# changelog

author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-31
changelog:
  - fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
    now it supports embedded perl and answers GETNEXT requests correctly
    (#630157).


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-32
changelog:
  - fixed varbind parsing in python netsnmp module (#711481)
  - fixed session initialization in python netsnmp module (#710667)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
  - added xfs and jfs filesystem support to hrStorageTable (#707912)
  - fixed snmpd to purge zombies resulted from pass_persist process exit
    (#703682)
  - added a log message when snmpd detects two interfaces with the same
    IP address and thus having only one ipTable entry for both (#702171)
  - added new snmpd.conf options 'interface_fadeout' and
    'interface_replace_old' to controll snmpd behavior when more
    interfaces get the same name (#702165)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#678314)
  - fixed hrSystemDate timezone sign (#683680)
  - fixed snmp logging 'truncating integer value > 32 bits' for
    UCD-SNMP-MIB::systemStats (#681949)
  - fixed rare race condition in hrSWRunTable (#683563)
  - recompiled with relro for better security (#725657)
  - snmpd should not change request-id when sending multiple SMUX messages
    (#708370)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741
  - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Build nss without softoken, freebl, or util sources in the build source tree
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - make derEncodingsMatch work with encrypted keys
  - rename a patch, dropped the experimental moniker from it
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Fix the numbering and naming of the patches
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Install man pages for the nss security tools
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Improve support for ECDSA algorithm via pluggable ECC
  - Document the purpose of the iquote.patch
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-10
changelog:
  - Prevent users from disabling the internal crypto module
  - Resolves: Bug 1059176 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check
  unset DISPLAY
   section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Restore use of indentation patch until another bug is resolved
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-3
changelog:
  - Fix pem module trashing of private keys on failed login
  - Resolves: Bug 1002205 - PEM module trashes private keys if login fails


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-11
changelog:
  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
changelog:
  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1183448 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-36
changelog:
  - add ldap backend (#455350)
  - skip sshd init's rsa1 creation in fips mode (#672870)
  - improve audit session key destroy (#642792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.2
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.5
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Hack to get correct syscall for ia64.
  - Hack to get get timer interupt data.
  - Fix doc/Makefile.am.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Syscall value for x86_64.
  - Update manpage and documentation.
  - Revise utils/* to deprecate old.
  - Include CPU_P4_HT2 in op_help.c
  - Revise how CPU_TIMER_INT handled.
  - Apply cookie patch for all archs.
  - Correct autogen.sh location.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - turn on build for ppc64
  - change order op_visualise searches lib directories.
  - revise oprofile-0.4-deprecate patch.
  - utils/oprofile kernel range check, --save, and do_dump corrections.
  - update gui to use "--separate=library".


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Use /proc/ksym for module information.
  - Correct separate debuginfo handling.
  - Configure with --enable-abi.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - check min event counts.
  - revised op_to_source output to avoid changing line count.
  - p4event events revised.
  - hammer events revised.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - put in s390.
  - Fix includes for asserts.
  - Make sure elinks is available for html to txt conversion.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Eliminate AUTOMAKE and ACLOCAL definitions.
  - Correct QTDIR and add oprof_start to file manifests.


author: Will Cohen <wcohen@redhat.com> - 0.9.2-7
changelog:
  - Correct description for package.
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Add shadow-utils to requires. Resolves: rhbz #501357
  - Add LGPL license to provided java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.5-3
changelog:
  - Allow timer mode to work.
  - Correct location for addditional files in man pages. Resolves: rhbz #508669


author: Will Cohen <wcohen@redhat.com> - 0.9.6-5
changelog:
  - Handle debuginfo section differences. rhbz #591538
  - Produce a 32-bit ppc oprofile packages for java support. rhbz #463223


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Weiping Pan <wpan@redhat.com> 2.0.8.rh1 2
changelog:
  - rebuild oracleasm for RHEL6.5, sync to upstream commit d368091e98dc
  - (oracleasm: Add support for new error return codes from block/SCSI)


author: Weiping Pan <wpan@redhat.com> 2.0.8 4
changelog:
  - add  .clear_inode callback, fix bug 1157408.
  - rebuild oracleasm for RHEL6.6 in brew, update the version to 2.0.8-4


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.73-1
changelog:
  - Cluster name is now viewable on RHEL 6
  - Cluster.conf is now removed on destroy
  - Misc man page & usage updates
  - When removing the last resource from a group, remove any constraints still
    remaining on group


author: Chris Feist <cfeist@redhat.com> - 0.9.74-1
changelog:
  - pcs cluster edit should now work properly
  - Allow removal of group and resources inside group with
    pcs resource delete <group name>


author: Chris Feist <cfeist@redhat.com> - 0.9.75-1
changelog:
  - Removing a resource that is part of a resource set is now allowed
  - When you try to remove a group from a master that has more than one
    resource you now recieve a helpful error
  - Unclone works on clones where constraints have been added
  - Removing a group with constraints now works properly
  - Master/Slave groups now have constraints properly removed before being
    deleted


author: Chris Feist <cfeist@redhat.com> - 0.9.76-1
changelog:
  - Renamed resource group remove/delete to ungroup
  - Fixed moving resource masters
  - Allow cloing/mastering last resource in a group


author: Chris Feist <cfeist@redhat.com> - 0.9.77-1
changelog:
  - Fixed managing/unmanaging groups/clones/masters of resources
  - Fixed issue when using --group when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.78-1
changelog:
  - Fixed error codes and stdout/stderr output on errors from pcs resource
    enable/disable
  - Automatically add interval to operations which don't specify an interval


author: Chris Feist <cfeist@redhat.com> - 0.9.79-1
changelog:
  - Fixed OCF_CHECK_LEVEL operation setting in resource update
  - Return proper error codes when stopping/starting/enable/disabling resources
  - Return proper error code on auth


author: Chris Feist <cfeist@redhat.com> - 0.9.80-1
changelog:
  - More fixes for OCF_CHECK_LEVEL issues
  - Fix traceback when adding a resourcew with a provider that doesn't exist
  - Create proper two_node cluster when only two nodes are specified in cluster
    setup
  - Give useful error when bad options are used with 'op'


author: Chris Feist <cfeist@redhat.com> - 0.9.81-1
changelog:
  - Fix issues when updating resource with multiple operations with the same
    action
  - Fixed constraint rules and improved usage documentation


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.101-1
changelog:
  - Rebase for new features
  - Added ability to set uidgid in cluster.conf
  - Stonith level add now properly recognizes nodes
  - Resolves: rhbz#1025053 rhbz#1019410


author: Chris Feist <cfeist@redhat.com> - 0.9.101-3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1066927


author: Chris Feist <cfeist@redhat.com> - 0.9.118-2
changelog:
  - Re-synced to upstream sources
  - Fixed dependency on rubygems
  - Fixed pam long timeouts due to fprintd
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.120-2
changelog:
  - Use /usr/sbin/pcs for pcs instead of /sbin/pcs
  - Use Open4 instead of POpen4 for running commands
  - Fixed cluster setup for RHEL6
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.121-1
changelog:
  - Don't try to get metadata for fence_check, fence_tool & fence_node
  - Cloned M/S groups can now be deleted
  - Clone options can now follow --clone
  - Cloned resources with globally-unique=true can now be deleted
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-105
changelog:
  - 547657 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead
  - subpackage parent and Parse-CPAN-Meta; add them to core's dep list
  - exclude "parent".
  - exclude Parse-CPAN-Meta.
  Resolves: rhbz#547657


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-106
changelog:
  - 554654 -  "perldoc perlvar" renders incorrectly in C and en_US.UTF-8 locales.
  - 554666 -  Wrong man pages location specified in perl manual page
  - Resolves: rhbz#554654, rhbz#554666


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-107
changelog:
  - clean spec - remove unused patches, rename patches, sources
  - add releases macros for all modules
  - change license according to legal
  - update modules to stable version. e.g. Module-Build can't be updated anymore
    because of API breakage, that's true also for some other modules.
  - Related: rhbz#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-108
changelog:
  - remove DPERL_USE_SAFE_PUTENV from Configure #577229 Use perl internal
   putenv, which doesn't leak memory.
  - 580238 wrong version of module
  Resolves: rhbz#580238


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - 597982 add all version* in -version sub-package
  - Resolves: rhbz#597982, rhbz#598397, rhbz#595387, rhbz#595387


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-111
changelog:
  - fix conflicts in specfile, upload missing sources, upload patch with
   wrong name
  - Related: rhbz# 594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-113
changelog:
  - fix CGI test data location to pass internal tests 
  - remove CPAN and CPANPLUS sysconfig declarations as they are not provided
  - disable tests on s390(x) and ppc64 as multithread stress tests fails
  - Related: rhbz#594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-114
changelog:
  - Remove unused @INC paths
  - Own all used @INC paths
  - Own architecture dependent paths by perl-libs due to multiarch
  - Resolves: rhbz#554671


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-3
changelog:
  - Resolves #676873 - Rebase pki-core again to pick the latest features and fixes
  -     Resolves #676048 - Installation within IPA hangs, r1846
  -     Resolves #679173 - uninitialized variable warnings from Perl, r1860
  -     Resolves #679174 - netstat loop fixes needed, r1862
  -     Resolves #679580 - Velocity fails to load all dependent classes, r1864


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-8
changelog:
  - Resolves 645097 
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-10
changelog:
  - Resolves #688251 - Dogtag installation under IPA takes too much
    time - SELinux policy compilation, r1908


author: Ade Lee <alee@redhat.com> 9.0.3-12
changelog:
  - Resolves #689909 - Dogtag installation under IPA takes too much
    time - remove the inefficient sleeps, r2097


author: Ade Lee <alee@redhat.com> 9.0.3-13
changelog:
  - Resolves #698796: Race conditions during IPA installation, r2103 (alee)
  - Resolves #708075 - Clone installation does not work over NAT, r2104 (alee)
  - Resolves #726785 - If replication fails while setting up a clone it 
    will wait forever, r2106 (alee)
  - Resolves #691076 - pkiremove removes the registry entry for all instances
    on a machine, r2112 (mharmsen)
  - Resolves #693835 - /var/log/tomcat6/catalina.out owned by pkiuser, r2118
    (mharmsen)
  - Resolves #729126 - Increase default validity from 6mo to 2yrs in IPA
    profile, r2125 (awnuk)
  - Resolves #728651 - CS8 64 bit pkicreate script uses wrong library name
    for, r2126 (mharmsen)
  - Resolves #700522 - pki tomcat6 instances currently running unconfined,
    r2128 (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-14
changelog:
  - Resolves #700522 - pki tomcat6 instances currently running unconfined, 
    allow server to come up when selinux disabled, r2149


author: Ade Lee <alee@redhat.com> 9.0.3-21
changelog:
  - Resolves #771790 - sslget does not work after FEDORA-2011-17400 update,
    breaking FreeIPA install (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-23
changelog:
  - Resolves #769388 - pki-silent does not properly escape command-line arguments
    (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-26
changelog:
  - Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen)
  - Resolves #841663 - serial number incorrectly cast from BigInt to integer in
    installation wizard (mharmsen)
  - Resolves #858864 - create/ identify a mechanism for clients to determine that
    the pki subsystem is up (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-27
changelog:
  - Resolves #867640 - ipa-replica-install Configuration of CA failed
    by REVERTING #819111 - Non-existent container breaks replication


author: Ade Lee <alee@redhat.com> 9.0.3-31
changelog:
  - Resolves #887305 - /var/run/pki/ca has wrong selinux context
  - Resolves #895702 - pki-cad restart avc denial


author: Ade Lee <alee@redhat.com> 9.0.3-32
changelog:
  - Resolves #999055 - AVC denials during ipa server and replica installs
  - Resolves #998715 - Package Sanity Test Failures


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-33
changelog:
  - Resolves #1051382 - IPA Replica installation fails when using an external CA
  - Test patch to filter out invalid XML and provide additional debugging
    information
  - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale
  - Resolves #1096142 - IPA replica setup fails during CA setup with
                        "unable to parse xml"
  - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg
  - Resolves #1055080 - Giant /var/log/pki-ca/debug


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy. 
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files 
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface 
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.	
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk> 
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add 	rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
   	  and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs 
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox 
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19
changelog:
  - Fix sandbox -H and -T regression
  Resolves: #626404
  - Fix fcontext translation handling in system-config-selinux


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.9
changelog:
  - selinux-polgengui should not blow up on disabled SELinux system
  Resolves: #695288
  CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare
  Resolves: #679690
  check return value of getpwuid()
  Fix semanage module -D' traceback
  Resolves: #666861 
  sandbox -- AttributeError: 'module' object has no attribute 'chcon' 	
  Resolves: #690502 	
  system-config-selinux could not open interface info 	
  Resolves: #696809
  Mv sandbox.conf.5.gz to sandbox.5.gz and put in base package
  Resolves: #690744 
  sestatus usage message not complete (missing -b option) 	
  Resolves: #705027
  correct package name in the -sandbox subpackage description 	
  Resolves: #679798
  dracut attempts to load_policy with SELinux=disabled 	
  Resolves: #659076
  Resolves: #658532
  8 options are not described in semanage man page 	
  Resolves: #677541
  Mention "semanage module" in semanage man page 	 
  Resolves: #677542
  Update translations
  Allow polcycoreutils-gui and tools to run on disabled SELinux systems
  Resolves: #695288 
  Resolves: #689153


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.10
changelog:
  - Fix policycoreutils-sandbox description
  - Change sepolgen-ifgen to search all available policy files
  - Fix portspage in system-config-selinux to not crash
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface
    - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
    - Add sandbox to sepolgen
    - Polgengui raises the wrong type of exception.  #471078
  - Cleanup chcat man page
  - Update translations
  - restorecond fixes
    - Have restorecond watch more directories in homedir
    - Fix restorecond watching utmp file for people logging in our out
    - Exit in restorecond if it can not find a UID in the passwd database

  - Stop fixfiles from complaining about missing dirs

  - Semanage fixes
    - Fix up node handling in semanage command
    - Fix proper handling of getopt errors
    - Do not allow modules names to contain spaces
    - Change semanage to not allow it to semanage module -D
  Resolves: #677542
  - Change setsebool to suggest run as root on failure
  - Don't report error on load_policy when system is disabled.
  - Fix unchecked return value of getpwuid()


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.11
changelog:
  - Remove sandbox calling -k, only should be used by seunshare, should not be
  called all the time.
  Resolves: #679690
  >>>>>>> c2a6de616017e800342523076acf56bb12ccadbf
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.12
changelog:
  - Back port option handling in semanage to handle semodule module -D correctly
  - Back port manpage from Fedora
  Resolves: #666861


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.13
changelog:
  - Fix spec file to require rsync for sandbox
  Resolves: #734467
  - Fix spec file to require gtkhtml2 for lockdown booleans program
  Resolves: #702860
  - Fix bugs found by Coverity
  Resolves: #717640
  Resolves: #728833


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.15
changelog:
  - Needs require gnome-python2-gtkhtml2 to make system-config-selinux working
  - Not use open_init_pty by default


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.16
changelog:
  - Restorecon should not be exiting with a 1 when it is successful in relabeling a file
  Resolves: #740699
  Resolves: #739587


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.18
changelog:
  - Other fix for semanage man page
  Resolves: #677541
  - Don't report error on load_policy when system is disabled.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.22
changelog:
  - Make sure installing po files use -p
  - Fix unchecked return codes
  Resolves: #684015
  - Fix semanage is sending the wrong kind of audit events 
  - Fix Polyinstantiated namespace mount leaking to excluded users 
  Related: #786664 
  - Fix selinux-policy update shows error parsing file obj_perm_s... 
  Related: #786191


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.31
changelog:
  - Make setsebool less verbose on errors
  Resolves:#984484
  - Make <<none>> spec working for semanage fcontext
  - Make audit2allow witn o option to append output instead of write


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.33
changelog:
  - Fix semanage
  Resolves:#860506
  - Make semanage man page and help consistent
  - Fix setsebool to give better error message on bad boolean names
  - Add support for exclude dirs in fixfiles
  - Fix semanage boolean to require a value


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.37
changelog:
  - Add workaround to make allow_polyinstantiation=1 directive working for xguest with semanage-booleans
  Resolves:#1008790


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.41
changelog:
  - Allow use sandbox to follow homedirs symlinks
  Resolves:#913175
  - Make sure file equivalance target and source do not end
   with a /
  - Allow make only valid domains as permissive domains
  - Fix polgen.py to allow "_" in a policy file.
  - Implement --noreload option to semanage
  - Add missing long options in sandbox man page


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.42
changelog:
  - Fail properly on invalid options for restorecon/setfiles when using -R or -r
  - Check if all files exist for setfiles and restorecon
  - Remove handling of cgroups from sandbox. 
  Resolves:#1091139
  - Make -q and -d options mutually exclusive


