_state-tracepoint.patch [bz#903429]
  - kvm-vl-add-runstate_set-tracepoint.patch [bz#903429]
  - kvm-all-add-kvm_ioctl-kvm_vm_ioctl-kvm_vcpu_ioctl-tr.patch [bz#903429]
  - kvm-all-add-kvm_run_exit-tracepoint.patch [bz#903429]
  - kvm-aio-Fix-qemu_aio_wait-to-maintain-correct-walking_ha.patch [bz#848070]
  - kvm-aio-Another-fix-to-the-walking_handlers-logic.patch [bz#848070]
  - kvm-qemu-URI-parsing-library.patch [bz#848070]
  - kvm-qemu-tool-Add-dummy-qemu_mutex_lock_iothread-and-qem.patch [bz#848070]
  - kvm-block-Support-GlusterFS-as-a-QEMU-block-backend.patch [bz#848070]
  - kvm-configure-Add-a-config-option-for-GlusterFS-as-block.patch [bz#848070]
  - kvm-qcow2-Simplify-image-creation.patch [bz#848070]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#848070]
  - kvm-block-vdi-Fix-wrong-size-in-conditionally-used-memse.patch [bz#848070]
  - kvm-qcow2-Remove-old-image-creation-function.patch [bz#848070]
  - kvm-gluster-Add-image-resize-support.patch [bz#848070]
  - kvm-vdi-don-t-override-libuuid-symbols.patch [bz#848070]
  - kvm-gluster-Return-bdrv_has_zero_init-0.patch [bz#848070]
  - kvm-qcow2-Really-use-cache-unsafe-for-image-creation.patch [bz#848070]
  - kvm-gluster-Handle-BDRV_O_CACHE_WB-in-gluster-driver.patch [bz#848070]
  - Resolves: bz#848070
    ([RHEL 6.5] Add glusterfs support to qemu)
  - Resolves: bz#888297
    (qemu-ga should be enabled right after installation)
  - Resolves: bz#903429
    ([Fujitsu 6.5 FEAT]: QEMU: Add tracepoints in live migration processing.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.390.el6
changelog:
  - Disable qemu-guest-agent for Win32 build [bz#996580]
  - kvm-Do-not-quit-QEMU-if-cpu-set-is-called-in-non-ACPI-mo.patch [bz#990237]
  - kvm-acl-Fix-acl_remove-not-to-mess-up-the-ACL.patch [bz#889255]
  - kvm-acl-acl_add-can-t-insert-before-last-list-element-fi.patch [bz#970516]
  - kvm-hw-misc-don-t-create-pvpanic-device-by-default.patch [bz#991100]
  - kvm-hw-misc-make-pvpanic-known-to-user.patch [bz#991100]
  - Resolves: bz#889255
    (Monitor command acl_remove messes up the ACL)
  - Resolves: bz#970516
    (Monitor command acl_add can't insert before last list element)
  - Resolves: bz#990237
    (qemu-kvm exits when hotplugging a cpu with --no-acpi)
  - Resolves: bz#991100
    (pvpanic device triggers guest bugs when present by default)
  - Resolves: bz#996580
    (Remove qemu-ga-win32 from our rpm packages)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.389.el6
changelog:
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#676568]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#676568]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#676568]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#676568]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#676568]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#676568]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#676568]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#676568]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#676568]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#676568]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#676568]
  - kvm-block-Allow-IO-throttling-fields-in-__com.redhat_dri.patch [bz#987745]
  - kvm-qemu-add-castagnoli-crc32c-checksum-algorithm.patch [bz#963420]
  - kvm-block-vhdx-header-for-the-QEMU-support-of-VHDX-image.patch [bz#963420]
  - kvm-block-initial-VHDX-driver-support-framework-supports.patch [bz#963420]
  - kvm-block-add-read-only-support-to-VHDX-image-format.patch [bz#963420]
  - Resolves: bz#676568
    (RFE: support hotplugging chardev & virtio-serial ports)
  - Resolves: bz#963420
    ([RHEL-6.5] Backport support for vhd(x) image format)
  - Resolves: bz#987745
    (fail to do hotplug with qemu i/o throttling including iops,iops_wr,iops_rd,bps,bps_wr,bps_rd inofs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.388.el6
changelog:
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#994804]
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#994804]
  - kvm-vmdk-byteswap-VMDK4Header.desc_offset-field.patch [bz#994804]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#994804]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#994804]
  - kvm-vmdk-refuse-to-open-higher-version-than-supported.patch [bz#994804]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#994804]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#994804]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#994804]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#994804]
  - kvm-vmdk-Allow-reading-variable-size-descriptor-files.patch [bz#994804]
  - kvm-qemu-char-Fix-ID-reuse-after-chardev-remove-for-qapi.patch [bz#994891]
  - kvm-dataplane-refuse-to-start-if-device-is-already-in-us.patch [bz#995530]
  - Resolves: bz#994804
    (qemu-kvm should verify image header fields before opening VMDK)
  - Resolves: bz#994891
    (duplicate chardev reported after chardev-remove)
  - Resolves: bz#995530
    (dataplane: refuse to start if device is already in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.387.el6
changelog:
  - kvm-Add-spent-time-for-migration.patch [bz#981235]
  - kvm-migration-print-total-downtime-for-final-phase-of-mi.patch [bz#981235]
  - kvm-blockdev-reset-werror-rerror-on-drive_del.patch [bz#970159]
  - kvm-scsi-generic-fix-sign-extension-of-READ-CAPACITY-10-.patch [bz#963151]
  - Resolves: bz#963151
    ([FJ6.4 Bug] Once a guest OS issues READ_CAPACITY(10), it becomes unable to access beyond 2TB on the disk)
  - Resolves: bz#970159
    (qemu-kvm-rhevm [race]: vm pauses with 'block I/O error in device '': No medium found (123)' when hounplug a disk and cannot be resumed)
  - Resolves: bz#981235
    (RFE: Request detail migration statistics output for live migration on RHEL6.5)