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.4.el6
changelog:
  - kvm-virtio-Remove-duplicate-macro-definition-for-max.-vi.patch [bz#543825]
  - kvm-virtio-console-qdev-conversion-new-virtio-serial-bus.patch [bz#543825]
  - kvm-virtio-serial-bus-Maintain-guest-and-host-port-open-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-a-port-name-property-for-port-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-support-for-buffering-guest-ou.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-ability-to-hot-unplug-ports.patch [bz#543825]
  - kvm-virtio-serial-Add-a-virtserialport-device-for-generi.patch [bz#543825]
  - kvm-Move-virtio-serial-to-Makefile.hw.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.5.el6
changelog:
  - Remove unneeded/unsupported features: [bz#555336]
    - make default options explicit
    - remove sdl support
    - remove sb16 emulation
    - remove oss support
    - remove curses support
    - disable curl support
    - disable bluez support
    - enable -Werror
    - limit block drivers support
    - add host_cdrom block device
  - Resolves: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.9.el6
changelog:
  - Disable -Werror again, as there are still warnings on the build
  - Related: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.11.el6
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#556459]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#556459]
  - kvm-qemu-img-rebase.patch [bz#556459]
  - Resolves: bz#556459
    (RFE - In-place backing file format change)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.12.el6
changelog:
  - kvm-virtio-serial-bus-Remove-guest-buffer-caching-and-th.patch [bz#543825]
  - kvm-virtio-serial-Make-sure-we-don-t-crash-when-host-por.patch [bz#543825]
  - kvm-virtio-serial-Use-MSI-vectors-for-port-virtqueues.patch [bz#543825]
  - kvm-virtio-serial-bus-Match-upstream-whitespace.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.13.el6
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#557435]
  - kvm-Add-missing-newline-at-the-end-of-options-list.patch [bz#558412]
  - kvm-vnc-Fix-artifacts-in-hextile-decoding.patch [bz#558414]
  - kvm-QMP-Drop-wrong-assert.patch [bz#558415]
  - kvm-vmware_vga-Check-cursor-dimensions-passed-from-guest.patch [bz#558435]
  - kvm-virtio-pci-thinko-fix.patch [bz#558438]
  - kvm-QMP-Don-t-free-async-event-s-data.patch [bz#558465]
  - kvm-vnc_refresh-return-if-vd-timer-is-NULL.patch [bz#558466]
  - kvm-osdep.c-Fix-accept4-fallback.patch [bz#558477]
  - kvm-QMP-Emit-asynchronous-events-on-all-QMP-monitors.patch [bz#558619]
  - kvm-vnc_refresh-calling-vnc_update_client-might-free-vs.patch [bz#558846]
  - Resolves: bz#557435
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#558412
    (-help output not terminated by newline)
  - Resolves: bz#558414
    (Artifacts in hextile decoding)
  - Resolves: bz#558415
    (Assert triggers on qmp commands returning lists)
  - Resolves: bz#558435
    (vmware-svga buffer overflow copying cursor data)
  - Resolves: bz#558438
    (virtio status bits corrupted if guest deasserts bus mastering bit)
  - Resolves: bz#558465
    (Double-free of qmp async messages)
  - Resolves: bz#558466
    (Possible segfault on vnc client disconnect)
  - Resolves: bz#558477
    (Incorrect handling of EINVAL from accept4())
  - Resolves: bz#558619
    (QMP: Emit asynchronous events on all QMP monitors)
  - Resolves: bz#558846
    (fix use-after-free in vnc code)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.14.el6
changelog:
  - kvm-MCE-Fix-bug-of-IA32_MCG_STATUS-after-system-reset.patch [bz#558416]
  - kvm-Fix-CPU-topology-initialization.patch [bz#558432]
  - kvm-loader-more-ignores-for-rom-intended-to-be-loaded-by.patch [bz#558467]
  - kvm-pc-add-machine-type-for-0.12.patch [bz#558470]
  - kvm-virtio-console-Rename-virtio-serial.c-back-to-virtio.patch [bz#559089]
  - kvm-virtio-serial-bus-Fix-bus-initialisation-and-allow-f.patch [bz#559503]
  - Resolves: bz#558416
    (Machine check exception injected into qemu reinjected after every reset)
  - Resolves: bz#558432
    (CPU topology not taking effect)
  - Resolves: bz#558467
    (roms potentially loaded twice)
  - Resolves: bz#558470
    (Incorrect machine types)
  - Resolves: bz#559089
    (Rename virtio-serial.c to virtio-console.c as is upstream.)
  - Resolves: bz#559503
    (virtio-serial: fix multiple devices intialisation)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.15.el6
changelog:
  - kvm-VNC-Use-enabled-key-instead-of-status.patch [bz#549759]
  - kvm-VNC-Make-auth-key-mandatory.patch [bz#549759]
  - kvm-VNC-Rename-client-s-username-key.patch [bz#549759]
  - kvm-VNC-Add-family-key.patch [bz#549759]
  - kvm-VNC-Cache-client-info-at-connection-time.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_CONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_DISCONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_INITIALIZED-event.patch [bz#549759]
  - kvm-block-avoid-creating-too-large-iovecs-in-multiwrite_.patch [bz#558730]
  - Resolves: bz#549759
    (A QMP event notification on VNC client connect/disconnect events)
  - Resolves: bz#558730
    (qemu may create too large iovecs for the kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.17.el6
changelog:
  - kvm-Fix-QEMU_WARN_UNUSED_RESULT.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#560623]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#560623]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#560623]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#560623]
  - kvm-net-Make-inet_strfamily-public.patch [bz#562181]
  - kvm-net-inet_strfamily-Better-unknown-family-report.patch [bz#562181]
  - kvm-vnc-Use-inet_strfamily.patch [bz#562181]
  - Resolves: bz#560623
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))
  - Resolves: bz#562181
    (Small VNC related cleanup)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.18.el6
changelog:
  - kvm-roms-minor-fixes-and-cleanups.patch [bz#558818]
  - kvm-fw_cfg-rom-loader-tweaks.patch [bz#558818]
  - kvm-roms-rework-rom-loading-via-fw.patch [bz#558818]
  - kvm-pci-allow-loading-roms-via-fw_cfg.patch [bz#558818]
  - kvm-pc-add-rombar-to-compat-properties-for-pc-0.10-and-p.patch [bz#558818]
  - Resolves: bz#558818
    (rom loading)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.19.el6
changelog:
  - kvm-virtio_blk-Factor-virtio_blk_handle_request-out.patch [bz#560942]
  - kvm-virtio-blk-Fix-restart-after-read-error.patch [bz#560942]
  - kvm-virtio-blk-Fix-error-cases-which-ignored-rerror-werr.patch [bz#560942]
  - Resolves: bz#560942
    (virtio-blk error handling doesn't work reliably)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.20.el6
changelog:
  - kvm-QMP-Add-QEMU-s-version-to-the-greeting-message.patch [bz#557930]
  - kvm-QMP-Introduce-the-qmp_capabilities-command.patch [bz#557930]
  - kvm-QMP-Enforce-capability-negotiation-rules.patch [bz#557930]
  - kvm-QMP-spec-Capability-negotiation-updates.patch [bz#557930]
  - kvm-json-escape-u0000-.-u001F-when-outputting-json.patch [bz#559667]
  - kvm-json-fix-PRId64-on-Win32.patch [bz#563878]
  - kvm-qjson-Improve-debugging.patch [bz#563875]
  - kvm-Monitor-remove-unneeded-checks.patch [bz#563876]
  - kvm-QError-Don-t-abort-on-multiple-faults.patch [bz#559635]
  - kvm-QMP-Don-t-leak-on-connection-close.patch [bz#559645]
  - kvm-QMP-Emit-Basic-events.patch [bz#558623]
  - Resolves: bz#557930
    (QMP: Feature Negotiation support)
  - Resolves: bz#558623
    (QMP: Basic async events are not emitted)
  - Resolves: bz#559635
    (QMP: assertion on multiple faults)
  - Resolves: bz#559645
    (QMP: leak when a QMP connection is closed)
  - Resolves: bz#559667
    (QMP: JSON parser doesn't escape some control chars)
  - Resolves: bz#563875
    (QJSON: Improve debugging)
  - Resolves: bz#563876
    (Monitor: remove unneeded checks)
  - Resolves: bz#563878
    (QJSON: Fix PRId64 handling)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.21.el6
changelog:
  - kvm-net-add-API-to-disable-enable-polling.patch [bz#562958]
  - kvm-virtio-rename-features-guest_features.patch [bz#562958]
  - kvm-qdev-add-bit-property-type.patch [bz#562958]
  - kvm-qdev-fix-thinko-leading-to-guest-crashes.patch [bz#562958]
  - kvm-virtio-add-features-as-qdev-properties-fixup.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.22.el6
changelog:
  - kvm-QMP-BLOCK_IO_ERROR-event-handling.patch [bz#547501]
  - kvm-block-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-ide-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-scsi-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-virtio-blk-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-add-rhel-machine-types.patch [bz#558838]
  - kvm-QMP-Fix-query-balloon-key-change.patch [bz#568739]
  - Resolves: bz#547501
    (RFE: a QMP event notification for disk  I/O errors with werror/rerror flags)
  - Resolves: bz#558838
    (add rhel machine types)
  - Resolves: bz#568739
    (QMP: Fix 'query-balloon' key)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.23.el6
changelog:
  - kvm-ide-device-version-property.patch [bz#558835]
  - kvm-pc-add-driver-version-compat-properties.patch [bz#558835]
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#567602]
  - Resolves: bz#558835
    (ide/scsi drive versions)
  - Resolves: bz#567602
    (qemu-img rebase subcommand got Segmentation fault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.24.el6
changelog:
  - kvm-path.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-hw-pc.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-slirp-misc.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-savevm.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-bochs.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-Introduce-qemu_write_full.patch [bz#567099]
  - kvm-force-to-test-result-for-qemu_write_full.patch [bz#567099]
  - kvm-block-cow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vmdk.o-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vvfat.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow2.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-net-slirp.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-usb-linux.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-vl.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-monitor.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-linux-user-mmap.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-check-pipe-return-value.patch [bz#567099]
  - kvm-fix-qemu-kvm-_FORTIFY_SOURCE-compilation.patch [bz#567099]
  - kvm-Enable-_FORTIFY_SOURCE-2.patch [bz#567099]
  - kvm-qcow2-Fix-image-creation-regression.patch [bz#567099]
  - kvm-cow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-slirp-check-system-success.patch [bz#567099]
  - kvm-qcow2-return-errno-instead-of-1.patch [bz#567099]
  - kvm-qcow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-make-vmdk_snapshot_create-return-errno.patch [bz#567099]
  - kvm-vmdk-fix-double-free.patch [bz#567099]
  - kvm-vmdk-share-cleanup-code.patch [bz#567099]
  - kvm-block-print-errno-on-error.patch [bz#567099]
  - kvm-documentation-qemu_write_full-don-t-work-with-non-bl.patch [bz#567099]
  - kvm-virtio-serial-pci-Allow-MSI-to-be-disabled.patch [bz#567035]
  - kvm-pc-Add-backward-compatibility-options-for-virtio-ser.patch [bz#567035]
  - kvm-virtio-serial-don-t-set-MULTIPORT-for-1-port-dev.patch [bz#567035]
  - kvm-qdev-Add-a-DEV_NVECTORS_UNSPECIFIED-enum-for-unspeci.patch [bz#567035]
  - kvm-virtio-pci-Use-DEV_NVECTORS_UNSPECIFIED-instead-of-1.patch [bz#567035]
  - kvm-kbd-leds-infrastructure.patch [bz#569767]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#569767]
  - kvm-kbd-leds-usb-kbd.patch [bz#569767]
  - kvm-kbd-keds-vnc.patch [bz#569767]
  - kvm-migration-Clear-fd-also-in-error-cases.patch [bz#570174]
  - Resolves: bz#567035
    (Backport changes for virtio-serial from upstream: disabling MSI, backward compat.)
  - Resolves: bz#567099
    (Allow _FORTIFY_SOURCE=2 & --enable-warning)
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.25.el6
changelog:
  - kvm-qemu-memory-notifiers.patch [bz#562958]
  - kvm-tap-add-interface-to-get-device-fd.patch [bz#562958]
  - kvm-add-API-to-set-ioeventfd.patch [bz#562958]
  - kvm-notifier-event-notifier-implementation.patch [bz#562958]
  - kvm-virtio-add-notifier-support.patch [bz#562958]
  - kvm-virtio-add-APIs-for-queue-fields.patch [bz#562958]
  - kvm-virtio-add-set_status-callback.patch [bz#562958]
  - kvm-virtio-move-typedef-to-qemu-common.patch [bz#562958]
  - kvm-virtio-pci-fill-in-notifier-support.patch [bz#562958]
  - kvm-vhost-vhost-net-support.patch [bz#562958]
  - kvm-tap-add-vhost-vhostfd-options.patch [bz#562958]
  - kvm-tap-add-API-to-retrieve-vhost-net-header.patch [bz#562958]
  - kvm-virtio-net-vhost-net-support.patch [bz#562958]
  - kvm-qemu-kvm-add-vhost.h-header.patch [bz#562958]
  - kvm-irqfd-support.patch [bz#562958]
  - kvm-msix-add-mask-unmask-notifiers.patch [bz#562958]
  - kvm-virtio-pci-irqfd-support.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.26.el6
changelog:
  - kvm-add-spice-into-the-configure-file.patch [bz#549757]
  - kvm-spice-core-bits.patch [bz#549757]
  - kvm-spice-add-keyboard.patch [bz#549757]
  - kvm-spice-add-mouse.patch [bz#549757]
  - kvm-spice-simple-display.patch [bz#549757]
  - kvm-move-x509-file-name-defines-to-qemu-x509.h.patch [bz#549757]
  - kvm-spice-tls-support.patch [bz#549757]
  - kvm-spice-configure-listening-addr.patch [bz#549757]
  - kvm-spice-add-qxl-device.patch [bz#549757]
  - Resolves: bz#549757
    (Provide SPICE support  / -spice command line argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.27.el6
changelog:
  - kvm-spice-add-tablet.patch [bz#574211]
  - kvm-spice-simple-display-wake-spice-server-only-when-idl.patch [bz#574212]
  - kvm-spice-qxl-switch-back-to-vga-mode-on-register-access.patch [bz#574214]
  - kvm-spice-qxl-ring-access-security-fix.patch [bz#568820]
  - kvm-vnc-support-password-expire.patch [bz#525935]
  - kvm-spice-vnc-add-__com.redhat_set_password-monitor-comm.patch [bz#525935]
  - kvm-spice-add-audio-support.patch [bz#574222]
  - kvm-spice-make-image-compression-configurable.patch [bz#574225]
  - kvm-spice-configure-channel-security.patch [bz#574225]
  - kvm-spice-configure-renderer.patch [bz#574225]
  - kvm-spice-send-connect-disconnect-monitor-events.patch [bz#558957]
  - kvm-spice-qxl-update-vga-help-text-indicating-qxl-is-the.patch [bz#574853]
  - kvm-spice-notifying-spice-when-migration-starts-and-ends.patch [bz#574849]
  - kvm-spice-add-__com.redhat_spice_migrate_info-monitor-co.patch [bz#574849]
  - Resolves: bz#525935
    (RFE: expire vnc password)
  - Resolves: bz#558957
    (A QMP event notification on SPICE client connect/disconnect events)
  - Resolves: bz#568820
    (EMBARGOED CVE-2010-0431 qemu: Insufficient guest provided pointers validation [rhel-6.0])
  - Resolves: bz#574211
    (spice: add tablet support)
  - Resolves: bz#574212
    (spice:wake spice server only when idle)
  - Resolves: bz#574214
    (qxl: switch qxl from native into vga mode on vga register access)
  - Resolves: bz#574222
    (spice: add audio support)
  - Resolves: bz#574225
    (spice: add config options)
  - Resolves: bz#574849
    (spice: client migration support)
  - Resolves: bz#574853
    (spice/qxl: add qxl to -vga help text)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.28.el6
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#567940]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#567940]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#567940]
  - kvm-spice-virtual-machine-channel-replacement-for-remove.patch [bz#576488]
  - Resolves: bz#567940
    (qcow2 corruption with I/O error during refcount block allocation)
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.29.el6
changelog:
  - kvm-scsi-device-version-property.patch [bz#558835]
  - kvm-scsi-disk-fix-buffer-overflow.patch [bz#558835]
  - Resolves: bz#558835
    (ide/scsi drive versions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.30.el6
changelog:
  - kvm-New-API-for-asynchronous-monitor-commands.patch [bz#574939]
  - kvm-Revert-QMP-Fix-query-balloon-key-change.patch [bz#574939]
  - kvm-virtio-Add-memory-statistics-reporting-to-the-balloo.patch [bz#574939]
  - Resolves: bz#574939
    (Memory statistics support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.31.el6
changelog:
  - kvm-Transparent-Hugepage-Support-3.patch [bz#574525]
  - kvm-monitor-Don-t-check-for-mon_get_cpu-failure.patch [bz#574642]
  - kvm-QError-New-QERR_OPEN_FILE_FAILED.patch [bz#574642]
  - kvm-monitor-convert-do_memory_save-to-QError.patch [bz#574642]
  - kvm-monitor-convert-do_physical_memory_save-to-QError.patch [bz#574642]
  - kvm-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#574642]
  - kvm-monitor-convert-do_cpu_set-to-QObject-QError.patch [bz#574642]
  - kvm-monitor-Use-QERR_INVALID_PARAMETER-instead-of-QERR_I.patch [bz#575800]
  - kvm-Revert-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#575800]
  - kvm-json-parser-Fix-segfault-on-malformed-input.patch [bz#575800]
  - kvm-fix-i-format-handling-in-memory-dump.patch [bz#575800]
  - kvm-Don-t-set-default-monitor-when-there-is-a-mux-ed-one.patch [bz#575800]
  - kvm-monitor-Document-argument-type-M.patch [bz#575821]
  - kvm-QDict-New-qdict_get_double.patch [bz#575821]
  - kvm-monitor-New-argument-type-b.patch [bz#575821]
  - kvm-monitor-Use-argument-type-b-for-migrate_set_speed.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_speed-to-QObject.patch [bz#575821]
  - kvm-monitor-New-argument-type-T.patch [bz#575821]
  - kvm-monitor-Use-argument-type-T-for-migrate_set_downtime.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_downtime-to-QObject.patch [bz#575821]
  - kvm-block-Emit-BLOCK_IO_ERROR-before-vm_stop-call.patch [bz#575912]
  - kvm-QMP-Move-STOP-event-into-do_vm_stop.patch [bz#575912]
  - kvm-QMP-Move-RESET-event-into-qemu_system_reset.patch [bz#575912]
  - kvm-QMP-Sync-with-upstream-event-changes.patch [bz#575912]
  - kvm-QMP-Drop-DEBUG-event.patch [bz#575912]
  - kvm-QMP-Revamp-the-qmp-events.txt-file.patch [bz#575912]
  - kvm-QMP-Introduce-RTC_CHANGE-event.patch [bz#547534]
  - kvm-QMP-Introduce-WATCHDOG-event.patch [bz#557083]
  - kvm-spice-add-more-config-options.patch [bz#576561]
  - Resolves: bz#547534
    (RFE: a QMP event notification for RTC clock changes)
  - Resolves: bz#557083
    (QMP events for watchdog events)
  - Resolves: bz#574525
    (Align qemu-kvm guest memory for transparent hugepage support)
  - Resolves: bz#574642
    (QMP: Convert do_cpu_set() to QObject)
  - Resolves: bz#575800
    (Monitor: Backport a collection of fixes)
  - Resolves: bz#575821
    (QMP: Convert migrate_set_speed, migrate_set_downtime to QObject)
  - Resolves: bz#575912
    (QMP: Backport event related fixes)
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.32.el6
changelog:
  - kvm-Revert-spice-add-more-config-options.patch [bz#576561]
    (need to wait for spice patches to be included on spice-server)
  - Related: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.33.el6
changelog:
  - kvm-Fix-kvm_load_mpstate-for-vcpu-hot-add.patch [bz#569613]
  - kvm-qemu-kvm-enable-get-set-vcpu-events-on-reset-and-mig.patch [bz#569613]
  - kvm-Synchronize-kvm-headers.patch [bz#569613]
  - kvm-Increase-VNC_MAX_WIDTH.patch [bz#569613]
  - kvm-device-assignment-default-requires-IOMMU.patch [bz#569613]
  - kvm-Do-not-allow-vcpu-stop-with-in-progress-PIO.patch [bz#569613]
  - kvm-fix-savevm-command-without-id-or-tag.patch [bz#569613]
  - kvm-Do-not-ignore-error-if-open-file-failed-serial-dev-t.patch [bz#569613]
  - kvm-segfault-due-to-buffer-overrun-in-usb-serial.patch [bz#569613]
  - kvm-fix-inet_parse-typo.patch [bz#569613]
  - kvm-virtio-net-fix-network-stall-under-load.patch [bz#569613]
  - kvm-don-t-dereference-NULL-after-failed-strdup.patch [bz#569613]
  - kvm-net-Remove-unused-net_client_uninit.patch [bz#569613]
  - kvm-net-net_check_clients-runs-too-early-to-see-device-f.patch [bz#569613]
  - kvm-net-Fix-bogus-Warning-vlan-0-with-no-nics-with-devic.patch [bz#569613]
  - kvm-net-net_check_clients-checks-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-info-network-shows-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-Monitor-command-set_link-finds-only-VLAN-clients.patch [bz#569613]
  - kvm-ide-save-restore-pio-atapi-cmd-transfer-fields-and-i.patch [bz#569613]
  - kvm-cirrus-Properly-re-register-cirrus_linear_io_addr-on.patch [bz#569613]
  - Related: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.34.el6
changelog:
  - kvm-Monitor-Introduce-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-simple-handlers-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cont-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_eject-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cpu_set-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_block_set_passwd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_getfd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_closefd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_add-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_remove-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_memory_save-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_physical_memory_save-to-cmd_new_r.patch [bz#563491]
  - kvm-Monitor-Convert-do_info-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_change-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-to-mon_set_password-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-mon_spice_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Rename-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Debugging-support.patch [bz#563491]
  - kvm-Monitor-Drop-the-print-disabling-mechanism.patch [bz#563491]
  - kvm-Monitor-Audit-handler-return.patch [bz#563491]
  - kvm-Monitor-Debug-stray-prints-the-right-way.patch [bz#563491]
  - kvm-Monitor-Report-more-than-one-error-in-handlers.patch [bz#563491]
  - Resolves: bz#563491
    (QMP: New internal error handling mechanism)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.35.el6
changelog:
  - kvm-QError-New-QERR_DEVICE_NOT_ENCRYPTED.patch [bz#563641]
  - kvm-Wrong-error-message-in-block_passwd-command.patch [bz#563641]
  - kvm-Monitor-Introduce-RFQDN_REDHAT-and-use-it.patch [bz#578493]
  - kvm-QMP-Fix-Spice-event-names.patch [bz#578493]
  - Resolves: bz#563641
    (QMP: Wrong error message in block_passwd command)
  - Resolves: bz#578493
    (QMP: Fix spice event names)
  - ksm.init: touch max_kernel_pages only if it exists [bz#561907]
  - Resolves: bz#561907
  - ksmtuned: add debug information [bz#576789]
  - Resolves: bz#576789


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.36.el6
changelog:
  - kvm-char-Remove-redundant-qemu_chr_generic_open-call.patch [bz#558236]
  - kvm-add-close-callback-for-tty-based-char-device.patch [bz#558236]
  - kvm-Restore-terminal-attributes-for-tty-based-monitor.patch [bz#558236]
  - kvm-Restore-terminal-monitor-attributes-addition.patch [bz#558236]
  - Resolves: bz#558236
    (qemu-kvm monitor corrupts tty on exit)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.37.el6
changelog:
  - kvm-balloon-Fix-overflow-when-reporting-actual-memory-si.patch [bz#578912]
  - kvm-json-parser-Output-the-content-of-invalid-keyword.patch [bz#576544]
  - Resolves: bz#576544
    (Error message doesn't contain the content of invalid keyword)
  - Resolves: bz#578912
    (Monitor: Overflow in 'info balloon')


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.38.el6
changelog:
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#537164]
  - kvm-read-only-BDRV_O_FLAGS-cleanup.patch [bz#537164]
  - kvm-read-only-Added-drives-readonly-option.patch [bz#537164]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#537164]
  - kvm-read-only-No-need-anymoe-for-bdrv_set_read_only.patch [bz#537164]
  - kvm-read_only-Ask-for-read-write-permissions-when-openin.patch [bz#537164]
  - kvm-read-only-Read-only-device-changed-to-opens-it-s-fil.patch [bz#537164]
  - kvm-read-only-qemu-img-Fix-qemu-img-can-t-create-qcow-im.patch [bz#537164]
  - kvm-block-clean-up-bdrv_open2-structure-a-bit.patch [bz#537164]
  - kvm-block-saner-flags-filtering-in-bdrv_open2.patch [bz#537164]
  - kvm-block-flush-backing_hd-in-the-right-place.patch [bz#537164]
  - kvm-block-fix-cache-flushing-in-bdrv_commit.patch [bz#537164]
  - kvm-block-more-read-only-changes-related-to-backing-file.patch [bz#537164]
  - kvm-read-only-minor-cleanup.patch [bz#537164]
  - kvm-read-only-Another-minor-cleanup.patch [bz#537164]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#537164]
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#580028]
  - kvm-qemu-io-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-nbd-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-img-Fix-error-message.patch [bz#579974]
  - kvm-Replace-calls-of-old-bdrv_open.patch [bz#579974]
  - Resolves: bz#537164
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#579974
    (Get segmentation fault when creating qcow2 format image on block device with "preallocation=metadata")
  - Resolves: bz#580028
    ('qemu-img re-base' broken on block devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.39.el6
changelog:
  - kvm-virtio-blk-revert-serial-number-support.patch [bz#564101]
  - kvm-block-add-topology-qdev-properties.patch [bz#564101]
  - kvm-virtio-blk-add-topology-support.patch [bz#564101]
  - kvm-scsi-add-topology-support.patch [bz#564101]
  - kvm-ide-add-topology-support.patch [bz#564101]
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#580140]
  - Resolves: bz#564101
    ([RFE] topology support in the virt block layer)
  - Resolves: bz#580140
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.40.el6
changelog:
  - cpu-model-config-1.patch [bz#569661]
  - cpu-model-config-2.patch [bz#569661]
  - cpu-model-config-3.patch [bz#569661]
  - cpu-model-config-4.patch [bz#569661]
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.42.el6
changelog:
  - kvm-net-remove-NICInfo.bootable-field.patch [bz#561078]
  - kvm-net-remove-broken-net_set_boot_mask-boot-device-vali.patch [bz#561078]
  - kvm-boot-remove-unused-boot_devices_bitmap-variable.patch [bz#561078]
  - kvm-check-kvm-enabled.patch [bz#580109]
  - kvm-qemu-rename-notifier-event_notifier.patch [bz#580109]
  - kvm-virtio-API-name-cleanup.patch [bz#580109]
  - kvm-vhost-u_int64_t-uint64_t.patch [bz#580109]
  - kvm-virtio-pci-fix-coding-style.patch [bz#580109]
  - kvm-vhost-detect-lack-of-support-earlier-style.patch [bz#580109]
  - kvm-configure-vhost-related-fixes.patch [bz#580109]
  - kvm-vhost-fix-features-ack.patch [bz#580109]
  - kvm-vhost-net-disable-mergeable-buffers.patch [bz#580109]
  - Resolves: bz#561078
    ("Cannot boot from non-existent NIC" when using virt-install --pxe)
  - Resolves: bz#580109
    (vhost net lacks upstream fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.43.el6
changelog:
  - kvm-qemu-option-Make-qemu_opts_foreach-accumulate-return.patch [bz#579470]
  - kvm-qdev-Fix-exit-code-for-device.patch [bz#579470]
  - kvm-qdev-Add-help-for-device-properties.patch [bz#579470]
  - kvm-qdev-update-help-on-device.patch [bz#579470]
  - kvm-qdev-Add-rudimentary-help-for-property-value.patch [bz#579470]
  - kvm-qdev-Free-opts-on-failed-do_device_add.patch [bz#579470]
  - kvm-qdev-Improve-diagnostics-for-bad-property-values.patch [bz#579470]
  - kvm-qdev-Catch-attempt-to-attach-more-than-one-device-to.patch [bz#579470]
  - kvm-usb-Remove-disabled-monitor_printf-in-usb_read_file.patch [bz#579470]
  - kvm-savevm-Fix-loadvm-to-report-errors-to-stderr-not-the.patch [bz#579470]
  - kvm-pc-Fix-error-reporting-for-boot-once.patch [bz#579470]
  - kvm-pc-Factor-common-code-out-of-pc_boot_set-and-cmos_in.patch [bz#579470]
  - kvm-tools-Remove-unused-cur_mon-from-qemu-tool.c.patch [bz#579470]
  - kvm-monitor-Separate-default-monitor-and-current-monitor.patch [bz#579470]
  - kvm-block-Simplify-usb_msd_initfn-test-for-can-read-bdrv.patch [bz#579470]
  - kvm-monitor-Factor-monitor_set_error-out-of-qemu_error_i.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-from-monitor.c-to-own-.patch [bz#579470]
  - kvm-error-Simplify-error-sink-setup.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-into-their-own-header.patch [bz#579470]
  - kvm-error-New-error_printf-and-error_vprintf.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qdev_d.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qbus_f.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-scsi_h.patch [bz#579470]
  - kvm-error-Replace-qemu_error-by-error_report.patch [bz#579470]
  - kvm-error-Rename-qemu_error_new-to-qerror_report.patch [bz#579470]
  - kvm-error-Infrastructure-to-track-locations-for-error-re.patch [bz#579470]
  - kvm-error-Include-the-program-name-in-error-messages-to-.patch [bz#579470]
  - kvm-error-Track-locations-in-configuration-files.patch [bz#579470]
  - kvm-QemuOpts-Fix-qemu_config_parse-to-catch-file-read-er.patch [bz#579470]
  - kvm-error-Track-locations-on-command-line.patch [bz#579470]
  - kvm-qdev-Fix-device-and-device_add-to-handle-unsuitable-.patch [bz#579470]
  - kvm-qdev-Factor-qdev_create_from_info-out-of-qdev_create.patch [bz#579470]
  - kvm-qdev-Hide-no_user-devices-from-users.patch [bz#579470]
  - kvm-qdev-Hide-ptr-properties-from-users.patch [bz#579470]
  - kvm-monitor-New-monitor_cur_is_qmp.patch [bz#579470]
  - kvm-error-Let-converted-handlers-print-in-human-monitor.patch [bz#579470]
  - kvm-error-Polish-human-readable-error-descriptions.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_BAD.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_IN_USE.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_NOT_FOUND.patch [bz#579470]
  - kvm-qdev-convert-setting-device-properties-to-QError.patch [bz#579470]
  - kvm-qdev-Relax-parsing-of-bus-option.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_MULTIPLE_BUSSES.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_NO_BUS.patch [bz#579470]
  - kvm-qdev-Convert-qbus_find-to-QError.patch [bz#579470]
  - kvm-error-New-error_printf_unless_qmp.patch [bz#579470]
  - kvm-error-New-QERR_BAD_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NO_HOTPLUG.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_INIT_FAILED.patch [bz#579470]
  - kvm-error-New-QERR_NO_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-Revert-qdev-Use-QError-for-device-not-found-error.patch [bz#579470]
  - kvm-error-Convert-do_device_add-to-QError.patch [bz#579470]
  - kvm-qemu-option-Functions-to-convert-to-from-QDict.patch [bz#579470]
  - kvm-qemu-option-Move-the-implied-first-name-into-QemuOpt.patch [bz#579470]
  - kvm-qemu-option-Rename-find_list-to-qemu_find_opts-exter.patch [bz#579470]
  - kvm-monitor-New-argument-type-O.patch [bz#579470]
  - kvm-monitor-Use-argument-type-O-for-device_add.patch [bz#579470]
  - kvm-monitor-convert-do_device_add-to-QObject.patch [bz#579470]
  - kvm-error-Trim-includes-after-Move-qemu_error-friends.patch [bz#579470]
  - kvm-error-Trim-includes-in-qerror.c.patch [bz#579470]
  - kvm-error-Trim-includes-after-Infrastructure-to-track-lo.patch [bz#579470]
  - kvm-error-Make-use-of-error_set_progname-optional.patch [bz#579470]
  - kvm-error-Link-qemu-img-qemu-nbd-qemu-io-with-qemu-error.patch [bz#579470]
  - kvm-error-Move-qerror_report-from-qemu-error.-ch-to-qerr.patch [bz#579470]
  - Resolves: bz#579470
    (QMP: device_add support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.44.el6
changelog:
  - kvm-spice-add-more-config-options-readd.patch [bz#576561]
  - BuildRequires spice-server-devel >= 0.4.2-10.el6 because of API changes
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.45.el6
changelog:
  - kvm-Documentation-Add-monitor-commands-to-function-index.patch [bz#559670]
  - kvm-error-Put-error-definitions-back-in-alphabetical-ord.patch [bz#559670]
  - kvm-error-New-QERR_DUPLICATE_ID.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_create-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_INVALID_PARAMETER_VALUE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_set-to-QError.patch [bz#559670]
  - kvm-error-Drop-extra-messages-after-qemu_opts_set-and-qe.patch [bz#559670]
  - kvm-error-Use-QERR_INVALID_PARAMETER_VALUE-instead-of-QE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_validate-to-QError.patch [bz#559670]
  - kvm-error-Convert-net_client_init-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_DEVICE_IN_USE.patch [bz#559670]
  - kvm-monitor-New-commands-netdev_add-netdev_del.patch [bz#559670]
  - kvm-qdev-Convert-qdev_unplug-to-QError.patch [bz#582325]
  - kvm-monitor-convert-do_device_del-to-QObject-QError.patch [bz#582325]
  - kvm-block-Fix-error-code-in-multiwrite-for-immediate-fai.patch [bz#582575]
  - kvm-block-Fix-multiwrite-memory-leak-in-error-case.patch [bz#582575]
  - Resolves: bz#559670
    (No 'netdev_add' command in monitor)
  - Resolves: bz#582325
    (QMP: device_del support)
  - Resolves: bz#582575
    (Backport bdrv_aio_multiwrite fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.46.el6
changelog:
  - kvm-spice-add-auth-info-to-monitor-events.patch [bz#581540]
  - Resolves: bz#581540
    (SPICE graphics event does not include auth details)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.47.el6
changelog:
  - kvm-Request-setting-of-nmi_pending-and-sipi_vector.patch [bz#569613]
  - Resolves: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.48.el6
changelog:
  - kvm-virtio-serial-save-load-Ensure-target-has-enough-por.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-nr_ports-on-src-and-d.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-we-have-hot-plugged-p.patch [bz#574296]
  - kvm-virtio-serial-save-load-Send-target-host-connection-.patch [bz#574296]
  - kvm-virtio-serial-Use-control-messages-to-notify-guest-o.patch [bz#574296]
  - kvm-virtio-serial-whitespace-match-surrounding-code.patch [bz#574296]
  - kvm-virtio-serial-Remove-redundant-check-for-0-sized-wri.patch [bz#574296]
  - kvm-virtio-serial-Update-copyright-year-to-2010.patch [bz#574296]
  - kvm-virtio-serial-Propagate-errors-in-initialising-ports.patch [bz#574296]
  - kvm-virtio-serial-Send-out-guest-data-to-ports-only-if-p.patch [bz#574296]
  - kvm-iov-Introduce-a-new-file-for-helpers-around-iovs-add.patch [bz#574296]
  - kvm-iov-Add-iov_to_buf-and-iov_size-helpers.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-buffers-for-cont.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-input-from-the-g.patch [bz#574296]
  - kvm-virtio-serial-Apps-should-consume-all-data-that-gues.patch [bz#574296]
  - kvm-virtio-serial-Discard-data-that-guest-sends-us-when-.patch [bz#574296]
  - kvm-virtio-serial-Implement-flow-control-for-individual-.patch [bz#574296]
  - kvm-virtio-serial-Handle-output-from-guest-to-unintialis.patch [bz#574296]
  - kvm-virtio-serial-bus-wake-up-iothread-upon-guest-read-n.patch [bz#574296]
  - kvm-Bail-out-when-VCPU_CREATE-fails.patch [bz#587227]
  - Resolves: bz#574296
    (Fix migration for virtio-serial after port hot-plug/hot-unplug operations)
  - Resolves: bz#587227
    (Fix segfault when creating more vcpus than allowed.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.49.el6
changelog:
  - kvm-block-Free-iovec-arrays-allocated-by-multiwrite_merg.patch [bz#586572]
  - Resolves: bz#586572
    (virtio-blk multiwrite merge memory leak)
  - Force spice to be enabled and fix BuildRequires to use spice-server-devel
  - Resolves: bz#588904
    (qemu-kvm builds without spice support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.50.el6
changelog:
  - kvm-vl.c-fix-BZ-588828-endless-loop-caused-by-non-option.patch [bz#588828]
  - Resolves: bz#588828
    (endless loop when parsing of command line with bare image argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.51.el6
changelog:
  - kvm-fdc-fix-drive-property-handling.patch [bz#584902]
  - Resolves: bz#584902
    (Cannot associate drive with a floppy device using -global)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.52.el6
changelog:
  - kvm-qemu-img-use-the-heap-instead-of-the-huge-stack-arra.patch [bz#585837]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#585837]
  - Resolves: bz#585837
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.53.el6
changelog:
  - kvm-virtio-blk-Fix-use-after-free-in-error-case.patch [bz#578448]
  - kvm-block-Fix-multiwrite-error-handling.patch [bz#578448]
  - kvm-Fix-boot-once-option.patch [bz#579692]
  - kvm-QError-New-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QMP-Use-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QError-Improve-QERR_QMP_BAD_INPUT_OBJECT-desc.patch [bz#573578]
  - kvm-QMP-Check-arguments-member-s-type.patch [bz#573578]
  - kvm-QMP-Introduce-RESUME-event.patch [bz#590102]
  - kvm-pci-irq_state-vmstate-breakage.patch [bz#588133]
  - Resolves: bz#573578
    (Segfault when migrating via QMP command interface)
  - Resolves: bz#578448
    (qemu-kvm segfault when nfs restart(without using werror&rerror))
  - Resolves: bz#579692
    (qemu-kvm "-boot once=drives" couldn't function properly)
  - Resolves: bz#588133
    (RHEL5.4 guest can lose virtio networking during migration)
  - Resolves: bz#590102
    (QMP: Backport RESUME event)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.54.el6
changelog:
  - kvm-qemu-config-qemu_read_config_file-reads-the-normal-c.patch [bz#588756]
  - kvm-qemu-config-Make-qemu_config_parse-more-generic.patch [bz#588756]
  - kvm-blkdebug-Basic-request-passthrough.patch [bz#588756]
  - kvm-blkdebug-Inject-errors.patch [bz#588756]
  - kvm-Make-qemu-config-available-for-tools.patch [bz#588756]
  - kvm-blkdebug-Add-events-and-rules.patch [bz#588756]
  - kvm-qcow2-Trigger-blkdebug-events.patch [bz#588756]
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#588762]
  - kvm-qcow2-rename-two-QCowAIOCB-members.patch [bz#588762]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#588762]
  - kvm-qcow2-Remove-request-from-in-flight-list-after-error.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#588762]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#588762]
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#588762]
  - kvm-Add-qemu-error.o-only-once-to-target-list.patch [bz#591061]
  - kvm-block-Fix-bdrv_commit.patch [bz#589439]
  - kvm-fix-80000001.EDX-supported-bit-filtering.patch [bz#578106]
  - kvm-fix-CPUID-vendor-override.patch [bz#591604]
  - Resolves: bz#578106
    (call trace when boot guest with -cpu host)
  - Resolves: bz#588756
    (blkdebug is missing)
  - Resolves: bz#588762
    (Backport qcow2 fixes)
  - Resolves: bz#589439
    (Qcow2 snapshot got corruption after commit using block device)
  - Resolves: bz#591061
    (make fails to build after make clean)
  - Resolves: bz#591604
    (cannot override cpu vendor from the command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.55.el6
changelog:
  - kvm-turn-off-kvmclock-when-resetting-cpu.patch [bz#588884]
  - kvm-virtio-blk-Avoid-zeroing-every-request-structure.patch [bz#593369]
  - Resolves: bz#588884
    (Rebooting a kernel with kvmclock enabled, into a kernel with kvmclock disabled, causes random crashes)
  - Resolves: bz#593369
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.56.el6
changelog:
  - kvm-dmg-fix-open-failure.patch [bz#580363]
  - kvm-block-get-rid-of-the-BDRV_O_FILE-flag.patch [bz#580363]
  - kvm-block-Convert-first_drv-to-QLIST.patch [bz#580363]
  - kvm-block-separate-raw-images-from-the-file-protocol.patch [bz#580363]
  - kvm-block-Split-bdrv_open.patch [bz#580363]
  - kvm-block-Avoid-forward-declaration-of-bdrv_open_common.patch [bz#580363]
  - kvm-block-Open-the-underlying-image-file-in-generic-code.patch [bz#580363]
  - kvm-block-bdrv_has_zero_init.patch [bz#580363]
  - kvm-block-Do-not-export-bdrv_first.patch [bz#590998]
  - kvm-block-Convert-bdrv_first-to-QTAILQ.patch [bz#590998]
  - kvm-block-Add-wr_highest_sector-blockstat.patch [bz#590998]
  - Resolves: bz#580363
    (Error while creating raw image on block device)
  - Resolves: bz#590998
    (qcow2 high watermark)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.57.el6
changelog:
  - kvm-stash-away-SCM_RIGHTS-fd-until-a-getfd-command-arriv.patch [bz#582684]
  - Resolves: bz#582684
    (Monitor: getfd command is broken)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.58.el6
changelog:
  - kvm-Fix-segfault-after-device-assignment-hot-remove.patch [bz#582874]
  - Resolves: bz#582874
    (Guest hangs during restart after hot unplug then hot plug physical NIC card)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.59.el6
changelog:
  - kvm-pci-cleanly-backout-of-pci_qdev_init.patch [bz#590884]
  - kvm-ide-Fix-ide_dma_cancel.patch [bz#593287]
  - Resolves: bz#590884
    (bogus 'info pci' state when hot-added assigned device fails to initialize)
  - Resolves: bz#593287
    (Failed asserting during ide_dma_cancel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.60.el6
changelog:
  - kvm-spice-vmc-add-copyright.patch [bz#576488]
  - kvm-spice-vmc-remove-debug-prints-and-defines.patch [bz#576488]
  - kvm-spice-vmc-add-braces-to-single-line-if-s.patch [bz#576488]
  - kvm-spice-vmc-s-SpiceVirtualChannel-SpiceVMChannel-g.patch [bz#576488]
  - kvm-spice-vmc-s-spice_virtual_channel-spice_vmc-g.patch [bz#576488]
  - kvm-spice-vmc-all-variables-of-type-SpiceVMChannel-renam.patch [bz#576488]
  - kvm-spice-vmc-remove-meaningless-cast-of-void.patch [bz#576488]
  - kvm-spice-vmc-add-spice_vmc_ring_t-fix-write-function.patch [bz#576488]
  - kvm-spice-vmc-don-t-touch-guest_out_ring-on-unplug.patch [bz#576488]
  - kvm-spice-vmc-VirtIOSerialPort-vars-renamed-to-vserport.patch [bz#576488]
  - kvm-spice-vmc-add-nr-property.patch [bz#576488]
  - kvm-spice-vmc-s-SPICE_VM_CHANNEL-SPICE_VMC-g.patch [bz#576488]
  - kvm-spice-vmc-add-vmstate.-saves-active_interface.patch [bz#576488]
  - kvm-spice-vmc-rename-guest-device-name-to-com.redhat.spi.patch [bz#576488]
  - kvm-spice-vmc-remove-unused-property-name.patch [bz#576488]
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.61.el6
changelog:
  - Add "file" format to bdrv whitelist
  - Resolves: bz#593909
    (VM can not start by using qemu-kvm-0.12.1.2-2.56.el6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.62.el6
changelog:
  - kvm-block-add-logical_block_size-property.patch [bz#566785]
  - kvm-virtio-serial-bus-fix-ports_map-allocation.patch [bz#591176]
  - kvm-Move-cpu-model-config-file-to-agree-with-rpm-build-B.patch [bz#569661]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)
  - Resolves: bz#591176
    (migration fails since virtio-serial-bus is using uninitialized memory)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.63.el6
changelog:
  - kvm-fix-undefined-shifts-by-32.patch [bz#590922]
  - kvm-qemu-char.c-drop-debug-printfs-from-qemu_chr_parse_c.patch [bz#590922]
  - kvm-Fix-corner-case-in-chardev-udp-parameter.patch [bz#590922]
  - kvm-pci-passthrough-zap-option-rom-scanning.patch [bz#590922]
  - kvm-UHCI-spurious-interrupt-fix.patch [bz#590922]
  - kvm-Fix-SIGFPE-for-vnc-display-of-width-height-1.patch [bz#590922]
  - kvm-spice-vmc-remove-ringbuffer.patch [bz#589670]
  - kvm-spice-vmc-add-dprintfs.patch [bz#589670]
  - Resolves: bz#589670
    (spice: Ensure ring data is save/restored on migration)
  - Related: bz#590922
    (backport qemu-kvm-0.12.4 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.64.el6
changelog:
  - kvm-qemu-kvm-fix-crash-on-reboot-with-vhost-net.patch [bz#585940]
  - Related: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.65.el6
changelog:
  - kvm-qcow2-Fix-creation-of-large-images.patch [bz#577106]
  - kvm-vnc-sync-lock-modifier-state-on-connect.patch [bz#569767]
  - kvm-json-lexer-Initialize-x-and-y.patch [bz#589952]
  - kvm-json-lexer-Handle-missing-escapes.patch [bz#589952]
  - kvm-qjson-Handle-f.patch [bz#589952]
  - kvm-json-lexer-Drop-buf.patch [bz#589952]
  - kvm-json-streamer-Don-t-use-qdict_put_obj.patch [bz#589952]
  - kvm-block-fix-sector-comparism-in-multiwrite_req_compare.patch [bz#596119]
  - kvm-block-Fix-multiwrite-with-overlapping-requests.patch [bz#596119]
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#577106
    (Abort/Segfault when creating qcow2 format image with 512b cluster size)
  - Resolves: bz#589952
    (QMP breaks when issuing any command with a backslash)
  - Resolves: bz#596119
    (Possible corruption after block request merge)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.66.el6
changelog:
  - kvm-device-assignment-use-stdint-types.patch [bz#595495]
  - kvm-device-assignment-Don-t-use-libpci.patch [bz#595495]
  - kvm-device-assignment-add-config-fd-qdev-property.patch [bz#595495]
  - Resolves: bz#595495
    (Fail to hotplug pci device to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.67.el6
changelog:
  - kvm-qemu-address-todo-comment-in-exec.c.patch [bz#595301]
  - Resolves: bz#595301
    (QEMU terminates without warning with virtio-net and SMP enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.68.el6
changelog:
  - kvm-virtio-blk-fix-barrier-support.patch [bz#595813]
  - Resolves: bz#595813
    (virtio-blk doesn't handle barriers correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.69.el6
changelog:
  - Changes to make-release script with no resulting changes on binary package
  - kvm-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#595287]
  - Resolves: bz#595287
    (virtio net/vhost net speed enhancements from upstream kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.70.el6
changelog:
  - kvm-virtio-invoke-set_features-on-load.patch [bz#595263]
  - kvm-virtio-net-return-with-value-in-void-function.patch [bz#595263]
  - kvm-vhost-net-fix-reversed-logic-in-mask-notifiers.patch [bz#585940]
  - kvm-hpet-Disable-for-Red-Hat-Enterprise-Linux.patch [bz#595130]
  - ksmtuned: typo MemCached -> Cached [bz#597005]
  - kvm-virtio-net-stop-vhost-backend-on-vmstop.patch [bz#598896]
  - kvm-msix-fix-msix_set-unset_mask_notifier.patch [bz#598896]
  - Resolves: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)
  - Resolves: bz#595130
    (Disable hpet by default)
  - Resolves: bz#595263
    (virtio net lacks upstream fixes as of may 24)
  - Resolves: bz#597005
    (ksmtune: typo: MemCached -> Cached)
  - Resolves: bz#598896
    (migration breaks networking with vhost-net)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.71.el6
changelog:
  - kvm-device-assignment-fix-failure-to-exit-on-shared-IRQ.patch [bz#585310]
  - kvm-doc-Fix-host-forwarding-monitor-command-documentatio.patch [bz#588719]
  - kvm-doc-Fix-acl-monitor-command-documentation.patch [bz#588719]
  - kvm-doc-Heading-for-monitor-command-cpu-got-lost-restore.patch [bz#588719]
  - kvm-doc-Clean-up-monitor-command-function-index.patch [bz#588719]
  - kvm-fix-info-cpus-halted-state-reporting.patch [bz#593769]
  - kvm-sysemu-Export-no_shutdown.patch [bz#559618]
  - kvm-Monitor-Return-before-exiting-with-quit.patch [bz#559618]
  - kvm-QMP-Add-Downstream-extension-of-QMP-to-spec.patch [bz#566291]
  - kvm-Revert-PCI-Convert-pci_device_hot_add-to-QObject.patch [bz#580365]
  - kvm-Revert-monitor-Convert-do_pci_device_hot_remove-to-Q.patch [bz#580365]
  - kvm-drive-allow-rerror-werror-and-readonly-for-if-none.patch [bz#565609 bz#593256]
  - kvm-qdev-properties-Fix-u-intXX-parsers.patch [bz#596093]
  - kvm-vnc-factor-out-vnc_desktop_resize.patch [bz#590070]
  - kvm-vnc-send-desktopresize-event-as-reply-to-set-encodin.patch [bz#590070]
  - kvm-vnc-keep-track-of-client-desktop-size.patch [bz#590070]
  - kvm-vnc-don-t-send-invalid-screen-updates.patch [bz#590070]
  - kvm-vnc-move-size-changed-check-into-the-vnc_desktop_res.patch [bz#590070]
  - kvm-check-for-active_console-before-using-it.patch [bz#591759]
  - Resolves: bz#559618
    (QMP: Fix 'quit' to return success before exiting)
  - Resolves: bz#565609
    (Unable to use werror/rerror with  -drive syntax using if=none)
  - Resolves: bz#566291
    (QMP: Support vendor extensions)
  - Resolves: bz#580365
    (QMP: pci_add/pci_del conversion should be reverted)
  - Resolves: bz#585310
    (qemu-kvm does not exit when device assignment fails due to IRQ sharing)
  - Resolves: bz#588719
    (Fix monitor command documentation)
  - Resolves: bz#590070
    (QEMU misses DESKTOP-RESIZE event if it is triggered during client connection initialization)
  - Resolves: bz#591759
    (Segmentation fault when using vnc to view guest without vga card)
  - Resolves: bz#593256
    (Unable to set readonly flag for floppy disks)
  - Resolves: bz#593769
    ("info cpus" doesn't show halted state)
  - Resolves: bz#596093
    (16bit integer qdev properties are not parsed correctly.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.72.el6
changelog:
  - kvm-Monitor-Make-RFQDN_REDHAT-public.patch [bz#586349]
  - kvm-QMP-Add-error-reason-to-BLOCK_IO_ERROR-event.patch [bz#586349]
  - kvm-virtio-net-truncating-packet.patch [bz#591494]
  - kvm-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#600203]
  - kvm-device-assignment-don-t-truncate-MSIX-capabilities-t.patch [bz#596315]
  - kvm-If-a-USB-keyboard-is-unplugged-the-keyboard-eventhan.patch [bz#561433]
  - Resolves: bz#561433
    (Segfault when keyboard is removed)
  - Resolves: bz#586349
    (BLOCK_IO_ERROR event does not provide the errno that caused it.)
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#596315
    (device assignment truncates MSIX table size)
  - Resolves: bz#600203
    (vhost net new userspace on old kernel: 95: falling back on userspace virtio)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.73.el6
changelog:
  - kvm-net-Fix-hotplug-with-pci_add.patch [bz#599460]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.74.el6
changelog:
  - kvm-raw-posix-Detect-CDROM-via-ioctl-on-linux.patch [bz#593758]
  - kvm-block-Remove-special-case-for-vvfat.patch [bz#593758]
  - kvm-block-Make-find_image_format-return-raw-BlockDriver-.patch [bz#593758]
  - kvm-block-Add-missing-bdrv_delete-for-SG_IO-BlockDriver-.patch [bz#593758]
  - kvm-block-Assume-raw-for-drives-without-media.patch [bz#593758]
  - Resolves: bz#593758
    (qemu fails to start with -cdrom /dev/sr0 if no media inserted)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.75.el6
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#598407]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#598507]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#598507]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#598507]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#598507]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#598507]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#598507]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#598507]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Avoid-shadowing-variable-in-alloc_clusters_nor.patch [bz#598507]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#598507]
  - kvm-make-release-make-mtime-owner-group-consistent.patch
  - Resolves: bz#598407
    (qcow2 corruption bug in refcount table growth)
  - Resolves: bz#598507
    (Backport qcow2 error path fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.76.el6
changelog:
  - kvm-fix-vnc-memory-corruption-with-width-1400.patch [bz#602724]
  - kvm-net-Fix-VM-start-with-net-none.patch [bz#599460]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-drive_add-command-for-Red-Hat-Enterpr.patch [bz#602590]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)
  - Resolves: bz#602590
    (Disable pci_add, pci_del, drive_add)
  - Resolves: bz#602724
    (VNC disconnect segfault on KVM video consoles)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.77.el6
changelog:
  - kvm.modules: autoload vhost-net module too [bz#596891]
  - Resolves: bz#596891
    (vhost-net module should be loaded automatically)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.78.el6
changelog:
  - kvm-block-read-only-open-cdrom-as-read-only-when-using-m.patch [bz#602026]
  - kvm-acpi_piix4-save-gpe-and-pci-hotplug-slot-status.patch [bz#598022]
  - kvm-Don-t-check-for-bus-master-for-old-guests.patch [bz#596014]
  - kvm-Make-IDE-drives-defined-with-device-visible-to-cmos_.patch [bz#597147]
  - Resolves: bz#596014
    (hot add virtio-blk-pci via device_add lead to virtio network lost)
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)
  - Resolves: bz#598022
    (Hot-added device is not visible in guest after live-migration.)
  - Resolves: bz#602026
    (Cannot change cdrom by "change device filename [format] " in (qemu) command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.79.el6
changelog:
  - kvm-Make-geometry-of-IDE-drives-defined-with-device-visi.patch [bz#597147]
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.80.el6
changelog:
  - don't package kvmtrace anymore
  - Resolves: bz#605426
    (obsolete kvmtrace binary is still being packaged)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.81.el6
changelog:
  - kvm-virtio-Enable-the-PUBLISH_USED-feature-by-default-fo.patch [bz#602417]
  - kvm-do-not-enter-vcpu-again-if-it-was-stopped-during-IO.patch [bz#595647]
  - Resolves: bz#595647
    (Windows guest with qxl driver can't get into S3 state)
  - Resolves: bz#602417
    (Enable VIRTIO_RING_F_PUBLISHED bit for all virtio devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.82.el6
changelog:
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#581789]
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#596609]
  - kvm-Make-netdev_del-delete-the-netdev-even-when-it-s-in-.patch [bz#596274]
  - kvm-device-assignment-msi-PBA-is-long.patch [bz#605359]
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#604210]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#604210]
  - kvm-qcow2-Fix-error-handling-during-metadata-preallocati.patch [bz#604210]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#607200]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#607200]
  - kvm-virtio-serial-Fix-compat-property-name.patch [bz#607263]
  - kvm-rtc-Remove-TARGET_I386-from-qemu-config.c-enables-dr.patch [bz#606733]
  - Resolves: bz#581789
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#596274
    (QMP: netdev_del sometimes fails claiming the device is in use)
  - Resolves: bz#596609
    (Live migration failed when migration during boot)
  - Resolves: bz#604210
    (Segmentation fault when check  preallocated qcow2 image on lvm.)
  - Resolves: bz#605359
    (Fix MSIX regression from bz595495)
  - Resolves: bz#606733
    (Unable to set the driftfix parameter)
  - Resolves: bz#607200
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#607263
    (Unable to launch QEMU with -M pc-0.12 and  virtio serial)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.83.el6
changelog:
  - kvm-add-some-tests-for-invalid-JSON.patch [bz#585009]
  - kvm-implement-optional-lookahead-in-json-lexer.patch [bz#585009]
  - kvm-remove-unnecessary-lookaheads.patch [bz#585009]
  - kvm-per-machine-type-smbios-Type-1-smbios-values.patch [bz#605704]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#607688]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#607688]
  - kvm-block-allow-filenames-with-colons-again-for-host-dev.patch [bz#599122]
  - Resolves: bz#585009
    (QMP: input needs trailing  char)
  - Resolves: bz#599122
    (Unable to launch QEMU with a guest disk filename containing a ':')
  - Resolves: bz#605704
    (qemu-kvm: set per-machine-type smbios strings)
  - Resolves: bz#607688
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.84.el6
changelog:
  - kvm-Add-KVM-paravirt-cpuid-leaf.patch [bz#606084]
  - Resolves: bz#606084
    (Allow control of kvm cpuid option via -cpu flag)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.85.el6
changelog:
  - kvm-Remove-usage-of-CONFIG_RED_HAT_DISABLED.patch [bz#605638]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#605638]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#605638]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#607244]
  - kvm-QError-Introduce-QERR_DEVICE_INIT_FAILED_2.patch [bz#596279]
  - kvm-dev-assignment-Report-IRQ-assign-errors-in-QMP.patch [bz#596279]
  - Resolves: bz#596279
    (QMP: does not report the real cause of PCI device assignment failure)
  - Resolves: bz#605638
    (Remove unsupported monitor commands from qemu-kvm)
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.86.el6
changelog:
  - kvm-net-delete-QemuOpts-when-net_client_init-fails.patch [bz#603851]
  - kvm-QMP-Fix-error-reporting-in-the-async-API.patch [bz#587382]
  - kvm-QMP-Remove-leading-whitespace-in-package.patch [bz#580648]
  - kvm-Add-optional-dump-of-default-config-file-paths-v2-BZ.patch [bz#601540]
  - Resolves: bz#580648
    (QMP: Bad package version in greeting message)
  - Resolves: bz#587382
    (QMP: balloon command may not report an error)
  - Resolves: bz#601540
    (qemu requires ability to verify location of cpu model definition file..)
  - Resolves: bz#603851
    (QMP: Can't reuse same 'id' when netdev_add fails)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.87.el6
changelog:
  - kvm-qxl-drop-check-for-depths-32.patch [bz#597198]
  - kvm-spice-handle-16-bit-color-depth.patch [bz#597198 bz#600205]
  - kvm-device-assignment-Don-t-deassign-when-the-assignment.patch [bz#597968]
  - kvm-block-fix-physical_block_size-calculation.patch [bz#566785]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-Intel-models.patch [bz#601517]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#597198
    (qxl: 16bpp vga mode is broken.)
  - Resolves: bz#597968
    (Should not allow one physical NIC card to be assigned to one guest for many times)
  - Resolves: bz#600205
    (Live migration cause qemu-kvm Segmentation fault (core dumped)by using "-vga std")
  - Resolves: bz#601517
    (x2apic needs to be present in all new Intel cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.88.el6
changelog:
  - kvm-Exit-if-incoming-migration-fails.patch [bz#570174]
  - kvm-Factorize-common-migration-incoming-code.patch [bz#570174]
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.89.el6
changelog:
  - kvm-device-assignment-be-more-selective-in-interrupt-dis.patch [bz#605361]
  - Resolves: bz#605361
    (82576 physical function device assignment doesn't work with win7)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.90.el6
changelog:
  - kvm-device-assignment-Avoid-munmapping-the-real-MSIX-are.patch [bz#572043]
  - kvm-device-assignment-Cleanup-on-exit.patch [bz#572043]
  - Resolves: bz#572043
    (Guest gets segfault when do multiple device hot-plug and hot-unplug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.91.el6
changelog:
  - kvm-doc-Update-monitor-info-subcommands.patch [bz#582262]
  - kvm-Fix-typo-in-balloon-help.patch [bz#582262]
  - kvm-monitor-Reorder-info-documentation.patch [bz#582262]
  - kvm-QMP-Introduce-commands-documentation.patch [bz#582262]
  - kvm-QMP-Sync-documentation-with-RHEL6-only-changes.patch [bz#582262]
  - kvm-Monitor-Drop-QMP-documentation-from-code.patch [bz#582262]
  - kvm-hxtool-Fix-line-number-reporting-on-SQMP-EQMP-errors.patch [bz#582262]
  - kvm-monitor-New-command-__com.redhat_drive_add.patch [bz#581963]
  - kvm-Fix-driftfix-option.patch [bz#611229]
  - Resolves: bz#581963
    (QMP: missing drive_add command in JSON mode)
  - Resolves: bz#582262
    (QMP: Missing commands doc)
  - Resolves: bz#611229
    (-rtc cmdline changes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.92.el6
changelog:
  - build-time-only fix: fix the tarball-generation make-release script for newer git versions
    (kvm-make-release-fix-mtime-on-rhel6-beta.patch)
  - Related: bz#581963 bz#582262 bz#611229


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.93.el6
changelog:
  - kvm-make-rtc-alatm-work.patch [bz#598836]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#612164]
  - kvm-qcow2-vdi-Change-check-to-distinguish-error-cases.patch [bz#612164]
  - Resolves: bz#598836
    (RHEL 6.0 RTC Alarm unusable in vm)
  - Resolves: bz#612164
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.94.el6
changelog:
  - kvm-Revert-ide-save-restore-pio-atapi-cmd-transfer-field.patch [bz#612481]
  - kvm-vmstate-add-subsections-code.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-pio-operation.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-a-bmdma-transfer.patch [bz#612481]
  - kvm-Initial-documentation-for-migration-Signed-off-by-Ju.patch [bz#612481]
  - kvm-Disable-non-rhel-machine-types-pc-0.12-pc-0.11-pc-0..patch [bz#607263]
  - Resolves: bz#607263
    (Remove -M pc-0.12 support)
  - Resolves: bz#612481
    (Enable migration subsections)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.95.el6
changelog:
  - kvm-Move-CPU-definitions-to-usr-share-.-BZ-610805.patch [bz#610805]
  - kvm-QEMUFileBuffered-indicate-that-we-re-ready-when-the-.patch [bz#609261]
  - kvm-device-assignment-Better-fd-tracking.patch [bz#611715]
  - Resolves: bz#609261
    (Exec outgoing migration is too slow)
  - Resolves: bz#610805
    (Move CPU definitions to /usr/share/...)
  - Resolves: bz#611715
    (qemu-kvm gets no responsive  when do  hot-unplug pass-through device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.96.el6
changelog:
  - fix some errors in ksmd.init [bz#570467]
  - fix some errors in ksmtuned.init [bz#579883]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-AMD-models.-.patch [bz#613884]
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#579883
    (init script doesn't stop ksmd)
  - Resolves: bz#613884
    (x2apic needs to be present in all new AMD cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.97.el6
changelog:
  - kvm-block-Fix-early-failure-in-multiwrite.patch [bz#602209]
  - kvm-block-Handle-multiwrite-errors-only-when-all-request.patch [bz#602209]
  - kvm-migration-respect-exit-status-with-exec.patch [bz#584372]
  - kvm-set-proper-migration-status-on-write-error-v3.patch [bz#584372]
  - kvm-Set-SMBIOS-vendor-to-QEMU-for-RHEL5-machine-types.patch [bz#614377]
  - kvm-Don-t-reset-bs-is_temporary-in-bdrv_open_common.patch [bz#611797]
  - kvm-Change-default-CPU-model-qemu64-to-model-6.patch [bz#614537]
  - kvm-set-model-6-on-Intel-CPUs-on-cpu-x86_64.conf.patch [bz#614537]
  - kvm-vhost-fix-miration-during-device-start.patch [bz#615228]
  - Resolves: bz#584372
    (Fails to detect errors when using exec: based migration)
  - Resolves: bz#602209
    (Core dumped during Guest installation)
  - Resolves: bz#611797
    (qemu does not call unlink() on temp files in snapshot mode)
  - Resolves: bz#614377
    (Windows 7 requires re-activation when migrated from RHEL5 to RHEL6)
  - Resolves: bz#614537
    (Skype crashes on VM.)
  - Resolves: bz#615228
    (oom in vhost_dev_start)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.98.el6
changelog:
  - kvm-ram_blocks-Convert-to-a-QLIST.patch [bz#596328]
  - kvm-Remove-uses-of-ram.last_offset-aka-last_ram_offset.patch [bz#596328]
  - kvm-pc-Allocate-all-ram-in-a-single-qemu_ram_alloc.patch [bz#596328]
  - kvm-qdev-Add-a-get_dev_path-function-to-BusInfo.patch [bz#596328]
  - kvm-pci-Implement-BusInfo.get_dev_path.patch [bz#596328]
  - kvm-savevm-Add-DeviceState-param.patch [bz#596328]
  - kvm-savevm-Make-use-of-DeviceState.patch [bz#596328]
  - kvm-eepro100-Add-a-dev-field-to-eeprom-new-free-function.patch [bz#596328]
  - kvm-virtio-net-Incorporate-a-DeviceState-pointer-and-let.patch [bz#596328]
  - kvm-qemu_ram_alloc-Add-DeviceState-and-name-parameters.patch [bz#596328]
  - kvm-ramblocks-Make-use-of-DeviceState-pointer-and-BusInf.patch [bz#596328]
  - kvm-savevm-Migrate-RAM-based-on-name-offset.patch [bz#596328]
  - kvm-savevm-Use-RAM-blocks-for-basis-of-migration.patch [bz#596328]
  - kvm-savevm-Create-a-new-continue-flag-to-avoid-resending.patch [bz#596328]
  - kvm-qemu_ram_free-Implement-it.patch [bz#596328]
  - kvm-pci-Free-the-space-allocated-for-the-option-rom-on-r.patch [bz#596328]
  - kvm-ramblocks-No-more-being-lazy-about-duplicate-names.patch [bz#596328]
  - kvm-savevm-Reset-last-block-info-at-beginning-of-each-sa.patch [bz#616525]
  - kvm-block-Change-bdrv_commit-to-handle-multiple-sectors-.patch [bz#615152]
  - kvm-Revert-virtio-Enable-the-PUBLISH_USED-feature-by-def.patch [bz#616501]
  - kvm-Revert-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#616501]
  - kvm-Revert-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#616501]
  - kvm-savevm-Fix-memory-leak-of-compat-struct.patch [bz#596328]
  - kvm-virtio-blk-Create-exit-function-to-unregister-savevm.patch [bz#580010]
  - Resolves: bz#580010
    (migration failed after pci_add and pci_del a virtio storage device)
  - Resolves: bz#596328
    ([RHEL6 Beta1] : KVM guest remote migration fails with pci device hotplug.)
  - Resolves: bz#615152
    (rhel 6 performance worse than rhel5.6 when committing 1G  changes recorded in  snapshot in its base image.)
  - Resolves: bz#616501
    (publish used ABI incompatible with future guests)
  - Resolves: bz#616525
    (savevm needs to reset block info on each new save)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.99.el6
changelog:
  - kvm-Documentation-Add-a-warning-message-to-qemu-kvm-help.patch [bz#596232]
  - Resolves: bz#596232
    (Update docs to exclude unsupported options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.100.el6
changelog:
  - kvm-Disable-SCSI.patch [bz#617534]
  - kvm-spice-don-t-force-fullscreen-redraw-on-display-resiz.patch [bz#612074]
  - kvm-KVM_GET_SUPPORTED_CPUID-doesn-t-return-all-host-cpui.patch [bz#616188]
  - kvm-Do-not-try-loading-option-ROM-for-hotplug-PCI-device.patch [bz#612696]
  - Resolves: bz#612074
    (core dumped while live migration with spice)
  - Resolves: bz#612696
    (virsh attach-device crash kvm guest.)
  - Resolves: bz#616188
    (KVM_GET_SUPPORTED_CPUID doesn't return all host cpuid flags..)
  - Resolves: bz#617534
    (Disable SCSI and usb-storage)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.101.el6
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#591494]
  - kvm-avoid-canceling-ide-dma-rediff.patch [bz#617414]
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#617414
    (avoid canceling in flight ide dma)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.102.el6
changelog:
  - kvm-spice-Rename-conflicting-ramblock.patch [bz#617463]
  - kvm-block-default-to-0-minimal-optimal-I-O-size.patch [bz#617271]
  - Resolves: bz#617271
    (RHEL6 qemu-kvm guest gets partitioned at sector 63)
  - Resolves: bz#617463
    (Coredump occorred when enable qxl)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.103.el6
changelog:
  - kvm-migration-Accept-cont-only-after-successful-incoming.patch [bz#581555]
  - Resolves: bz#581555
    (race between qemu monitor "cont" and incoming migration can cause failed restore/migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.104.el6
changelog:
  - kvm-vhost_dev_unassign_memory-don-t-assert-if-removing-f.patch [bz#617085]
  - Resolves: bz#617085
    (core dumped when add netdev to VM with vhost on)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.105.el6
changelog:
  - kvm-device-assignment-Use-PCI-I-O-port-sysfs-resource-fi.patch [bz#615214]
  - kvm-block-Change-bdrv_eject-not-to-drop-the-image.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#615214
    ([VT-d] Booting RHEL6 guest with Intel 82541PI NIC assigned by libvirt cause qemu crash)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.106.el6
changelog:
  - kvm-device-assignment-Leave-option-ROM-space-RW-KVM-does.patch [bz#618788]
  - kvm-block-Fix-bdrv_has_zero_init.patch [bz#616890]
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619414]
  - kvm-Migration-reopen-block-devices-files.patch [bz#618601]
  - Resolves: bz#616890
    ("qemu-img convert" fails on block device)
  - Resolves: bz#618601
    (We need to reopen images after migration)
  - Resolves: bz#618788
    (device-assignment hangs with kvm_run: Bad address)
  - Resolves: bz#619414
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-6.0])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.107.el6
changelog:
  - kvm-Correct-cpuid-flags-and-model-fields-V2.patch [bz#613892 bz#618332]
  - Resolves: bz#613892
    ([SR-IOV]VF device can not start on 32bit Windows2008 SP2)
  - Resolves: bz#618332
    (CPUID_EXT_POPCNT enabled in qemu64 and qemu32 built-in models.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.108.el6
changelog:
  - kvm-Fix-migration-with-spice-enabled.patch [bz#618168]
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#607244]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#607244]
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)
  - Resolves: bz#618168
    (Qemu-kvm in the src host core dump when do migration by using spice)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.109.el6
changelog:
  - kvm-qdev-Reset-hotplugged-devices.patch [bz#607611]
  - kvm-Block-I-O-signals-in-audio-helper-threads.patch [bz#621161]
  - Resolves: bz#607611
    (pci hotplug of e1000, rtl8139 nic device fails for all guests.)
  - Resolves: bz#621161
    (qemu-kvm crashes with I/O Possible message)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.110.el6
changelog:
  - kvm-vhost-Fix-size-of-dirty-log-sync-on-resize.patch [bz#622356]
  - Resolves: bz#622356
    (Live migration failed during reboot due to vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.112.el6
changelog:
  - kvm-qemu-img-rebase-Open-new-backing-file-read-only.patch [bz#624666]
  - Resolves: bz#624666
    (qemu-img re-base broken on RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6
changelog:
  - kvm-disable-guest-provided-stats-on-info-ballon-monitor-.patch [bz#623903]
  - Resolves: bz#623903
    (query-balloon commmand didn't return on pasued guest cause virt-manger hang)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.114.el6
changelog:
  - fix ksmd.init "status" [bz#570467]
  - kvm-virtio-net-Make-tx_timer-timeout-configurable.patch [bz#624767]
  - kvm-virtio-net-Limit-number-of-packets-sent-per-TX-flush.patch [bz#624767]
  - kvm-virtio-net-Rename-tx_timer_active-to-tx_waiting.patch [bz#624767]
  - kvm-virtio-net-Introduce-a-new-bottom-half-packet-TX.patch [bz#624767]
  - kvm-spice-qxl-enable-some-highres-modes.patch [bz#482427]
  - kvm-add-MADV_DONTFORK-to-guest-physical-memory-v2.patch [bz#633699]
  - kvm-virtio-serial-Check-if-virtio-queue-is-ready-before-.patch [bz#596610]
  - kvm-virtio-serial-Assert-for-virtio-queue-ready-before-v.patch [bz#596610]
  - kvm-virtio-serial-Check-if-more-max_ports-specified-than.patch [bz#616703]
  - kvm-virtio-serial-Cleanup-on-device-hot-unplug.patch [bz#624396]
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#635354]
  - kvm-qxl-clear-dirty-rectangle-on-resize.patch [bz#617119]
  - kvm-VGA-Don-t-register-deprecated-VBE-range.patch [bz#625948]
  - kvm-BZ-619168-qemu-should-more-clearly-indicate-internal.patch [bz#619168]
  - kvm-fix-and-on-russian-keymap.patch [bz#639437]
  - Resolves: bz#482427
    (support high resolutions)
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#596610
    ("Guest moved used index from 0 to 61440" if remove virtio serial device before virtserialport)
  - Resolves: bz#616703
    (qemu-kvm core dump with virtio-serial-pci max-port greater than 31)
  - Resolves: bz#617119
    (Qemu becomes unresponsive during unattended_installation)
  - Resolves: bz#619168
    (qemu should more clearly indicate internal detection of this host out-of-memory condition at startup..)
  - Resolves: bz#624396
    (migration failed after hot-unplug virtserialport - Unknown savevm section or instance '0000:00:07.0/virtio-console' 0)
  - Resolves: bz#624767
    (Replace virtio-net TX timer mitigation with bottom half handler)
  - Resolves: bz#625948
    (qemu exits when hot adding rtl8139 nic to win2k8 guest)
  - Resolves: bz#633699
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#635354
    (Can not commit copy-on-write image's data to raw backing-image)
  - Resolves: bz#639437
    (Incorrect russian vnc keymap)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.115.el6
changelog:
  - kvm-spice-qxl-update-modes-ptr-in-post_load.patch [bz#631522]
  - kvm-spice-qxl-make-draw_area-and-vgafb-share-memory.patch [bz#631522]
  - Give a nicer message if retune is called while ksmtuned is off [bz#637976]
  - Resolves: bz#631522
    (spice: prepare qxl for 6.1 update.)
  - Resolves: bz#637976
    (ksmtuned: give a nicer message if retune is called while ksmtuned is off)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.116.el6
changelog:
  - ksmtuned: committed_memory of 0 qemus [bz#609016]
  - kvm-Fix-underflow-error-in-device-assignment-size-check.patch [bz#632054]
  - kvm-check-for-close-errors-on-qcow2_create.patch [bz#641127]
  - Resolves: bz#609016
    (incorrect committed memory on idle host)
  - Resolves: bz#632054
    ([Intel 6.0 Virt] guest bootup fail with intel 82574L NIC assigned)
  - Resolves: bz#641127
    (qemu-img ignores close() errors)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.117.el6
changelog:
  - kvm-savevm-Really-verify-if-a-drive-supports-snapshots.patch [bz#599307]
  - kvm-drop-boot-on-from-help-string.patch [bz#643681]
  - kvm-Fix-parameters-of-prctl.patch [bz#585910]
  - kvm-Ignore-SRAO-MCE-if-another-MCE-is-being-processed.patch [bz#585910]
  - kvm-Add-RAM-physical-addr-mapping-in-MCE-simulation.patch [bz#585910]
  - kvm-Add-savevm-loadvm-support-for-MCE.patch [bz#585910]
  - kvm-Fix-SRAO-SRAR-MCE-injecting-on-guest-without-MCG_SER.patch [bz#585910]
  - Resolves: bz#585910
    ([Intel 6.1 Bug] SRAO MCE in guest kills QEMU-KVM (qemu-kvm component))
  - Resolves: bz#599307
    (info snapshot return "bdrv_snapshot_list: error -95")
  - Resolves: bz#643681
    (Do not advertise boot=on capability to libvirt)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.118.el6
changelog:
  - kvm-net-delay-freeing-peer-host-device.patch [bz#634661]
  - kvm-QMP-Improve-debuggability-of-the-BLOCK_IO_ERROR-even.patch [bz#624607]
  - Resolves: bz#624607
    ([qemu] [rhel6] guest installation stop (pause) on 'eother' event over COW disks (thin-provisioning))
  - Resolves: bz#634661
    ([RHEL6 Snap13]: Hot-unplugging of virtio nic issue in Windows2008 KVM guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.119.el6
changelog:
  - kvm-bz-603413-e1000-secrc-support.patch [bz#603413]
  - kvm-net-properly-handle-illegal-fd-vhostfd-from-command-.patch [bz#581750]
  - kvm-Enable-non-page-boundary-BAR-device-assignment.patch [bz#647307]
  - kvm-Fix-build-failure-with-DEVICE_ASSIGNMENT_DEBUG.patch [bz#647307]
  - kvm-slow_map-minor-improvements-to-ROM-BAR-handling.patch [bz#647307]
  - kvm-device-assignment-Always-use-slow-mapping-for-PCI-op.patch [bz#647307]
  - kvm-e1000-Fix-TCP-checksum-overflow-with-TSO.patch [bz#648333]
  - kvm-device-assignment-Fix-slow-option-ROM-mapping.patch [bz#647307]
  - Resolves: bz#581750
    (Vhost: Segfault when assigning a none vhostfd)
  - Resolves: bz#603413
    (RHEL3.9 guest netdump hung with e1000)
  - Resolves: bz#647307
    (Support slow mapping of PCI Bars)
  - Resolves: bz#648333
    (TCP checksum overflows in qemu's e1000 emulation code when TSO is enabled in guest OS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.120.el6
changelog:
  - kvm-Fix-snapshot-deleting-images-on-disk-change.patch [bz#653582]
  - Resolves: bz#653582
    (Changing media with -snapshot deletes image file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.121.el6
changelog:
  - kvm-monitor-Rename-argument-type-b-to-f.patch [bz#625681]
  - kvm-monitor-New-argument-type-b-bool.patch [bz#625681]
  - kvm-monitor-Use-argument-type-b-for-set_link.patch [bz#625681]
  - kvm-monitor-Convert-do_set_link-to-QObject-QError.patch [bz#625681]
  - Resolves: bz#625681
    (RFE QMP: should have command to disconnect and connect network card for whql testing)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.122.el6
changelog:
  - kvm-cleanup-block-driver-option-handling-in-vl.c.patch [bz#653536]
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#653536]
  - kvm-move-unsafe-to-end-of-caching-modes-in-help.patch [bz#653536]
  - kvm-qemu-img-Eliminate-bdrv_new_open-code-duplication.patch [bz#653536]
  - kvm-qemu-img-Fix-BRDV_O_FLAGS-typo.patch [bz#653536]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#653536]
  - kvm-block-Fix-virtual-media-change-for-if-none.patch [bz#625319]
  - kvm-Check-for-invalid-initrd-file.patch [bz#624721]
  - kvm-qcow-qcow2-implement-bdrv_aio_flush.patch [bz#653972]
  - kvm-block-Remove-unused-s-hd-in-various-drivers.patch [bz#653972]
  - kvm-qcow2-Remove-unnecessary-flush-after-L2-write.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-write_refcount_block_entries.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-update_refcount.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-qcow2_alloc_clusters.patch [bz#653972]
  - kvm-qcow2-Get-rid-of-additional-sync-on-COW.patch [bz#653972]
  - kvm-cutils-qemu_iovec_copy-and-qemu_iovec_memset.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-read-requests.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-write-requests.patch [bz#653972]
  - kvm-kill-empty-index-on-qemu-doc.texi.patch [bz#604992]
  - kvm-add-VMSTATE_BOOL.patch [bz#645342]
  - kvm-Add-Intel-HD-Audio-support-to-qemu.patch [bz#645342]
  - Resolves: bz#604992
    (index is empty in qemu-doc.html)
  - Resolves: bz#624721
    ([qemu] [rhel6] bad error handling when qemu has no 'read' permissions over {kernel,initrd} files [pass boot options])
  - Resolves: bz#625319
    (Failed to update the media in floppy device)
  - Resolves: bz#645342
    (Implement QEMU driver for modern sound device like Intel HDA)
  - Resolves: bz#653536
    (qemu-img convert poor performance)
  - Resolves: bz#653972
    (qcow2: Backport performance related patches)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.123.el6
changelog:
  - kvm-qcow2-Implement-bdrv_truncate-for-growing-images.patch [bz#613893]
  - kvm-qemu-img-Add-resize-command-to-grow-shrink-disk-imag.patch [bz#613893]
  - kvm-qemu-img-Fix-copy-paste-bug-in-documentation.patch [bz#613893]
  - Resolves: bz#613893
    ([RFE] qemu-io enable truncate function for qcow2.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.124.el6
changelog:
  - kvm-Fix-compilation-error-missing-include-statement.patch [bz#608548]
  - kvm-use-qemu_blockalign-consistently.patch [bz#608548]
  - kvm-raw-posix-handle-512-byte-alignment-correctly.patch [bz#608548]
  - kvm-virtio-blk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-scsi-disk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-ide-propagate-the-required-alignment.patch [bz#608548]
  - kvm-Support-marking-a-device-as-non-migratable.patch [bz#635954]
  - kvm-device-assignment-Register-as-un-migratable.patch [bz#635954]
  - Resolves: bz#608548
    (QEMU doesn't respect hardware sector size of underlying block device when doing O_DIRECT)
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.125.el6
changelog:
  - kvm-New-option-fake-machine.patch [bz#658288]
  - spec file code for --enable-fake-machine [bz#658288]
  - Resolves: bz#658288
    (Include (disabled by default) -fake-machine patch on qemu-kvm RPM spec)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.126.el6
changelog:
  - kvm-Fix-build-problem-with-recent-compilers.patch [bz#662633]
  - kvm-vhost-fix-infinite-loop-on-error-path.patch [bz#628634]
  - Resolves: bz#628634
    (vhost_net: untested error handling in vhost_net_start)
  - Resolves: bz#662633
    (Fix build problem with recent compilers)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.127.el6
changelog:
  - kvm-pci-import-Linux-pci_regs.h.patch [bz#624790]
  - kvm-pci-s-PCI_SUBVENDOR_ID-PCI_SUBSYSTEM_VENDOR_ID-g.patch [bz#624790]
  - kvm-pci-use-pci_regs.h.patch [bz#624790]
  - kvm-pci-add-API-to-add-capability-at-a-known-offset.patch [bz#624790]
  - kvm-pci-consolidate-pci_add_capability_at_offset-into-pc.patch [bz#624790]
  - kvm-pci-pci_default_cap_write_config-ignores-wmask.patch [bz#624790]
  - kvm-pci-Remove-pci_enable_capability_support.patch [bz#624790]
  - kvm-device-assignment-Use-PCI-capabilities-support.patch [bz#624790]
  - kvm-pci-Replace-used-bitmap-with-config-byte-map.patch [bz#624790]
  - kvm-pci-Remove-cap.length-cap.start-cap.supported.patch [bz#624790]
  - kvm-device-assignment-Move-PCI-capabilities-to-match-phy.patch [bz#624790]
  - kvm-pci-Remove-capability-specific-handlers.patch [bz#624790]
  - kvm-device-assignment-Make-use-of-config_map.patch [bz#624790]
  - kvm-device-assignment-Fix-off-by-one-in-header-check.patch [bz#624790]
  - kvm-pci-Remove-PCI_CAPABILITY_CONFIG_.patch [bz#624790]
  - kvm-pci-Error-on-PCI-capability-collisions.patch [bz#624790]
  - kvm-device-assignment-Error-checking-when-adding-capabil.patch [bz#624790]
  - kvm-device-assignment-pass-through-and-stub-more-PCI-cap.patch [bz#624790]
  - Resolves: bz#624790
    (pass through fails with KVM using Neterion Inc's X3100 Series 10GbE PCIe I/O Virtualized Server Adapter in Multifunction mode.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.128.el6
changelog:
  - kvm-virtio-invoke-set_status-callback-on-reset.patch [bz#623735]
  - kvm-virtio-net-unify-vhost-net-start-stop.patch [bz#623735]
  - kvm-tap-clear-vhost_net-backend-on-cleanup.patch [bz#623735]
  - kvm-tap-make-set_offload-a-nop-after-netdev-cleanup.patch [bz#623735]
  - Resolves: bz#623735
    (hot unplug of vhost net virtio NIC causes qemu segfault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.129.el6
changelog:
  - kvm-let-management-choose-whether-transparent-huge-pages.patch [bz#628308]
  - kvm-tap-generalize-code-for-different-vnet-header-len.patch [bz#616659]
  - kvm-tap-add-APIs-for-vnet-header-length.patch [bz#616659]
  - kvm-vhost_net-mergeable-buffers-support.patch [bz#616659]
  - kvm-vhost-Fix-address-calculation-in-vhost_dev_sync_regi.patch [bz#623552]
  - Resolves: bz#616659
    (mrg buffers: migration breaks between systems with/without vhost)
  - Resolves: bz#623552
    (SCP image fails from host to guest with vhost on when do migration)
  - Resolves: bz#628308
    ([RFE] let management choose whether transparent huge pages are used)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.130.el6
changelog:
  - kvm-Bug-632257-Duplicate-CPU-fea.tures-in-cpu-x86_64.con.patch [bz#632257]
  - kvm-BZ-647308-Support-Westmere-as-a-CPU-model-or-include.patch [bz#647308]
  - kvm-trace-Add-trace-events-file-for-declaring-trace-even.patch [bz#632722]
  - kvm-trace-Support-disabled-events-in-trace-events.patch [bz#632722]
  - kvm-trace-Add-user-documentation.patch [bz#632722]
  - kvm-trace-Trace-qemu_malloc-and-qemu_vmalloc.patch [bz#632722]
  - kvm-trace-Trace-virtio-blk-multiwrite-and-paio_submit.patch [bz#632722]
  - kvm-trace-Trace-virtqueue-operations.patch [bz#632722]
  - kvm-trace-Trace-port-IO.patch [bz#632722]
  - kvm-trace-Trace-entry-point-of-balloon-request-handler.patch [bz#632722]
  - kvm-trace-fix-a-typo.patch [bz#632722]
  - kvm-trace-fix-a-regex-portability-problem.patch [bz#632722]
  - kvm-trace-avoid-unnecessary-recompilation-if-nothing-cha.patch [bz#632722]
  - kvm-trace-Use-portable-format-strings.patch [bz#632722]
  - kvm-trace-Don-t-strip-lines-containing-arbitrarily.patch [bz#632722]
  - kvm-trace-Trace-bdrv_aio_-readv-writev.patch [bz#632722]
  - kvm-trace-remove-timestamp-files-when-cleaning-up.patch [bz#632722]
  - kvm-trace-Format-strings-must-begin-end-with-double-quot.patch [bz#632722]
  - kvm-apic-convert-debug-printf-statements-to-tracepoints.patch [bz#632722]
  - kvm-Add-a-DTrace-tracing-backend-targetted-for-SystemTAP.patch [bz#632722]
  - kvm-Add-support-for-generating-a-systemtap-tapset-static.patch [bz#632722]
  - kvm-trace-Trace-vm_start-vm_stop.patch [bz#632722]
  - spec file changes to enable trace support [bz#632722]
  - Resolves: bz#632257
    (Duplicate CPU fea.tures in cpu-x86_64.conf)
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)
  - Resolves: bz#647308
    (Support Westmere as a CPU model or included within existing models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.131.el6
changelog:
  - fix spec file to require systemtap, or configure won't enable the systemtap
    tapset
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.132.el6
changelog:
  - kvm-BZ-636494-cpu-check-does-not-correctly-enforce-CPUID.patch [bz#636494]
  - kvm-QDict-Introduce-qdict_get_qdict.patch [bz#647447]
  - kvm-monitor-QMP-Drop-info-hpet-query-hpet.patch [bz#647447]
  - kvm-QMP-Teach-basic-capability-negotiation-to-python-exa.patch [bz#647447]
  - kvm-QMP-Fix-python-helper-wrt-long-return-strings.patch [bz#647447]
  - kvm-QMP-update-query-version-documentation.patch [bz#647447]
  - kvm-Revert-QMP-Remove-leading-whitespace-in-package.patch [bz#647447]
  - kvm-QMP-monitor-update-do_info_version-to-output-broken-.patch [bz#647447]
  - kvm-QMP-Remove-leading-whitespace-in-package-again.patch [bz#647447]
  - kvm-QMP-doc-Add-Stability-Considerations-section.patch [bz#647447]
  - kvm-QMP-Update-README-file.patch [bz#647447]
  - kvm-QMP-Revamp-the-Python-class-example.patch [bz#647447]
  - kvm-QMP-Revamp-the-qmp-shell-script.patch [bz#647447]
  - kvm-QMP-Drop-vm-info-example-script.patch [bz#647447]
  - kvm-qemu-char-Introduce-Memory-driver.patch [bz#647447]
  - kvm-QMP-Introduce-Human-Monitor-passthrough-command.patch [bz#647447]
  - kvm-QMP-qmp-shell-Introduce-HMP-mode.patch [bz#647447]
  - kvm-PCI-Export-pci_map_option_rom.patch [bz#667188]
  - kvm-device-assignment-Allow-PCI-to-manage-the-option-ROM.patch [bz#667188]
  - kvm-virtio-serial-bus-bump-up-control-vq-size-to-32.patch [bz#656198]
  - kvm-Move-stdbool.h.patch [bz#635954]
  - kvm-savevm-Fix-no_migrate.patch [bz#635954]
  - kvm-device-assignment-Properly-terminate-vmsd.fields.patch [bz#635954]
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)
  - Resolves: bz#636494
    (-cpu check  does not correctly enforce CPUID items)
  - Resolves: bz#647447
    (QMP:  provide a hmp_passthrough command to allow execution of non-converted commands)
  - Resolves: bz#656198
    (Can only see 16 virtio ports while assigned 30 virtio serial ports on commandLine)
  - Resolves: bz#667188
    (device-assignment leaks option ROM memory)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.133.el6
changelog:
  - kvm-spice-rip-out-all-the-old-non-upstream-spice-bits.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Use-display-types-for-local-display-only.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-pflib-PixelFormat-conversion-library.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-support-for-generic-notifier-lists.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Rewrite-mouse-handlers-to-use-QTAILQ-and-to-have-an-.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-kbd_mouse_has_absolute.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-notifier-for-mouse-mode-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-sdl-use-mouse-mode-notifier.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-input-make-vnc-use-mouse-mode-notifiers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-make-sure-to-send-pointer-type-change-event-on-S.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vmmouse-adapt-to-mouse-handler-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-wacom-tablet-activate-event-handlers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-cursor-add-cursor-functions.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-use-new-cursor-struct-functions-for-vmware-vga-and-s.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-spice-into-the-configure-file-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-bits-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-keyboard-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-mouse-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-simple-display-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-tablet-support.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-tls-support-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-make-compression-configurable.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-channel-security.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-the-listening-address.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-misc-config-options.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-audio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-copyright-to-spiceaudio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-watching-for-write-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-warning-when-building-with-spice-0.6..patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-display-replace-private-lock-with-qemu-mutex.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qxl-device-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-connection-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qmp-query-spice-and-hmp-info-spice-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Revert-vnc-support-password-expire.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-auth-reject-cleanup.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-support-password-expire-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-spice-add-set_passwd-monitor-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-qdev-Track-runtime-machine-modifications.patch [bz#653591]
  - kvm-rtl8139-Use-subsection-to-restrict-migration-after-h.patch [bz#653591]
  - kvm-add-migration-state-change-notifiers.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-vnc-client-migration.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-vnc-spice-fix-never-and-now-expire_time.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-zap-spice-0.4-migration-compatibility-bits.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-add-chardev-v4.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-qxl-locking-fix.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qmp-events-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-monitor-commands-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - Resolves: bz#615947
    (RFE QMP: support of query spice for guest)
  - Resolves: bz#631832
    (manpage is missing spice options)
  - Resolves: bz#632458
    (Guest may core dump when booting with spice and qxl.)
  - Resolves: bz#634153
    (coredumped when enable qxl without spice)
  - Resolves: bz#642131
    (qemu-kvm aborts of 'qemu_spice_display_create_update: unhandled depth: 0 bits')
  - Resolves: bz#647865
    (support 2560x1440 in qxl)
  - Resolves: bz#653591
    ([RHEL6 Snap13]: Hot-unplugging issue noticed with rtl8139nic after migration of KVM guest.)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.134.el6
changelog:
  - kvm-switch-stdvga-to-pci-vgabios.patch [bz#638468]
  - kvm-switch-vmware_vga-to-pci-vgabios.patch [bz#638468]
  - kvm-add-rhel6.1.0-machine-type.patch [bz#638468]
  - kvm-vgabios-update-handle-compatibility-with-older-qemu-.patch [bz#638468]
  - kvm-qemu-io-Fix-error-messages.patch [bz#672187]
  - kvm-wdt_i6300esb-register-a-reset-function.patch [bz#637180]
  - kvm-Watchdog-disable-watchdog-timer-when-hard-rebooting-.patch [bz#637180]
  - kvm-usb-linux-increase-buffer-for-USB-control-requests.patch [bz#672720]
  - kvm-device-assignment-Cap-number-of-devices-we-can-have-.patch [bz#670787]
  - kvm-clear-vapic-after-reset.patch [bz#669268]
  - kvm-add-support-for-protocol-driver-create_options.patch [bz#637701]
  - kvm-qemu-img-avoid-calling-exit-1-to-release-resources-p.patch [bz#637701]
  - kvm-Use-qemu_mallocz-instead-of-calloc-in-img_convert.patch [bz#637701]
  - kvm-img_convert-Only-try-to-free-bs-entries-if-bs-is-val.patch [bz#637701]
  - kvm-Consolidate-printing-of-block-driver-options.patch [bz#637701]
  - kvm-Fix-formatting-and-missing-braces-in-qemu-img.c.patch [bz#637701]
  - kvm-Fail-if-detecting-an-unknown-option.patch [bz#637701]
  - kvm-Make-error-handling-more-consistent-in-img_create-an.patch [bz#637701]
  - kvm-qemu-img-Deprecate-obsolete-6-and-e-options.patch [bz#637701]
  - kvm-qemu-img-Free-option-parameter-lists-in-img_create.patch [bz#637701]
  - kvm-qemu-img-Fail-creation-if-backing-format-is-invalid.patch [bz#637701]
  - kvm-Introduce-strtosz-library-function-to-convert-a-stri.patch [bz#637701]
  - kvm-Introduce-strtosz_suffix.patch [bz#637701]
  - kvm-qemu-img.c-Clean-up-handling-of-image-size-in-img_cr.patch [bz#637701]
  - kvm-qemu-img.c-Re-factor-img_create.patch [bz#637701]
  - kvm-Introduce-do_snapshot_blkdev-and-monitor-command-to-.patch [bz#637701]
  - kvm-Prevent-creating-an-image-with-the-same-filename-as-.patch [bz#637701]
  - kvm-qemu-option-Fix-uninitialized-value-in-append_option.patch [bz#637701]
  - kvm-bdrv_img_create-use-proper-errno-return-values.patch [bz#637701]
  - kvm-block-Use-backing-format-driver-during-image-creatio.patch [bz#637701]
  - kvm-Make-strtosz-return-int64_t-instead-of-ssize_t.patch [bz#637701]
  - kvm-strtosz-use-unsigned-char-and-switch-to-qemu_isspace.patch [bz#637701]
  - kvm-strtosz-use-qemu_toupper-to-simplify-switch-statemen.patch [bz#637701]
  - kvm-strtosz-Fix-name-confusion-in-use-of-modf.patch [bz#637701]
  - kvm-strtosz-Use-suffix-macros-in-switch-statement.patch [bz#637701]
  - kvm-do_snapshot_blkdev-error-on-missing-snapshot_file-ar.patch [bz#637701]
  - kvm-pci-memory-leak-of-PCIDevice-rom_file.patch [bz#672229]
  - Resolves: bz#637180
    (watchdog timer isn't reset when qemu resets)
  - Resolves: bz#637701
    (RFE - support live snapshot of a subset of disks without RAM)
  - Resolves: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)
  - Resolves: bz#669268
    (WinXP hang when reboot after setup copies files to the installation folders)
  - Resolves: bz#670787
    (Hot plug the 14st VF to guest causes guest shut down)
  - Resolves: bz#672187
    (Improper responsive message when shrinking qcow2 image)
  - Resolves: bz#672229
    (romfile memory leak)
  - Resolves: bz#672720
    (getting 'ctrl buffer too small' error on USB passthrough)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.135.el6
changelog:
  - kvm-Bug-625333-qemu-treatment-of-nodefconfig-and-readcon.patch [bz#625333]
  - kvm-ide-Factor-ide_flush_cache-out.patch [bz#670539]
  - kvm-ide-Handle-flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Respect-werror-option-for-flushes.patch [bz#670539]
  - kvm-block-Allow-bdrv_flush-to-return-errors.patch [bz#670539]
  - kvm-ide-Handle-immediate-bdrv_aio_flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Handle-immediate-flush-failure-properly.patch [bz#670539]
  - kvm-vhost-error-code.patch [bz#633394]
  - kvm-vhost-fix-up-irqfd-support.patch [bz#633394]
  - kvm-virtio-pci-mask-notifier-error-handling-fixups.patch [bz#633394]
  - kvm-test-for-ioeventfd-support-on-old-kernels.patch [bz#633394]
  - kvm-virtio-pci-Rename-bugs-field-to-flags.patch [bz#633394]
  - kvm-virtio-move-vmstate-change-tracking-to-core.patch [bz#633394]
  - kvm-virtio-pci-Use-ioeventfd-for-virtqueue-notify.patch [bz#633394]
  - kvm-ioeventfd-error-handling-cleanup.patch [bz#633394]
  - kvm-remove-redhat-disable-THP.patch [bz#635418]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-qdevfy.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-pci-allow-devices-being-tagge.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-piix-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-vga-tag-as-not-hotplugable-v3.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-qxl-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-expose-no_hotplug-.patch [bz#498774]
  - kvm-char-Split-out-tcp-socket-close-code-in-a-separate-f.patch [bz#621484]
  - kvm-char-mark-socket-closed-if-write-fails-with-EPIPE.patch [bz#621484]
  - Resolves: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#625333
    (qemu treatment of -nodefconfig and -readconfig problematic for debug)
  - Resolves: bz#633394
    ([6.1 FEAT] virtio-blk ioeventfd support)
  - Resolves: bz#635418
    (Allow enable/disable ksm per VM)
  - Resolves: bz#670539
    (Block devices don't implement correct flush error handling)
  - Related: bz#635418
    (Allow enable/disable ksm per VM)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.136.el6
changelog:
  - kvm-Introduce-fw_name-field-to-DeviceInfo-structure.patch [bz#643687]
  - kvm-Introduce-new-BusInfo-callback-get_fw_dev_path.patch [bz#643687]
  - kvm-Keep-track-of-ISA-ports-ISA-device-is-using-in-qdev.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-ISA-bus-in-qdev.patch [bz#643687]
  - kvm-Store-IDE-bus-id-in-IDEBus-structure-for-easy-access.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-IDE-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-system-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-pci-bus.patch [bz#643687]
  - kvm-Record-which-USBDevice-USBPort-belongs-too.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-usb-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-scsi-bus.patch [bz#643687]
  - kvm-Add-bootindex-parameter-to-net-block-fd-device.patch [bz#643687]
  - kvm-Change-fw_cfg_add_file-to-get-full-file-path-as-a-pa.patch [bz#643687]
  - kvm-Add-bootindex-for-option-roms.patch [bz#643687]
  - kvm-Add-notifier-that-will-be-called-when-machine-is-ful.patch [bz#643687]
  - kvm-Pass-boot-device-list-to-firmware.patch [bz#643687]
  - kvm-close-all-the-block-drivers-before-the-qemu-process-.patch [bz#635527]
  - kvm-qemu-img-snapshot-Use-writeback-caching.patch [bz#635527]
  - kvm-qcow2-Add-QcowCache.patch [bz#635527]
  - kvm-qcow2-Use-QcowCache.patch [bz#635527]
  - kvm-qcow2-Batch-flushes-for-COW.patch [bz#635527]
  - Commited 'Remove vhost blacklisting' by hand [bz#665299]
  - kvm-add-bootindex-parameter-to-assigned-device.patch [bz#643687]
  - kvm-tap-safe-sndbuf-default.patch [bz#674539]
  - kvm-do-not-pass-NULL-to-strdup.patch [bz#643687]
  - kvm-Use-Makefile-to-install-qemu-kvm-in-correct-location.patch [bz#672441]
  - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch [bz#667976]
  - kvm-vhost-force-vhost-off-for-non-MSI-guests.patch [bz#674562]
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#643687
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#665299
    (load vhost-net by default)
  - Resolves: bz#667976
    (CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication [rhel-6.1])
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#674539
    (slow guests block other guests on the same lan)
  - Resolves: bz#674562
    (disable vhost-net for rhel5 and older guests)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.137.el6
changelog:
  - kvm-Add-support-for-o-octet-bytes-format-as-monitor-para.patch [bz#515775]
  - kvm-block-add-block_resize-monitor-command.patch [bz#515775]
  - kvm-block-tell-drivers-about-an-image-resize.patch [bz#515775]
  - kvm-virtio-blk-tell-the-guest-about-size-changes.patch [bz#515775]
  - kvm-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-usb-ccid-add-CCID-bus.patch [bz#641833]
  - kvm-introduce-libcacard-vscard_common.h.patch [bz#641833]
  - kvm-ccid-add-passthru-card-device.patch [bz#641833]
  - kvm-libcacard-initial-commit.patch [bz#641833]
  - kvm-ccid-add-ccid-card-emulated-device-v2.patch [bz#641833]
  - kvm-ccid-add-docs.patch [bz#641833]
  - kvm-ccid-configure-fix-enable-disable-flags.patch [bz#641833]
  - Note: smartcard spec patch applied by hand [bz#641833]
  - Resolves: bz#515775
    ([RFE] Include support for online resizing of storage and network block devices)
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.138.el6
changelog:
  - kvm-virtio-console-Factor-out-common-init-between-consol.patch [bz#588916]
  - kvm-virtio-console-Remove-unnecessary-braces.patch [bz#588916]
  - kvm-virtio-serial-Use-a-struct-to-pass-config-informatio.patch [bz#588916]
  - kvm-Fold-send_all-wrapper-unix_write-into-one-function.patch [bz#588916]
  - kvm-char-Add-a-QemuChrHandlers-struct-to-initialise-char.patch [bz#588916]
  - kvm-virtio-serial-move-out-discard-logic-in-a-separate-f.patch [bz#588916]
  - kvm-virtio-serial-Make-sure-virtqueue-is-ready-before-di.patch [bz#588916]
  - kvm-virtio-serial-Don-t-copy-over-guest-buffer-to-host.patch [bz#588916]
  - kvm-virtio-serial-Let-virtio-serial-bus-know-if-all-data.patch [bz#588916]
  - kvm-virtio-serial-Add-support-for-flow-control.patch [bz#588916]
  - kvm-virtio-serial-Add-rhel6.0.0-compat-property-for-flow.patch [bz#588916]
  - kvm-virtio-serial-save-restore-new-fields-in-port-struct.patch [bz#588916]
  - kvm-Convert-io-handlers-to-QLIST.patch [bz#588916]
  - kvm-iohandlers-Add-enable-disable_write_fd_handler-funct.patch [bz#588916]
  - kvm-char-Add-framework-for-a-write-unblocked-callback.patch [bz#588916]
  - kvm-char-Update-send_all-to-handle-nonblocking-chardev-w.patch [bz#588916]
  - kvm-char-Equip-the-unix-tcp-backend-to-handle-nonblockin.patch [bz#588916]
  - kvm-char-Throttle-when-host-connection-is-down.patch [bz#588916 bz#621484]
  - kvm-virtio-console-Enable-port-throttling-when-chardev-i.patch [bz#588916]
  - kvm-Add-spent-time-to-migration.patch [bz#643970]
  - kvm-No-need-to-iterate-if-we-already-are-over-the-limit.patch [bz#643970]
  - kvm-don-t-care-about-TLB-handling.patch [bz#643970]
  - kvm-Only-calculate-expected_time-for-stage-2.patch [bz#643970]
  - kvm-Count-nanoseconds-with-uint64_t-not-doubles.patch [bz#643970]
  - kvm-Exit-loop-if-we-have-been-there-too-long.patch [bz#643970]
  - kvm-Maintaing-number-of-dirty-pages.patch [bz#643970]
  - kvm-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.139.el6
changelog:
  - kvm-Revert-Drop-qemu_mutex_iothread-during-migration.patch [bz#643970]
  - Related: bz#643970
    (guest migration turns failed by the end (16G + stress load))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.140.el6
changelog:
  - spec file: require new vgabios images (stdvga and vmware) [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.141.el6
changelog:
  - spec file: symlink to stdvga and vmware vgabios images [bz#638468]
  - Related: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.142.el6
changelog:
  - kvm-ide-Remove-redundant-IDEState-member-conf.patch [bz#654682]
  - kvm-ide-Split-ide_init1-off-ide_init2-v2.patch [bz#654682]
  - kvm-ide-Change-ide_init_drive-to-require-valid-dinfo-arg.patch [bz#654682]
  - kvm-ide-Split-non-qdev-code-off-ide_init2.patch [bz#654682]
  - kvm-qdev-Don-t-leak-string-property-value-on-hot-unplug.patch [bz#654682]
  - kvm-blockdev-New-drive_get_by_blockdev-v2.patch [bz#654682]
  - kvm-blockdev-Clean-up-automatic-drive-deletion-v2.patch [bz#654682]
  - kvm-qdev-Decouple-qdev_prop_drive-from-DriveInfo-v2.patch [bz#654682]
  - kvm-block-Catch-attempt-to-attach-multiple-devices-to-a-.patch [bz#654682]
  - kvm-Implement-drive_del-to-decouple-block-removal-from-d.patch [bz#654682]
  - kvm-blockdev-check-dinfo-ptr-before-using-v2.patch [bz#654682]
  - kvm-qcow2-Add-full-image-preallocation-option.patch [bz#634652]
  - kvm-savevm-fix-corruption-in-vmstate_subsection_load.patch [bz#671100]
  - kvm-virtio-serial-Disable-flow-control-for-RHEL-5.0-mach.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)
  - Resolves: bz#634652
    ([RFE] qemu-img qcow2 'pre-allocation' should not only pre-allocate meta-data, but also data)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)
  - Resolves: bz#671100
    (possible migration failure due to erroneous interpretation of subsection)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.143.el6
changelog:
  - kvm-fix-syntax-error-introduced-by-virtio-serial-Disable.patch [bz#588916]
  - Resolves: bz#588916
    (qemu char fixes for nonblocking writes, virtio-console flow control)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.144.el6
changelog:
  - kvm-V3-Bug-619259-qemu-cpu-check-enforce-should-work-eve.patch [bz#619259]
  - kvm-Bug-675229-Install-of-cpu-x86_64.conf-bombs-for-an-o.patch [bz#675229]
  - kvm-e1000-multi-buffer-packet-support.patch [bz#602205]
  - Resolves: bz#602205
    (Could not ping guest successfully after changing e1000 MTU)
  - Resolves: bz#619259
    (qemu "-cpu [check | enforce ]" should work even when a model name is not specified on the command line)
  - Resolves: bz#675229
    (Install of cpu-x86_64.conf bombs for an out of tree build..)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.145.el6
changelog:
  - kvm-make-tsc-stable-over-migration-and-machine-start.patch [bz#662386]
  - kvm-qemu-kvm-Close-all-block-drivers-on-quit.patch [bz#635527]
  - kvm-net-notify-peer-about-link-status-change.patch [bz#676015]
  - kvm-vhost-disable-on-tap-link-down.patch [bz#676015]
  - kvm-Add-config-devices.h-again.patch [bz#616187]
  - kvm-Add-CONFIG_VMWARE_VGA-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMMOUSE-option-v2.patch [bz#616187]
  - kvm-add-CONFIG_VMPORT-option-v2.patch [bz#616187]
  - kvm-blockdev-Fix-drive_del-not-to-crash-when-drive-is-no.patch [bz#677222]
  - Resolves: bz#616187
    (vmware device emulation enabled but not supported)
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#662386
    (tsc clock breaks migration result stability)
  - Resolves: bz#676015
    (set_link <tap> off not working with vhost-net)
  - Resolves: bz#677222
    (segment fault happens after hot drive add then drive delete)
  - Related: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.146.el6
changelog:
  - kvm-USB-HID-does-not-support-Set_Idle.patch [bz#665025]
  - kvm-add-event-queueing-to-USB-HID.patch [bz#665025]
  - Spec patch to reenable CONFIG_VMMOUSE and CONFIG_VMPORT [bz#616187 (the original feature-disable bug) bz#677712 bz#677712 (the new broken migration bug)]
  - Resolves: bz#665025
    (lost double clicks on slow connections)
  - Resolves: bz#677712
    (disabling vmware device emulation breaks old->new migration)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.147.el6
changelog:
  - kvm-e1000-clear-EOP-for-multi-buffer-descriptors.patch [bz#678338]
  - kvm-e1000-verify-we-have-buffers-upfront.patch [bz#678338]
  - kvm-tracetool-Add-optional-argument-to-specify-dtrace-pr.patch [bz#672441]
  - kvm-Specify-probe-prefix-to-make-dtrace-probes-use-qemu-.patch [bz#672441]
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#678338
    (e1000 behaving out of spec after increasing MTU)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.148.el6
changelog:
  - kvm-ide-Make-ide_init_drive-return-success.patch [bz#655735]
  - kvm-ide-Reject-readonly-drives-unless-CD-ROM.patch [bz#655735]
  - kvm-ide-Reject-invalid-CHS-geometry.patch [bz#655735]
  - kvm-Move-KVM-and-Xen-global-flags-to-vl.c.patch [bz#662701]
  - kvm-qemu-kvm-Switch-to-upstream-enable-kvm-semantics.patch [bz#662701]
  - Update BuildRequire for newer spice-server [bz#672035]
  - Resolves: bz#655735
    (qemu-kvm (or libvirt?) permission denied errors when exporting readonly IDE disk to guest)
  - Resolves: bz#662701
    (Option -enable-kvm should exit when KVM is unavailable)
  - Related: bz#672035
    (spice-server: rebase to upstream 0.8 for RHEL-6.1)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.149.el6
changelog:
  - kvm-Fix-error-message-in-drive_init.patch [bz#607598]
  - kvm-block-Use-error-codes-from-lower-levels-for-error-me.patch [bz#607598]
  - kvm-device-assignment-Don-t-skip-closing-unmapped-resour.patch [bz#680058]
  - Resolves: bz#607598
    (Incorrect & misleading error reporting when failing to open a drive due to block driver whitelist denial)
  - Resolves: bz#680058
    (can't hotplug second vf successful with message "Too many open files")


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.150.el6
changelog:
  - kvm-Improve-error-handling-in-do_snapshot_blkdev.patch [bz#676529]
  - Resolves: bz#676529
    (core dumped when save snapshot to non-exist disk)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.151.el6
changelog:
  - kvm-net-Add-the-missing-option-declaration-of-vhostforce.patch [bz#683295]
  - kvm-vhost-fix-dirty-page-handling.patch [bz#684076]
  - kvm-block-qcow2.c-rename-qcow_-functions-to-qcow2_.patch [bz#688119]
  - kvm-Add-proper-errno-error-return-values-to-qcow2_open.patch [bz#688119]
  - kvm-QCOW2-bug-fix-read-base-image-beyond-its-size.patch [bz#688147]
  - kvm-qcow2-Fix-error-handling-for-immediate-backing-file-.patch [bz#688146]
  - kvm-qcow2-Fix-error-handling-for-reading-compressed-clus.patch [bz#688146]
  - kvm-qerror-Add-QERR_UNKNOWN_BLOCK_FORMAT_FEATURE.patch [bz#688119]
  - kvm-qcow2-Report-error-for-version-2.patch [bz#688119]
  - kvm-qcow2-Fix-order-in-L2-table-COW.patch [bz#688146]
  - kvm-pci-assign-Catch-missing-KVM-support.patch [bz#688428]
  - Resolves: bz#683295
    (qemu-kvm: Invalid parameter 'vhostforce')
  - Resolves: bz#684076
    (Segfault occurred during migration)
  - Resolves: bz#688119
    (qcow2: qcow2_open doesn't return useful errors)
  - Resolves: bz#688146
    (qcow2: Some paths fail to handle I/O errors)
  - Resolves: bz#688147
    (qcow2: Reads fail with backing file smaller than snapshot)
  - Resolves: bz#688428
    (qemu-kvm -no-kvm segfaults on pci_add)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.152.el6
changelog:
  - kvm-device-assignment-register-a-reset-function.patch [bz#685147]
  - kvm-device-assignment-Reset-device-on-system-reset.patch [bz#685147]
  - Resolves: bz#685147
    (guest with assigned nic got kernel panic when send system_reset signal in QEMU monitor)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.153.el6
changelog:
  - kvm-Revert-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#678208]
  - kvm-qxl-spice-display-move-pipe-to-ssd.patch [bz#678208]
  - kvm-qxl-implement-get_command-in-vga-mode-without-locks.patch [bz#678208]
  - kvm-qxl-spice-remove-qemu_mutex_-un-lock_iothread-around.patch [bz#678208]
  - kvm-hw-qxl-render-drop-cursor-locks-replace-with-pipe.patch [bz#678208]
  - kvm-spice-qemu-char.c-add-throttling.patch [bz#672191]
  - kvm-spice-qemu-char.c-remove-intermediate-buffer.patch [bz#672191]
  - kvm-spice-qemu-char-Fix-flow-control-in-client-guest-dir.patch [bz#672191]
  - kvm-chardev-Allow-frontends-to-notify-backends-of-guest-.patch [bz#688572]
  - kvm-virtio-console-notify-backend-of-guest-open-close.patch [bz#688572]
  - kvm-spice-chardev-listen-to-frontend-guest-open-close.patch [bz#688572]
  - kvm-Fix-performance-regression-in-qemu_get_ram_ptr.patch [bz#690267]
  - kvm-virtio-pci-fix-bus-master-work-around-on-load.patch [bz#682243]
  - kvm-Use-getaddrinfo-for-migration.patch [bz#680356]
  - kvm-net-socket-allow-ipv6-for-net_socket_listen_init-and.patch [bz#680356]
  - kvm-block-Fix-serial-number-assignment.patch [bz#688058]
  - Resolves: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)
  - Resolves: bz#678208
    (qemu-kvm hangs when installing guest with -spice option)
  - Resolves: bz#680356
    (Live migration failed in ipv6 environment)
  - Resolves: bz#682243
    ([KVM] pci hotplug after migration breaks virtio_net.)
  - Resolves: bz#688058
    (Drive serial number gets truncated)
  - Resolves: bz#688572
    (spice-server does not switch back to server mouse mode if guest spice-agent dies.)
  - Resolves: bz#690267
    (Backport qemu_get_ram_ptr() performance improvement)
  - Related: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.154.el6
changelog:
  - kvm-add-a-service-to-reap-zombies-use-it-in-SLIRP.patch [bz#678524]
  - kvm-Don-t-allow-multiwrites-against-a-block-device-witho.patch [bz#654682]
  - kvm-Do-not-delete-BlockDriverState-when-deleting-the-dri.patch [bz#654682]
  - kvm-virtio-serial-don-t-crash-on-invalid-input.patch [bz#690174]
  - Resolves: bz#678524
    (Exec based migration randomly fails, particularly under high load)
  - Resolves: bz#690174
    (virtio-serial qemu-kvm crash on invalid input in migration)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.155.el6
changelog:
  - kvm-configure-fix-out-of-tree-build-with-enable-spice.patch [bz#641833]
  - kvm-ccid-card-emulated-replace-DEFINE_PROP_ENUM-with-DEF.patch [bz#641833]
  - kvm-Revert-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-Revert-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-Revert-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-ccid-v18_upstream-v25-cleanup.patch [bz#641833]
  - kvm-libcacard-vscard_common.h-upstream-v18-v25-diff.patch [bz#641833]
  - kvm-ccid-card-passthru-upstream-v18-upstream-v25-diff.patch [bz#641833]
  - kvm-qemu-thread-add-qemu_mutex-cond_destroy-and-qemu_mut.patch [bz#641833]
  - kvm-adding-qemu-thread.o-to-obj-y.patch [bz#641833]
  - kvm-ccid-card-emulated-v18-v25.patch [bz#641833]
  - kvm-libcacard-v18-upstream-v25.patch [bz#641833]
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.156.el6
changelog:
  - kvm-Revert-net-socket-allow-ipv6-for-net_socket_listen_i.patch [bz#680356]
  - kvm-Revert-Use-getaddrinfo-for-migration.patch [bz#680356]
  - Related: bz#680356
    (Live migration failed in ipv6 environment)
  - Fixes bz#694196
    (RHEL 6.1 qemu-kvm: Specifying ipv6 addresses breaks migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.157.el6
changelog:
  - kvm-qemu-img-rebase-Fix-read-only-new-backing-file.patch [bz#693741]
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#681777]
  - kvm-block-Do-not-cache-device-size-for-removable-media.patch [bz#687900]
  - kvm-cdrom-Allow-the-TEST_UNIT_READY-command-after-a-cdro.patch [bz#683877]
  - kvm-cdrom-Make-disc-change-event-visible-to-guests.patch [bz#683877]
  - Resolves: bz#681777
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#683877
    (RHEL6 guests fail to update cdrom block size on media change)
  - Resolves: bz#687900
    (qemu host cdrom support not properly updating guests on media changes at physical CD/DVD drives)
  - Resolves: bz#693741
    (qemu-img re-base  fail with read-only new backing file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.158.el6
changelog:
  - kvm-bz-691704-vhost-skip-VGA-memory-regions.patch [bz#691704]
  - kvm-ide-atapi-add-support-for-GET-EVENT-STATUS-NOTIFICAT.patch [bz#558256]
  - kvm-atapi-Allow-GET_EVENT_STATUS_NOTIFICATION-after-medi.patch [bz#558256]
  - kvm-atapi-Move-GET_EVENT_STATUS_NOTIFICATION-command-han.patch [bz#558256]
  - kvm-atapi-GESN-Use-structs-for-commonly-used-field-types.patch [bz#558256]
  - kvm-atapi-GESN-Standardise-event-response-handling-for-f.patch [bz#558256]
  - kvm-atapi-GESN-implement-media-subcommand.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#691704
    (Failed to boot up windows guest with huge memory and cpu and vhost=on within 30 mins)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.159.el6
changelog:
  - kvm-acpi_piix4-Maintain-RHEL6.0-migration.patch [bz#694095]
  - Resolves: bz#694095
    (Migration fails when migrate guest from RHEL6.1 host to RHEL6 host with the same libvirt version)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6
changelog:
  - kvm-virtio-blk-fail-unaligned-requests.patch [bz#698910]
  - kvm-Ignore-pci-unplug-requests-for-unpluggable-devices.patch [bz#699789]
  - Resolves: bz#698910
    (CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests [rhel-6.1])
  - Resolves: bz#699789
    (CVE-2011-1751 acpi_piix4: missing hotplug check during device removal [rhel-6.1])


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.161.el6
changelog:
  - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch [bz#700859]
  - Resolves: bz#700859
    (Fix phys memory client for vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.162.el6
changelog:
  - kvm-virtio-serial-Disallow-generic-ports-at-id-0.patch [bz#700511]
  - kvm-virtio-serial-Don-t-clear-have_data-pointer-after-un.patch [bz#681736]
  - kvm-char-Prevent-multiple-devices-opening-same-chardev.patch [bz#656779]
  - kvm-char-Allow-devices-to-use-a-single-multiplexed-chard.patch [bz#656779]
  - kvm-char-Detect-chardev-release-by-NULL-handlers-as-well.patch [bz#656779]
  - kvm-virtio-console-Keep-chardev-open-for-other-users-aft.patch [bz#700512]
  - kvm-Revert-cdrom-Make-disc-change-event-visible-to-guest.patch [bz#700065]
  - kvm-Revert-cdrom-Allow-the-TEST_UNIT_READY-command-after.patch [bz#700065]
  - kvm-atapi-Add-medium-ready-to-medium-not-ready-transitio.patch [bz#700065]
  - Resolves: bz#656779
    (Core dumped when hot plug/un-plug virtio serial port to the same chardev)
  - Resolves: bz#681736
    (Guest->Host communication stops for other ports after one port is unplugged)
  - Resolves: bz#700065
    (Switch to upstream solution for cdrom patches)
  - Resolves: bz#700511
    (virtio-serial: Disallow generic ports at id 0)
  - Resolves: bz#700512
    (Keep chardev open for later reuse)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.163.el6
changelog:
  - kvm-qemu-img-Initial-progress-printing-support.patch [bz#621482]
  - kvm-Add-dd-style-SIGUSR1-progress-reporting.patch [bz#621482]
  - kvm-Remove-obsolete-enabled-variable-from-progress-state.patch [bz#621482]
  - kvm-qemu-progress.c-printf-isn-t-signal-safe.patch [bz#621482]
  - kvm-qemu-img.c-Remove-superfluous-parenthesis.patch [bz#621482]
  - kvm-Add-documentation-for-qemu_progress_-init-print.patch [bz#621482]
  - kvm-Add-qerror-message-if-the-change-target-filename-can.patch [bz#655719]
  - Resolves: bz#621482
    ([RFE] Be able to get progress from qemu-img)
  - Resolves: bz#655719
    (no error pops when change cd to non-exist file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.164.el6
changelog:
  - kvm-e1000-check-buffer-availability.patch [bz#684127]
  - kvm-Add-error-message-for-loading-snapshot-without-VM-st.patch [bz#680378]
  - kvm-BZ710046-qemu-kvm-prints-warning-Using-CPU-model.patch [bz#710046]
  - Resolves: bz#680378
    (no error message when loading zero size internal snapshot)
  - Resolves: bz#684127
    (e1000:Execute multiple netperf clients caused system call interrupted)
  - Resolves: bz#710046
    (qemu-kvm prints warning "Using CPU model [...]" (with patch))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.165.el6
changelog:
  - kvm-ide-Factor-ide_dma_set_inactive-out.patch [bz#701775]
  - kvm-ide-Set-bus-master-inactive-on-error.patch [bz#701775]
  - kvm-ide-cleanup-warnings.patch [bz#701775]
  - kvm-virtio-correctly-initialize-vm_running.patch [bz#701442]
  - kvm-Add-virtio-disk-identification-support.patch [bz#710349]
  - kvm-spice-add-option-for-disabling-copy-paste-support-rh.patch [bz#693645]
  - Resolves: bz#693645
    (RFE: add spice option to enable/disable copy paste)
  - Resolves: bz#701442
    (vhost-net not enabled on hotplug)
  - Resolves: bz#701775
    (KVM: stdio is flooded)
  - Resolves: bz#710349
    (Backport serial number support for virtio-blk devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.166.el6
changelog:
  - kvm-virtio-guard-against-negative-vq-notifies.patch [bz#707094]
  - kvm-blockdev-Belatedly-remove-MAX_DRIVES.patch [bz#627585]
  - kvm-blockdev-Hide-QEMUMachine-from-drive_init.patch [bz#627585]
  - kvm-qdev-Move-declaration-of-qdev_init_bdrv-into-qdev.h.patch [bz#627585]
  - kvm-blockdev-Collect-block-device-code-in-new-blockdev.c.patch [bz#627585]
  - kvm-Fix-regression-for-drive-file.patch [bz#627585]
  - kvm-block-Move-error-actions-from-DriveInfo-to-BlockDriv.patch [bz#627585]
  - kvm-blockdev-Fix-error-message-for-invalid-drive-CHS.patch [bz#627585]
  - kvm-blockdev-Make-drive_init-use-error_report.patch [bz#627585]
  - kvm-blockdev-Put-BlockInterfaceType-names-and-max_devs-i.patch [bz#627585]
  - kvm-blockdev-Fix-regression-in-drive-if-scsi-index-N.patch [bz#627585]
  - kvm-blockdev-Make-drive_add-take-explicit-type-index-par.patch [bz#627585]
  - kvm-blockdev-Factor-drive_index_to_-bus-unit-_id-out-of-.patch [bz#627585]
  - kvm-blockdev-New-drive_get_by_index.patch [bz#627585]
  - kvm-blockdev-Reject-multiple-definitions-for-the-same-dr.patch [bz#627585]
  - kvm-blockdev-Replace-drive_add-s-fmt-.-by-optstr-paramet.patch [bz#627585]
  - kvm-blockdev-Fix-drive_add-for-drives-without-media.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_uninit.patch [bz#627585]
  - kvm-blockdev-Plug-memory-leak-in-drive_init-error-paths.patch [bz#627585]
  - kvm-vhost-fix-double-free-on-device-stop.patch [bz#699635]
  - kvm-QMP-QError-New-QERR_UNSUPPORTED.patch [bz#644919]
  - kvm-QMP-add-inject-nmi-qmp-command.patch [bz#644919]
  - kvm-HMP-Use-QMP-inject-nmi-implementation.patch [bz#644919]
  - Resolves: bz#627585
    (Improve error messages for bad options in -drive and -device)
  - Resolves: bz#644919
    (RFE: QMP command to trigger an NMI in the guest)
  - Resolves: bz#699635
    ([REG][6.1] After executing virsh dump with --live option and the completion, the subsequent virsh dump command to the same domain behaves abnormally)
  - Resolves: bz#707094
    (qemu-kvm: OOB memory access caused by negative vq notifies [rhel-6.2])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.167.el6
changelog:
  - kvm-qemu-img-create-Fix-displayed-default-cluster-size.patch [bz#570830]
  - kvm-Fix-the-RARP-protocol-ID.patch [bz#715141]
  - Resolves: bz#570830
    (The 'cluster_size' shows wrong size to zero when creating a qcow2 without specify the option)
  - Resolves: bz#715141
    (Wrong Ethertype for RARP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.168.el6
changelog:
  - kvm-vnc-fix-numlock-capslock-tracking.patch [bz#599306]
  - kvm-Add-an-isa-device-for-SGA.patch [bz#684949]
  - kvm-pc-add-rhel-6.2-pc-and-make-it-the-default.patch [bz#716906]
  - Resolves: bz#599306
    (Some strange behaviors on key's appearance viewed by using vnc)
  - Resolves: bz#684949
    ([RFE] Ability to display VM BIOS messages on boot)
  - Resolves: bz#716906
    (add 6.2 machine type)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.169.el6
changelog:
  - kvm-rtl8139-cleanup-FCS-calculation.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-extraction.patch [bz#583922]
  - kvm-rtl8139-add-vlan-tag-insertion.patch [bz#583922]
  - kvm-usb-serial-Fail-instead-of-crash-when-chardev-is-mis.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-exit-notifiers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-usb_del-command.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Return-usb-device-to-host-on-exit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Store-devpath-into-USBHostDevice-when-usb_.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_get_configuration-fu.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-active-configuration-from-sysfs-ra.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-data-structs-and-helpers-for-usb-descriptors.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-serial-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-scsi-disk-fix-build-disable-cdrom-emulation.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-enable-usb-storage-scsi-bus-scsi-disk.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-wacom-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bluetooth-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-descriptors-add-settable-strings.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-serial-number-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-network-use-new-descriptor-infrastructure.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_SET_ADDRESS-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-USB_REQ_-GET-SET-_CONFIGURATION-handling-to.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-remote-wakeup-handling-to-common-code.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-create-USBPortOps-move-attach-there.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rework-attach-detach-workflow.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_wakeup-wakeup-callback-to-port-ops.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-uhci-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-remote-wakeup-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-change-serial-number-to-42.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-speed-mask-to-ports.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-attach-callback.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_desc_attach.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-device-qualifier-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-high-speed-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-fix-status-reporting.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-handle-long-responses.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-mass-storage-fix.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-physical-port-address.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-port-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-rewrite-fw-path-fix-numbering.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-zap-pdev-from-usbport.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-USB-keyboard-emulation-key-mapping-error.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-modifiers-should-generate-an-event.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keyboard-add-event-event-queue.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-move-head-n-to-common-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-core-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hub-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-hid-add-migration-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-use-snprintf.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Add-bootindex-handling-into-usb-storage-device.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-trivial-spelling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-initialise-data-element-in-Linux-USB_DISCONNECT-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-introduce-a-usb_linux_alt_setting-function.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-the-alt.-setting-from-sysfs-rather-the.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-s-dprintf-DPRINTF-to-reduce-conflicts.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-usb-packets.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-packets-for-endpoints-which-are-not.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Refuse-iso-packets-when-max-packet-size-is.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-We-only-need-to-keep-track-of-15-endpoints.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-support-for-buffering-iso-out-usb-pack.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-control-buffer-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-switch-to-QTAILQ-cherry-picked-from-commit-ddf6.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-uhci-keep-uhci-state-pointer-in-async-packet-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ohci-get-ohci-state-via-container_of.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-musb-get-musb-state-via-container_of-cherry-picked-f.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-complete-callback-to-port-ops-cherry-picked.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Add-missing-break-statement.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Add-Interface-Association-Descriptor-descriptor-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-update-config-descriptors-to-identify-number-of-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-remove-fallback-to-bNumInterfaces-if-no-.nif.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-support-for-grouped-interfaces-and-the-Inter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Bug-757654-UHCI-fails-to-signal-stall-response-patch.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-Pass-the-packet-to-the-device-s-handle_control-c.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-use-usb_generic_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-device-path-aka-physical-port-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-add-hostport-property.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-track-aurbs-in-list.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-walk-async-urb-list-in-cancel.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-split-large-xfers.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-fix-max_packet_size-for-highspeed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-storage-don-t-call-usb_packet_complete-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-usb_handle_packet.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-keep-track-of-packet-owner.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-move-cancel-callback-to-USBDeviceInfo.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-add-ehci-adapter.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-catch-ENODEV-in-more-places.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-mmio-and-usbsts-usb-ehci-trace-mmio-a.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-state-machine-changes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-port-state.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-improve-mmio-tracing.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-trace-workaround.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-trace-buffer-copy.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-add-queue-data-struct.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-multiqueue-support.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-offset-writeback-in-ehci_buffer_rw.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-fix-error-handling.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-ehci-fix-a-number-of-unused-but-set-variable-warning.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-cancel-async-packets-on-unplug.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-drop-EXECUTING-checks.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-Fix-USB-mouse-Set_Protocol-behavior.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-The-USB-tablet-should-not-claim-boot-protocol-suppor.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-itd-handling-fixes.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-ehci-split-trace-calls-to-handle-arg-count-limit.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Get-speed-from-sysfs-rather-then-from-the-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Teach-about-super-speed.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-do-perror-when-errno-is-not-set.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Ensure-devep-0.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Don-t-try-to-open-the-same-device-twice.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-only-cleanup-in-host_close-when-host_open-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-linux-Enlarge-buffer-for-descriptors-to-8192-byt.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Add-knowledge-of-USB_SPEED_SUPER-to-usb_spee.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - kvm-usb-bus-Don-t-detach-non-attached-devices-on-device-.patch [bz#561414 bz#632299 bz#645351 bz#711354]
  - Resolves: bz#561414
    (Writes to virtual usb-storage produce I/O errors)
  - Resolves: bz#583922
    (Guests in same vlan could not ping successfully using rtl8139 nic)
  - Resolves: bz#632299
    (higher CPU load observed for virtualization workload on RHEL 6 than on RHEL 5.5)
  - Resolves: bz#645351
    (Add support for USB 2.0 (EHCI) to QEMU)
  - Resolves: bz#711354
    (Fix and enable enough of SCSI to make usb-storage work)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.170.el6
changelog:
  - kvm-raw-posix-Linearize-direct-I-O-on-Linux-NFS.patch [bz#711213]
  - kvm-virtio-console-Prevent-abort-s-in-case-of-host-chard.patch [bz#720535]
  - Resolves: bz#711213
    (QEMU should use pass preadv/pwritev a single vector when using cache=none and NFS)
  - Resolves: bz#720535
    ((virtio serial) Guest aborted when transferring data from guest to host)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.171.el6
changelog:
  - kvm-Add-qemu_ram_alloc_from_ptr-function.patch [bz#696102]
  - kvm-exec-remove-code-duplication-in-qemu_ram_alloc-and-q.patch [bz#696102]
  - kvm-Move-extern-of-mem_prealloc-to-cpu-all.h.patch [bz#696102]
  - kvm-Add-qemu_ram_remap.patch [bz#696102]
  - kvm-s390-Detect-invalid-invocations-of-qemu_ram_free-rem.patch [bz#696102]
  - kvm-MCE-unpoison-memory-address-across-reboot.patch [bz#696102]
  - Resolves: bz#696102
    ([Intel 6.2 FEAT] KVM: un-poison page when guest reboot: QEMU part)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.172.el6
changelog:
  - kvm-ide-Split-error-status-from-status-register.patch [bz#698537]
  - kvm-ide-Fix-ide_drive_pio_state_needed.patch [bz#698537]
  - kvm-ide-Add-forgotten-VMSTATE_END_OF_LIST-in-subsection.patch [bz#698537]
  - kvm-ide-Clear-error_status-after-restarting-flush.patch [bz#698537]
  - kvm-qemu-img-Add-cache-command-line-option.patch [bz#713743]
  - kvm-virtio-serial-bus-use-bh-for-unthrottling.patch [bz#709397]
  - kvm-usb-bluetooth-compile-out.patch [bz#723864]
  - kvm-clarify-support-statement-in-KVM-help.patch [bz#725054]
  - Resolves: bz#698537
  - Resolves: bz#709397
  - Resolves: bz#713743
  - Resolves: bz#723864
  - Resolves: bz#725054


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.173.el6
changelog:
  - kvm-Change-snapshot_blkdev-hmp-to-use-correct-argument-t.patch [bz#676982]
  - kvm-QMP-add-snapshot-blkdev-sync-command.patch [bz#676982]
  - kvm-Add-missing-documentation-for-qemu-img-p.patch [bz#722728]
  - Resolves: bz#676982
    (RFE: no qmp command for live snapshot)
  - Resolves: bz#722728
    (Update qemu-img convert/re-base man page)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.174.el6
changelog:
  - kvm-usb-hid-RHEL-6.1-migration-compatibility.patch [bz#720237]
  - Resolves: bz#720237
    (usb migration compatibility)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.175.el6
changelog:
  - kvm-report-serial-devices-created-with-device-in-the-PII.patch [bz#707130]
  - kvm-device-assignment-handle-device-with-incorrect-PCIe-.patch [bz#720972]
  - Resolves: bz#707130
    (ACPI description of serial and parallel ports incorrect with -chardev/-device)
  - Resolves: bz#720972
    (Unable to attach PCI device on a booted virt guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.176.el6
changelog:
  - kvm-net-Consistently-use-qemu_macaddr_default_if_unset.patch [bz#712046]
  - kvm-virtio-serial-bus-replay-guest_open-on-migration.patch [bz#725965]
  - kvm-qdev-Fix-printout-of-bit-device-properties-with-bit-.patch [bz#727580]
  - Resolves: bz#712046
    (Qemu allocates an existed macaddress to hotpluged nic)
  - Resolves: bz#725965
    (spice client mouse doesn't work after migration)
  - Resolves: bz#727580
    (bit property doesn't print correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.177.el6
changelog:
  - kvm-Revert-hw-qxl-render-drop-cursor-locks-replace-with-.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-spice-remove-qemu_mutex_-un-lock_iothread.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-implement-get_command-in-vga-mode-without.patch [bz#674583 bz#705070]
  - kvm-Revert-qxl-spice-display-move-pipe-to-ssd.patch [bz#674583 bz#705070]
  - kvm-spice-don-t-create-updates-in-spice-server-context.patch [bz#674583 bz#705070]
  - kvm-spice-don-t-call-displaystate-callbacks-from-spice-s.patch [bz#674583 bz#705070]
  - kvm-spice-drop-obsolete-iothread-locking.patch [bz#674583 bz#705070]
  - kvm-Make-spice-dummy-functions-inline-to-fix-calls-not-c.patch [bz#674583 bz#705070]
  - kvm-add-qdev_find_by_id.patch [bz#674583 bz#705070]
  - kvm-add-qxl_screendump-monitor-command.patch [bz#674583 bz#705070]
  - Resolves: bz#674583
    (qemu-kvm build fails without --enable-spice)
  - Resolves: bz#705070
    (QMP: screendump command does not allow specification of monitor to capture)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.178.el6
changelog:
  - Require new sgabios package [bz#684949]
  - Resolves: bz#684949
    ([RFE] Ability to display VM BIOS messages on boot)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.179.el6
changelog:
  - kvm-usb-linux-make-iso-urb-count-contigurable.patch [bz#723858 bz#723863]
  - kvm-usb-linux-track-inflight-iso-urb-count.patch [bz#723858 bz#723863]
  - kvm-ehci-add-freq-maxframes-properties.patch [bz#723858 bz#723863]
  - kvm-usb-bus-Don-t-allow-attaching-a-device-to-a-bus-with.patch [bz#723858 bz#723863]
  - kvm-usb-Proper-error-propagation-for-usb_device_attach-e.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-speedmask-to-devices.patch [bz#723858 bz#723863]
  - kvm-usb-linux-allow-compatible-high-speed-devices-to-con.patch [bz#723858 bz#723863]
  - kvm-usb-ignore-USB_DT_DEBUG.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-usb_fill_port-helper-function.patch [bz#723858 bz#723863]
  - kvm-usb-Move-initial-call-of-usb_port_location-to-usb_fi.patch [bz#723858 bz#723863]
  - kvm-usb-Add-a-register_companion-USB-bus-op.patch [bz#723858 bz#723863]
  - kvm-usb-Make-port-wakeup-and-complete-ops-take-a-USBPort.patch [bz#723858 bz#723863]
  - kvm-usb-Replace-device_destroy-bus-op-with-a-child_detac.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-drop-unused-num-ports-state-member.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Connect-Status-bit-is-read-only-don-t-allow.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-cleanup-port-reset-handling.patch [bz#723858 bz#723863]
  - kvm-usb-assert-on-calling-usb_attach-port-NULL-on-a-port.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Fix-handling-of-PED-and-PEDC-port-status-bi.patch [bz#723858 bz#723863]
  - kvm-usb-ehci-Add-support-for-registering-companion-contr.patch [bz#723858 bz#723863]
  - kvm-usb-uhci-Add-support-for-being-a-companion-controlle.patch [bz#723858 bz#723863]
  - kvm-pci-add-ich9-usb-controller-ids.patch [bz#723858 bz#723863]
  - kvm-uhci-add-ich9-controllers.patch [bz#723858 bz#723863]
  - kvm-ehci-fix-port-count.patch [bz#723858 bz#723863]
  - kvm-ehci-add-ich9-controller.patch [bz#723858 bz#723863]
  - kvm-usb-documentation-update.patch [bz#723858 bz#723863]
  - kvm-usb-fixup-bluetooth-descriptors.patch [bz#723858 bz#723863]
  - kvm-usb-hub-remove-unused-descriptor-arrays.patch [bz#723858 bz#723863]
  - kvm-usb-update-documentation.patch [bz#723858 bz#723863]
  - kvm-usb_register_port-do-not-set-port-opaque-and-port-in.patch [bz#723858 bz#723863]
  - kvm-qxl-fix-cmdlog-for-vga.patch [bz#700134]
  - kvm-qxl-interface_get_command-fix-reported-mode.patch [bz#700134]
  - kvm-spice-add-worker-wrapper-functions.patch [bz#700134]
  - kvm-spice-add-qemu_spice_display_init_common.patch [bz#700134]
  - kvm-spice-qxl-move-worker-wrappers.patch [bz#700134]
  - kvm-qxl-fix-surface-tracking-locking.patch [bz#700134]
  - kvm-qxl-add-io_port_to_string.patch [bz#700134]
  - kvm-qxl-error-handling-fixes-and-cleanups.patch [bz#700134]
  - kvm-qxl-make-qxl_guest_bug-take-variable-arguments.patch [bz#700134]
  - kvm-qxl-put-QXL_IO_UPDATE_IRQ-into-vgamode-whitelist.patch [bz#700134]
  - kvm-qxl-allow-QXL_IO_LOG-also-in-vga.patch [bz#700134]
  - kvm-qxl-only-disallow-specific-io-s-in-vga-mode.patch [bz#700134]
  - kvm-qxl-async-io-support-using-new-spice-api.patch [bz#700134]
  - kvm-qxl-add-QXL_IO_FLUSH_-SURFACES-RELEASE-for-guest-S3-.patch [bz#706711]
  - kvm-qxl-Remove-support-for-the-unused-unstable-device-ID.patch [bz#706711]
  - kvm-qxl-bump-pci-rev.patch [bz#706711]
  - kvm-move-balloon-handling-to-balloon.c.patch [bz#694378]
  - kvm-balloon-Make-functions-local-vars-static.patch [bz#694378]
  - kvm-balloon-Add-braces-around-if-statements.patch [bz#694378]
  - kvm-balloon-Simplify-code-flow.patch [bz#694378]
  - kvm-virtio-balloon-Separate-status-handling-into-separat.patch [bz#694378]
  - kvm-balloon-Separate-out-stat-and-balloon-handling.patch [bz#694378]
  - kvm-balloon-Fix-header-comment-add-Copyright.patch [bz#694378]
  - kvm-virtio-balloon-Fix-header-comment-add-Copyright.patch [bz#694378]
  - kvm-balloon-Don-t-allow-multiple-balloon-handler-registr.patch [bz#725625]
  - kvm-virtio-balloon-Check-if-balloon-registration-failed.patch [bz#725625]
  - kvm-balloon-Reject-negative-balloon-values.patch [bz#694373]
  - kvm-virtio-balloon-Add-exit-handler-fix-memleaks.patch [bz#726014]
  - kvm-virtio-balloon-Unregister-savevm-section-on-device-u.patch [bz#726023]
  - kvm-virtio-blk-Fix-memleak-on-exit.patch [bz#726015]
  - kvm-virtio-net-don-t-use-vdev-after-virtio_cleanup.patch [bz#726020]
  - kvm-virtio-Plug-memleak-by-freeing-vdev.patch [bz#726020]
  - kvm-qemu-img-Use-qemu_blockalign.patch [bz#728905]
  - kvm-Fix-automatically-assigned-network-names-for-netdev.patch [bz#623907]
  - kvm-Fix-netdev-name-lookup-in-device-device_add-netdev_d.patch [bz#623907]
  - kvm-do-not-reset-no_shutdown-after-we-shutdown-the-vm.patch [bz#728464]
  - Resolves: bz#623907
    (device_add rejects valid netdev when NIC with same ID exists)
  - Resolves: bz#694373
    (ballooning value reset to original value after setting a negative number)
  - Resolves: bz#694378
    (Core dump occurs when ballooning memory to 0)
  - Resolves: bz#700134
    ([qemu-kvm] - qxl runs i/o requests synchronously)
  - Resolves: bz#706711
    (qemu-kvm process quits when windows guest doing S3 w/ qxl device)
  - Resolves: bz#723858
    (usb: add companion controller support)
  - Resolves: bz#723863
    (usb: fixes various issues.)
  - Resolves: bz#725625
    (Hot unplug one virtio balloon device cause another balloon device unavailable)
  - Resolves: bz#726014
    (Fix memleak on exit in virtio-balloon)
  - Resolves: bz#726015
    (Fix memleak on exit in virtio-blk)
  - Resolves: bz#726020
    (Fix memleaks in all virtio devices)
  - Resolves: bz#726023
    (Migration after hot-unplug virtio-balloon will not succeed)
  - Resolves: bz#728464
    (QEMU does not honour '-no-shutdown' flag after the first shutdown attempt)
  - Resolves: bz#728905
    (qemu-img: use larger output buffer for cache option "none")


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.180.el6
changelog:
  - kvm-virtio-event-index-support.patch [bz#710943]
  - kvm-pc-rhel-6.1-and-back-compat-event-idx-support.patch [bz#710943]
  - kvm-qdev-implement-qdev_prop_set_bit.patch [bz#729104]
  - kvm-pci-insert-assert-that-auto-assigned-address-functio.patch [bz#729104]
  - kvm-pci-introduce-multifunction-property.patch [bz#729104]
  - kvm-pci_bridge-make-pci-bridge-aware-of-pci-multi-functi.patch [bz#729104]
  - kvm-pci-set-multifunction-property-for-normal-device.patch [bz#729104]
  - kvm-pci-don-t-overwrite-multi-functio-bit-in-pci-header-.patch [bz#729104]
  - kvm-pci-set-PCI-multi-function-bit-appropriately.patch [bz#729104]
  - kvm-Add-user_print-handler-to-qxl_screendump-monitor-com.patch [bz#705070]
  - Resolves: bz#705070
    (QMP: screendump command does not allow specification of monitor to capture)
  - Resolves: bz#710943
    (event index support in virtio and vhost-net)
  - Resolves: bz#729104
    (qemu-kvm: pci needs multifunction property)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.181.el6
changelog:
  - kvm-docs-Add-QED-image-format-specification.patch [bz#633380]
  - kvm-qed-Add-QEMU-Enhanced-Disk-image-format.patch [bz#633380]
  - kvm-qed-Table-L2-cache-and-cluster-functions.patch [bz#633380]
  - kvm-qed-Read-write-support.patch [bz#633380]
  - kvm-qed-Consistency-check-support.patch [bz#633380]
  - kvm-docs-Fix-missing-carets-in-QED-specification.patch [bz#633380]
  - kvm-qed-Refuse-to-create-images-on-block-devices.patch [bz#633380]
  - kvm-qed-Images-with-backing-file-do-not-require-QED_F_NE.patch [bz#633380]
  - kvm-docs-Describe-zero-data-clusters-in-QED-specificatio.patch [bz#633380]
  - kvm-qed-Add-support-for-zero-clusters.patch [bz#633380]
  - kvm-qed-Fix-consistency-check-on-32-bit-hosts.patch [bz#633380]
  - kvm-block-add-BDRV_O_INCOMING-migration-consistency-hint.patch [bz#633380]
  - kvm-qed-honor-BDRV_O_INCOMING-for-live-migration-support.patch [bz#633380]
  - spec file: spec-file-whitelist-QED-image-format [bz#633380]
  - kvm-qemu-tool-Stub-out-qemu-timer-functions.patch [bz#633380]
  - kvm-qed-Periodically-flush-and-clear-need-check-bit.patch [bz#633380]
  - kvm-qed-support-for-growing-images.patch [bz#633380]
  - kvm-usb-ehci-trace-rename-next-to-nxt.patch [bz#720979]
  - kvm-qxl-make-sure-primary-surface-is-saved-on-migration.patch [bz#729869]
  - Resolves: bz#633380
    ([6.2 FEAT] Include QED image format for KVM guests)
  - Resolves: bz#720979
    (do not use next  as a variable name in qemu-kvm systemtap tapset)
  - Resolves: bz#729869
    (qxl: primary surface not saved on migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.182.el6
changelog:
  - kvm-spice-catch-spice-server-initialization-failures.patch [bz#682227]
  - kvm-qcow2-Fix-L1-table-size-after-bdrv_snapshot_goto.patch [bz#729572]
  - spec: require spice-server-devel >= 0.8.2-2 [bz#723676]
  - kvm-Add-missing-trace-call-to-oslib-posix.c-qemu_vmalloc.patch [bz#714773]
  - Resolves: bz#682227
    (qemu-kvm doesn't exit when binding to specified port fails)
  - Resolves: bz#714773
    (qemu missing marker for qemu.kvm.qemu_vmalloc)
  - Related: bz#723676
    (spice-server: update to upstream spice 0.8.2)
  - Resolves: bz#729572
    (qcow2: Loading internal snapshot can corrupt image)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.183.el6
changelog:
  - kvm-spice-add-sanity-check-for-spice-ports.patch [bz#715582 bz#717958]
  - kvm-block-add-discard-support.patch [bz#711354]
  - kvm-qemu-option-New-qemu_opts_reset.patch [bz#711354]
  - kvm-error-New-qemu_opts_loc_restore.patch [bz#711354]
  - kvm-scsi-Rebase-to-upstream-v0.15.0-rc2.patch [bz#711354]
  - kvm-qxl-upon-reset-if-spice-worker-is-stopped-the-comman.patch [bz#728984]
  - kvm-qxl-allowing-the-command-rings-to-be-not-empty-when-.patch [bz#728984]
  - Resolves: bz#711354
    (Fix and enable enough of SCSI to make usb-storage work)
  - Resolves: bz#715582
    (qemu-kvm doesn't report error when supplied negative spice port value)
  - Resolves: bz#717958
    (qemu-kvm start vnc even though -spice ... is supplied)
  - Resolves: bz#728984
    (Target qemu process - assertion failed during migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.184.el6
changelog:
  - kvm-bz719818-KVM-qemu-support-for-SMEP.patch [bz#719818]
  - kvm-vmstate-add-no_migrate-flag-to-VMStateDescription.patch [bz#723870]
  - kvm-ehci-doesn-t-support-migration.patch [bz#723870]
  - kvm-usb-storage-first-migration-support-bits.patch [bz#723870]
  - Resolves: bz#719818
    (KVM qemu support for Supervisor Mode Execution Protection (SMEP))
  - Resolves: bz#723870
    (tag devices without migration support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.185.el6
changelog:
  - kvm-virtio-prevent-indirect-descriptor-buffer-overflow.patch [bz#713593]
  - Resolves: bz#713593
    (CVE-2011-2212 virtqueue: too-large indirect descriptor buffer overflow [rhel-6.2])
  - CVE: CVE-2011-2212


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.186.el6
changelog:
  - kvm-x86-Introduce-kvmclock-device-to-save-restore-it.patch [bz#658467]
  - kvm-use-kernel-provided-para_features-instead-of-statica.patch [bz#624983]
  - kvm-add-kvmclock-to-its-second-bit-v2.patch [bz#624983]
  - kvm-create-kvmclock-when-one-of-the-flags-are-presen.patch [bz#624983]
  - kvm-x86-Allow-multiple-cpu-feature-matches-of-lookup_fea.patch [bz#624983]
  - kvm-vhost-net-cleanup-host-notifiers-at-last-step.patch [bz#695285]
  - kvm-block-include-flush-requests-in-info-blockstats.patch [bz#715017]
  - kvm-block-explicit-I-O-accounting.patch [bz#715017]
  - kvm-block-latency-accounting.patch [bz#715017]
  - kvm-revert-floppy-save-and-restore-DIR-register.patch [bz#718664]
  - kvm-qemu-sockets-avoid-strlen-of-NULL-pointer.patch [bz#734860]
  - Resolves: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Resolves: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)
  - Resolves: bz#695285
    (guest quit with "Guest moved used index from 256 to 915" error when save_vm)
  - Resolves: bz#715017
    (Report disk latency (read and write) for each storage device)
  - Resolves: bz#718664
    (Migration from host RHEL6.1+ to host RHEL6.0.z failed with floppy)
  - Resolves: bz#734860
    (qemu-kvm: segfault when missing host parameter for socket chardev)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.187.el6
changelog:
  - Revert patches that broke the build
  - kvm-Revert-block-latency-accounting.patch [bz#715017]
  - kvm-Revert-block-explicit-I-O-accounting.patch [bz#715017]
  - kvm-Revert-block-include-flush-requests-in-info-blocksta.patch [bz#715017]
  - kvm-Revert-x86-Allow-multiple-cpu-feature-matches-of-loo.patch [bz#624983]
  - kvm-Revert-kvm-create-kvmclock-when-one-of-the-flags-are.patch [bz#624983]
  - kvm-Revert-add-kvmclock-to-its-second-bit-v2.patch [bz#624983]
  - kvm-Revert-use-kernel-provided-para_features-instead-of-.patch [bz#624983]
  - kvm-Revert-kvm-x86-Introduce-kvmclock-device-to-save-res.patch [bz#658467]
  - Related: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Related: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)
  - Related: bz#715017
    (Report disk latency (read and write) for each storage device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.188.el6
changelog:
  - kvm-x86-Introduce-kvmclock-device-to-save-restore-it-fixed.patch [bz#658467]
  - kvm-use-kernel-provided-para_features-instead-of-statica-take2.patch [bz#624983]
  - kvm-add-kvmclock-to-its-second-bit-v2-take2.patch [bz#624983]
  - kvm-create-kvmclock-when-one-of-the-flags-are-present-take2.patch [bz#624983]
  - kvm-x86-Allow-multiple-cpu-feature-matches-of-lookup_fea-take2.patch [bz#624983]
  - Resolves: bz#624983
    (QEMU should support the newer set of MSRs for kvmclock)
  - Resolves: bz#658467
    (kvm clock breaks migration result stability -  for unit test propose)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.189.el6
changelog:
  - kvm-qemu-img-Require-larger-zero-areas-for-sparse-handli.patch [bz#730587]
  - kvm-qxl-send-interrupt-after-migration-in-case-ram-int_p.patch [bz#732949]
  - kvm-qxl-s-qxl_set_irq-qxl_update_irq.patch [bz#732949]
  - kvm-block-include-flush-requests-in-info-blockstats-v2.patch [bz#715017]
  - kvm-block-explicit-I-O-accounting-v2.patch [bz#715017]
  - kvm-block-latency-accounting-v2.patch [bz#715017]
  - Resolves: bz#715017
    (Report disk latency (read and write) for each storage device)
  - Resolves: bz#730587
    (qemu-img convert takes 25m for specific images when using cache=none)
  - Resolves: bz#732949
    (Guest screen becomes abnormal after migration with spice)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.190.el6
changelog:
  - kvm-Add-flag-to-indicate-external-users-to-block-device.patch [bz#633370]
  - kvm-block-enable-in_use-flag.patch [bz#633370]
  - kvm-block-add-drive-copy-on-read-on-off.patch [bz#633370]
  - kvm-qed-replace-is_write-with-flags-field.patch [bz#633370]
  - kvm-qed-extract-qed_start_allocating_write.patch [bz#633370]
  - kvm-qed-make-qed_aio_write_alloc-reusable.patch [bz#633370]
  - kvm-qed-add-support-for-copy-on-read.patch [bz#633370]
  - kvm-qed-avoid-deadlock-on-emulated-synchronous-I-O.patch [bz#633370]
  - kvm-block-add-bdrv_aio_copy_backing.patch [bz#633370]
  - kvm-qmp-add-block_stream-command.patch [bz#633370]
  - kvm-qmp-add-block_job_cancel-command.patch [bz#633370]
  - kvm-qmp-add-query-block-jobs-command.patch [bz#633370]
  - kvm-qmp-add-block_job_set_speed-command.patch [bz#633370]
  - kvm-block-add-drive-stream-on-off.patch [bz#633370]
  - kvm-qed-intelligent-streaming-implementation.patch [bz#633370]
  - Resolves: bz#633370
    ([6.1 FEAT] Enhance QED image format to support streaming from remote systems)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.191.el6
changelog:
  - kvm-CVE-2011-2527-os-posix-set-groups-properly-for-runas.patch [bz#722583]
  - CVE: CVE-2011-2527
  - Resolves: bz#722583
    (when started as root, extra groups are not dropped correctly)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.192.el6
changelog:
  - kvm-spice-workaround-a-spice-server-bug.patch [bz#697441]
  - kvm-balloon-Disassociate-handlers-from-balloon-device-on.patch [bz#736975]
  - kvm-virtio-balloon-Disassociate-from-the-balloon-handler.patch [bz#736975]
  - kvm-virtio-serial-Plug-memory-leak-on-qdev-exit.patch [bz#738019]
  - kvm-spice-set-qxl-ssd.running-true-before-telling-spice-.patch [bz#733993]
  - kvm-qemu-kvm-vm_stop-pause-threads-before-calling-other-.patch [bz#729621]
  - kvm-Fix-termination-by-signal-with-no-shutdown.patch [bz#738487]
  - kvm-qemu-option-Remove-enable-nesting-from-help-text.patch [bz#738555]
  - Resolves: bz#697441
    (JSON corruption when closing SPICE window)
  - Resolves: bz#729621
    (ASSERT worker->running failed on source qemu during migration with Spice session)
  - Resolves: bz#733993
    (migration target can crash (assert(d->ssd.running)))
  - Resolves: bz#736975
    (Qemu-kvm fails to unregister virtio-balloon-pci device when unplugging)
  - Resolves: bz#738019
    (Memleak in virtio-serial code: VirtIOSerialBus not freed)
  - Resolves: bz#738487
    (Fix termination by signal with -no-shutdown)
  - Resolves: bz#738555
    (Stop exposing -enable-nested)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.193.el6
changelog:
  - kvm-usb-bus-Don-t-allow-speed-mismatch-while-attaching-d.patch [bz#728120]
  - kvm-usb-vmstate-add-parent-dev-path.patch [bz#734995]
  - kvm-usb-claim-port-at-device-initialization-time.patch [bz#734995]
  - kvm-usb-host-tag-as-unmigratable.patch [bz#723870]
  - kvm-usb-storage-fix-NULL-pointer-dereference.patch [bz#733010]
  - kvm-register-signal-handler-after-initializing-SDL.patch [bz#735716]
  - kvm-report-that-QEMU-process-was-killed-by-a-signal.patch [bz#735716]
  - kvm-Tidy-up-message-printed-when-we-exit-on-a-signal.patch [bz#735716]
  - kvm-Monitor-Convert-do_screen_dump-to-QObject.patch [bz#729969]
  - kvm-usb-hub-need-to-check-dev-attached.patch [bz#734995]
  - kvm-usb-fix-port-reset.patch [bz#734995]
  - kvm-qdev-print-bus-properties-too.patch [bz#678731]
  - kvm-ide-link-BMDMA-and-IDEState-at-device-creation.patch [bz#739480]
  - Resolves: bz#678731
    (Update qemu-kvm -device pci-assign,?  properties)
  - Resolves: bz#723870
    (tag devices without migration support)
  - Resolves: bz#728120
    (print error on usb speed mismatch between device and bus/port)
  - Resolves: bz#729969
    (Make screendump command available in QMP)
  - Resolves: bz#733010
    (core dump when issue fdisk -l in guest which has two usb-storage attached)
  - Resolves: bz#734995
    (Core dump when hotplug three usb-hub into the same port under both uhci and ehci)
  - Resolves: bz#735716
    (QEMU should report the PID of the process that sent it signals for troubleshooting purposes)
  - Resolves: bz#739480
    (qemu-kvm core dumps when migration with reboot)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.194.el6
changelog:
  - kvm-spice-turn-client_migrate_info-to-async.patch [bz#737921]
  - kvm-spice-support-the-new-migration-interface-spice-0.8..patch [bz#737921]
  - kvm-pci-devfn-check-device-slot-number-in-range.patch [bz#678729]
  - Resolves: bz#678729
    (Hotplug VF/PF with invalid addr value leading to qemu-kvm process quit with core dump)
  - Resolves: bz#737921
    (No Spice password is set on target host after migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.195.el6
changelog:
  - Require spice-server-devel >= 0.8.2-4 [bz#737921]
  - Resolves: bz#737921
    (No Spice password is set on target host after migration)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.196.el6
changelog:
  - kvm-usb-linux-add-get_endp.patch [bz#733272]
  - kvm-usb-host-reapurb-error-report-fix.patch [bz#733272]
  - kvm-usb-host-fix-halted-endpoints.patch [bz#733272]
  - kvm-usb-host-limit-open-retries.patch [bz#733272]
  - kvm-usb-host-fix-configuration-tracking.patch [bz#733272]
  - kvm-usb-host-claim-port.patch [bz#733272]
  - kvm-usb-host-endpoint-table-fixup.patch [bz#733272]
  - kvm-usb-host-factor-out-code.patch [bz#733272]
  - kvm-usb-host-handle-USBDEVFS_SETCONFIGURATION-returning-.patch [bz#733272]
  - Resolves: bz#733272
    (Usb stick passthrough failed under uhci+ehci)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.197.el6
changelog:
  - kvm-device-assignment-pci_cap_init-add-82599-VF-quirk.patch [bz#742080]
  - kvm-savevm-teach-qemu_fill_buffer-to-do-partial-refills.patch [bz#725565]
  - kvm-savevm-some-coding-style-cleanups.patch [bz#725565]
  - kvm-savevm-define-qemu_get_byte-using-qemu_peek_byte.patch [bz#725565]
  - kvm-savevm-improve-subsections-detection-on-load.patch [bz#725565]
  - kvm-Revert-savevm-fix-corruption-in-vmstate_subsection_l.patch [bz#725565]
  - kvm-QMP-HMP-Drop-the-live-snapshot-commands.patch [bz#742401]
  - kvm-usb-hub-wakeup-on-attach.patch [bz#733272]
  - Resolves: bz#725565
    (migration subsections are still broken)
  - Resolves: bz#733272
    (Usb stick passthrough failed under uhci+ehci)
  - Resolves: bz#742080
    (Device assignment of 82599 VFs no longer work after patch for v1 PCIe Capability structures)
  - Resolves: bz#742401
    (qemu-kvm disable live snapshot support)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.198.el6
changelog:
  - kvm-bz716261-kvm-Extend-kvm_arch_get_supported_cpuid-to-.patch [bz#716261]
  - kvm-bz716261-Enable-XSAVE-related-CPUID.patch [bz#716261]
  - kvm-bz716261-Fix-XSAVE-feature-bit-enumeration.patch [bz#716261]
  - kvm-bz716261-Synchronize-kernel-headers.patch [bz#716261]
  - kvm-bz716261-kvm-Enable-XSAVE-live-migration-support.patch [bz#716261]
  - kvm-bz716261-Put-XSAVE-area-in-a-sub-section.patch [bz#716261]
  - kvm-bz716261-Enable-xsave-as-a-cpu-flag.patch [bz#716261]
  - kvm-allow-more-than-1T-in-KVM-x86-guest.patch [bz#743391]
  - kvm-blockdev-Belatedly-remove-driveopts.patch [bz#742458]
  - kvm-ide-Remove-useless-IDEDeviceInfo-members-unit-drive.patch [bz#742458]
  - kvm-block-New-bdrv_next.patch [bz#742458]
  - kvm-block-Decouple-savevm-from-DriveInfo.patch [bz#742458]
  - kvm-savevm-Survive-hot-unplug-of-snapshot-device.patch [bz#743269]
  - kvm-ide-Replace-IDEState-members-is_cdrom-is_cf-by-drive.patch [bz#742458]
  - kvm-ide-split-ide-command-interpretation-off.patch [bz#742458]
  - kvm-ide-fix-whitespace-gap-in-ide_exec_cmd.patch [bz#742458]
  - kvm-trace-Trace-bdrv_set_locked.patch [bz#742458]
  - kvm-atapi-Drives-can-be-locked-without-media-present.patch [bz#742469]
  - kvm-atapi-Report-correct-errors-on-guest-eject-request.patch [bz#742458]
  - kvm-ide-Split-atapi.c-out.patch [bz#742458]
  - kvm-ide-atapi-Factor-commands-out.patch [bz#742458]
  - kvm-ide-atapi-Use-table-instead-of-switch-for-commands.patch [bz#742458]
  - kvm-ide-atapi-Replace-bdrv_get_geometry-calls-by-s-nb_se.patch [bz#742458]
  - kvm-ide-atapi-Introduce-CHECK_READY-flag-for-commands.patch [bz#742458]
  - kvm-atapi-Move-comment-to-proper-place.patch [bz#742458]
  - kvm-atapi-Explain-why-we-need-a-media-not-present-state.patch [bz#742458]
  - kvm-block-QMP-Deprecate-query-block-s-type-drop-info-blo.patch [bz#742458]
  - kvm-blockdev-Make-eject-fail-for-non-removable-drives-ev.patch [bz#742476]
  - kvm-block-Reset-device-model-callbacks-on-detach.patch [bz#742458]
  - kvm-block-raw-win32-Drop-disabled-code-for-removable-hos.patch [bz#742458]
  - kvm-block-Make-BlockDriver-method-bdrv_set_locked-return.patch [bz#742458]
  - kvm-block-Make-BlockDriver-method-bdrv_eject-return-void.patch [bz#742458]
  - kvm-block-Don-t-let-locked-flag-prevent-medium-load.patch [bz#742480]
  - kvm-scsi-disk-Codingstyle-fixes.patch [bz#742458]
  - kvm-scsi-Remove-references-to-SET_WINDOW.patch [bz#742458]
  - kvm-scsi-Remove-REZERO_UNIT-emulation.patch [bz#742458]
  - kvm-scsi-Sanitize-command-definitions.patch [bz#742458]
  - kvm-scsi-disk-Remove-drive_kind.patch [bz#742458]
  - kvm-scsi-disk-no-need-to-call-scsi_req_data-on-a-short-r.patch [bz#742458]
  - kvm-scsi-pass-status-when-completing.patch [bz#742458]
  - kvm-trace-Fix-harmless-mismerge-of-hw-scsi-bus.c-events.patch [bz#742458]
  - kvm-scsi-move-sense-handling-to-generic-code.patch [bz#742458]
  - kvm-block-Attach-non-qdev-devices-as-well.patch [bz#742458]
  - kvm-block-Generalize-change_cb-to-BlockDevOps.patch [bz#742458]
  - kvm-block-Split-change_cb-into-change_media_cb-resize_cb.patch [bz#742458]
  - kvm-ide-Update-command-code-definitions-as-per-ACS-2-Tab.patch [bz#742458]
  - kvm-ide-Clean-up-case-label-indentation-in-ide_exec_cmd.patch [bz#742458]
  - kvm-ide-Give-vmstate-structs-internal-linkage-where-poss.patch [bz#742458]
  - kvm-block-raw-Fix-to-forward-method-bdrv_media_changed.patch [bz#742458]
  - kvm-block-Leave-tracking-media-change-to-device-models.patch [bz#742458]
  - kvm-fdc-Make-media-change-detection-more-robust.patch [bz#742458]
  - kvm-block-Clean-up-bdrv_flush_all.patch [bz#742458]
  - kvm-savevm-Include-writable-devices-with-removable-media.patch [bz#742484]
  - kvm-scsi-fill-in-additional-sense-length-correctly.patch [bz#742458]
  - kvm-ide-Fix-ATA-command-READ-to-set-ATAPI-signature-for-.patch [bz#742458]
  - kvm-ide-Use-a-table-to-declare-which-drive-kinds-accept-.patch [bz#742458]
  - kvm-ide-Reject-ATA-commands-specific-to-drive-kinds.patch [bz#742458]
  - kvm-ide-atapi-Clean-up-misleading-name-in-cmd_start_stop.patch [bz#742458]
  - kvm-ide-atapi-Track-tray-open-close-state.patch [bz#742458]
  - kvm-scsi-disk-Factor-out-scsi_disk_emulate_start_stop.patch [bz#742458]
  - kvm-scsi-disk-Track-tray-open-close-state.patch [bz#742458]
  - kvm-block-Revert-entanglement-of-bdrv_is_inserted-with-t.patch [bz#742458]
  - kvm-block-Drop-tray-status-tracking-no-longer-used.patch [bz#742458]
  - kvm-ide-atapi-Track-tray-locked-state.patch [bz#742458]
  - kvm-scsi-disk-Track-tray-locked-state.patch [bz#742458]
  - kvm-block-Leave-enforcing-tray-lock-to-device-models.patch [bz#742458]
  - kvm-block-Drop-medium-lock-tracking-ask-device-models-in.patch [bz#742458]
  - kvm-block-Rename-bdrv_set_locked-to-bdrv_lock_medium.patch [bz#742458]
  - kvm-ide-atapi-Don-t-fail-eject-when-tray-is-already-open.patch [bz#742458]
  - kvm-scsi-disk-Fix-START_STOP-to-fail-when-it-can-t-eject.patch [bz#742458]
  - kvm-ide-atapi-Preserve-tray-state-on-migration.patch [bz#743342]
  - kvm-block-Clean-up-remaining-users-of-removable.patch [bz#742458]
  - kvm-block-Drop-BlockDriverState-member-removable.patch [bz#742458]
  - kvm-block-Show-whether-the-virtual-tray-is-open-in-info-.patch [bz#723270]
  - kvm-block-New-change_media_cb-parameter-load.patch [bz#742458]
  - kvm-ide-atapi-scsi-disk-Make-monitor-eject-f-then-change.patch [bz#676528]
  - Resolves: bz#676528
    (Can't insert media after previous media was forcefully ejected)
  - Resolves: bz#716261
    ([Intel 6.2 FEAT] Add support for XSAVE/XRSTOR qemu-kvm changes)
  - Resolves: bz#723270
    (Report cdrom tray status in a monitor command such as info block)
  - Resolves: bz#742458
    (Tracker Bug:Big block layer backport)
  - Resolves: bz#742469
    (Drives can not be locked without media present)
  - Resolves: bz#742476
    (Make eject fail for non-removable drives even with -f)
  - Resolves: bz#742480
    (Don't let locked flag prevent medium load)
  - Resolves: bz#742484
    (should be also have  snapshot on floppy)
  - Resolves: bz#743269
    (Hot unplug of snapshot device crashes)
  - Resolves: bz#743342
    (IDE CD-ROM tray state gets lost on migration)
  - Resolves: bz#743391
    (KVM guest limited to 40bit of physical address space)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.199.el6
changelog:
  - kvm-usb-hid-activate-usb-tablet-mouse-after-migration.patch [bz#741878]
  - kvm-ps2-migrate-ledstate.patch [bz#729294]
  - Resolves: bz#729294
    (Keyboard leds/states are not synchronized after migration of guest)
  - Resolves: bz#741878
    (USB tablet mouse does not work well when migrating between 6.2<->6.2 hosts and 6.1<->6.2 hosts)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.200.el6
changelog:
  - kvm-Introduce-the-RunState-type.patch [bz#617889]
  - kvm-RunState-Add-additional-states.patch [bz#617889]
  - kvm-runstate_set-Check-for-valid-transitions.patch [bz#617889]
  - kvm-Drop-the-incoming_expected-global-variable.patch [bz#617889]
  - kvm-Drop-the-vm_running-global-variable.patch [bz#617889]
  - kvm-Monitor-QMP-Don-t-allow-cont-on-bad-VM-state.patch [bz#617889]
  - kvm-QMP-query-status-Introduce-status-key.patch [bz#617889]
  - kvm-HMP-info-status-Print-the-VM-state.patch [bz#617889]
  - kvm-RunState-Rename-enum-values.patch [bz#617889]
  - kvm-runstate-Allow-to-transition-from-paused-to-postmigr.patch [bz#617889]
  - kvm-savevm-qemu_savevm_state-Drop-stop-VM-logic.patch [bz#617889]
  - kvm-runstate-Allow-user-to-migrate-twice.patch [bz#617889]
  - kvm-RunState-Don-t-abort-on-invalid-transitions.patch [bz#617889]
  - Resolves: bz#617889
    (QMP: provide VM stop reason)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.201.el6
changelog:
  - kvm-migration-s-dprintf-DPRINTF.patch [bz#669581]
  - kvm-migration-simplify-state-assignmente.patch [bz#669581]
  - kvm-migration-Check-that-migration-is-active-before-canc.patch [bz#669581]
  - kvm-Reorganize-and-fix-monitor-resume-after-migration.patch [bz#669581]
  - kvm-migration-add-error-handling-to-migrate_fd_put_notif.patch [bz#669581]
  - kvm-migration-If-there-is-one-error-it-makes-no-sense-to.patch [bz#669581]
  - kvm-buffered_file-Use-right-opaque.patch [bz#669581]
  - kvm-buffered_file-reuse-QEMUFile-has_error-field.patch [bz#669581]
  - kvm-migration-don-t-write-when-migration-is-not-active.patch [bz#669581]
  - kvm-migration-set-error-if-select-return-one-error.patch [bz#669581]
  - kvm-migration-change-has_error-to-contain-errno-values.patch [bz#669581]
  - kvm-migration-return-real-error-code.patch [bz#669581]
  - kvm-migration-rename-qemu_file_has_error-to-qemu_file_ge.patch [bz#669581]
  - kvm-savevm-Rename-has_error-to-last_error-field.patch [bz#669581]
  - kvm-migration-use-qemu_file_get_error-return-value-when-.patch [bz#669581]
  - kvm-migration-make-save_live-return-errors.patch [bz#669581]
  - kvm-qemu-kvm-fix-improper-nmi-emulation.patch [bz#738565]
  - kvm-scsi-fix-accounting-of-writes.patch [bz#744780]
  - kvm-scsi-disk-bump-SCSIRequest-reference-count-until-aio.patch [bz#744780]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Resolves: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)
  - Resolves: bz#744780
    (use-after-free in QEMU SCSI target code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.202.el6
changelog:
  - kvm-Revert-qemu-kvm-fix-improper-nmi-emulation.patch [bz#738565]
  - Related: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.203.el6
changelog:
  - kvm-qemu-kvm-fix-improper-nmi-emulation-2.patch [bz#738565]
  - Resolves: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.204.el6
changelog:
  - kvm-savevm-qemu_fille_buffer-used-to-return-one-error-fo.patch [bz#669581]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.205.el6
changelog:
  - kvm-qxl-fix-guest-cursor-tracking.patch [bz#744518]
  - kvm-qxl-create-slots-on-post_load-in-vga-state.patch [bz#740547]
  - kvm-qxl-reset-update_surface.patch [bz#690427]
  - Resolves: bz#690427
    (qemu-kvm crashes when update/roll back of qxl driver in WindowsXP guest)
  - Resolves: bz#740547
    (qxl: migrating when not in native mode causes a "panic: virtual address out of range")
  - Resolves: bz#744518
    (qemu-kvm core dumps when qxl-linux guest migrate with reboot)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.206.el6
changelog:
  - kvm-Revert-savevm-qemu_fille_buffer-used-to-return-one-e.patch [bz#669581]
  - kvm-Revert-migration-make-save_live-return-errors.patch [bz#669581]
  - kvm-Revert-migration-use-qemu_file_get_error-return-valu.patch [bz#669581]
  - kvm-Revert-savevm-Rename-has_error-to-last_error-field.patch [bz#669581]
  - kvm-Revert-migration-rename-qemu_file_has_error-to-qemu_.patch [bz#669581]
  - kvm-Revert-migration-return-real-error-code.patch [bz#669581]
  - kvm-Revert-migration-change-has_error-to-contain-errno-v.patch [bz#669581]
  - kvm-Revert-migration-set-error-if-select-return-one-erro.patch [bz#669581]
  - kvm-Revert-migration-don-t-write-when-migration-is-not-a.patch [bz#669581]
  - kvm-Revert-buffered_file-reuse-QEMUFile-has_error-field.patch [bz#669581]
  - kvm-Revert-buffered_file-Use-right-opaque.patch [bz#669581]
  - kvm-Revert-migration-If-there-is-one-error-it-makes-no-s.patch [bz#669581]
  - kvm-Revert-migration-add-error-handling-to-migrate_fd_pu.patch [bz#669581]
  - kvm-Revert-Reorganize-and-fix-monitor-resume-after-migra.patch [bz#669581]
  - kvm-Revert-migration-Check-that-migration-is-active-befo.patch [bz#669581]
  - kvm-Revert-migration-simplify-state-assignmente.patch [bz#669581]
  - kvm-Revert-migration-s-dprintf-DPRINTF.patch [bz#669581]
  - Related: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Fixes bz#749806
    (Migration segfault on migrate_fd_put_notify()/qemu_file_get_error())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.207.el6
changelog:
  - kvm-migration-s-dprintf-DPRINTF-v2.patch [bz#669581]
  - kvm-migration-simplify-state-assignmente-v2.patch [bz#669581]
  - vm-migration-Check-that-migration-is-active-before-canc-v2.patch [bz#669581]
  - kvm-Reorganize-and-fix-monitor-resume-after-migration-v2.patch [bz#669581]
  - kvm-migration-add-error-handling-to-migrate_fd_put_notif-v2.patch [bz#669581]
  - kvm-migration-If-there-is-one-error-it-makes-no-sense-to-v2.patch [bz#669581]
  - kvm-buffered_file-Use-right-opaque-v2.patch [bz#669581]
  - kvm-buffered_file-reuse-QEMUFile-has_error-field-v2.patch [bz#669581]
  - kvm-migration-don-t-write-when-migration-is-not-active-v2.patch [bz#669581]
  - kvm-migration-set-error-if-select-return-one-error-v2.patch [bz#669581]
  - kvm-migration-change-has_error-to-contain-errno-values-v2.patch [bz#669581]
  - kvm-migration-return-real-error-code-v2.patch [bz#669581]
  - kvm-migration-rename-qemu_file_has_error-to-qemu_file_ge-v2.patch [bz#669581]
  - kvm-savevm-Rename-has_error-to-last_error-field-v2.patch [bz#669581]
  - kvm-migration-use-qemu_file_get_error-return-value-when--v2.patch [bz#669581]
  - kvm-migration-make-save_live-return-errors-v2.patch [bz#669581]
  - kvm-savevm-qemu_fille_buffer-used-to-return-one-error-fo-v2.patch [bz#669581]
  - kvm-Fix-segfault-on-migration-completion.patch [bz#669581 bz#749806]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Resolves: bz#749806
    (Migration segfault on migrate_fd_put_notify()/qemu_file_get_error())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.208.el6
changelog:
  - kvm-migration-flush-migration-data-to-disk.patch [bz#721114]
  - Resolves: bz#721114
    (qemu fails to restore guests that were previously suspended on host shutdown)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6
changelog:
  - kvm-hda-do-not-mix-output-and-input-streams-RHBZ-740493-v2.patch [bz#740493]
  - kvm-hda-do-not-mix-output-and-input-stream-states-RHBZ-740493-v2.patch [bz#740493]
  - kvm-intel-hda-fix-stream-search.patch [bz#740493]
  - Resolves: bz#740493
    (audio playing doesn't work when sound recorder is opened)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.210.el6
changelog:
  - kvm-ehci-fix-cpage-check.patch [bz#728843]
  - Resolves: bz#728843
    (qemu-kvm: Some suspicious code (found by Coverity))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.211.el6
changelog:
  - kvm-enable-PIE-and-full-relro-for-qemu-kvm.patch [bz#738812]
  - kvm-Fix-segfault-on-screendump-with-nographic.patch [bz#728385]
  - kvm-usb-hub-don-t-trigger-assert-on-packet-completion.patch [bz#740707]
  - kvm-qemu-char-Check-for-missing-backend-name.patch [bz#750738]
  - kvm-monitor-use-after-free-in-do_wav_capture.patch [bz#749830]
  - kvm-cirrus-fix-bank-unmap.patch [bz#594654]
  - kvm-acl-Fix-use-after-free-in-qemu_acl_reset.patch [bz#749820]
  - kvm-qdev-Fix-crash-on-device-x.patch [bz#757142]
  - kvm-console-Fix-rendering-of-VGA-underline.patch [bz#757132]
  - kvm-monitor-Fix-file_completion-to-check-for-stat-failur.patch [bz#757713]
  - kvm-char-Disable-write-callback-if-throttled-chardev-is-.patch [bz#745758]
  - Resolves: bz#594654
    (Random read/write /dev/port [vga] caused 'invalid parameters' error)
  - Resolves: bz#728385
    (attempting to take a screenshot of a VM with no graphics crashes qemu)
  - Resolves: bz#738812
    (qemu-kvm should be built with full relro and PIE support)
  - Resolves: bz#740707
    (pass-through usb stick under usb 1.1 controller causes QEMU to abort with an assertion failure)
  - Resolves: bz#745758
    (Segmentation fault occurs after hot unplug virtio-serial-pci while virtio-serial-port in use)
  - Resolves: bz#749820
    (Use after free in acl_reset)
  - Resolves: bz#749830
    (Use after free after wavcapture fails)
  - Resolves: bz#750738
    (Segmentation fault if -chardev without backend)
  - Resolves: bz#757132
    (VGA underline causes read beyond static array, draws crap pixels)
  - Resolves: bz#757142
    (Invalid command line option -device '?=x' crashes)
  - Resolves: bz#757713
    (File name completion in monitor can append '/' when it shouldn't)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.212.el6
changelog:
  - kvm-bz716261-qemu-kvm-Fix-XSAVE-for-active-AVX-usage.patch [bz#716261]
  - Resolves: bz#716261
    ([Intel 6.2 FEAT] Add support for XSAVE/XRSTOR qemu-kvm changes)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.213.el6
changelog:
  - kvm-usb-hub-implement-reset.patch [bz#767499]
  - kvm-usb-hub-wakeup-on-detach-too.patch [bz#767499]
  - Resolves: bz#767499
    (windows (2k3 and 2k8) hit BSOD while booting guest with usb device)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.214.el6
changelog:
  - kvm-ide-Make-it-explicit-that-ide_create_drive-can-t-fai.patch [bz#737879]
  - kvm-qdev-Don-t-hw_error-in-qdev_init_nofail.patch [bz#737879]
  - kvm-virtio-pci-Check-for-virtio_blk_init-failure.patch [bz#737879]
  - kvm-virtio-blk-Fix-virtio-blk-s390-to-require-drive.patch [bz#737879]
  - kvm-ide-scsi-virtio-blk-Reject-empty-drives-unless-media.patch [bz#737879]
  - kvm-exit-if-drive-specified-is-invalid-instead-of-ignori.patch [bz#737879]
  - kvm-qdev-Fix-comment-around-qdev_init_nofail.patch [bz#737879]
  - kvm-Strip-trailing-n-from-error_report-s-first-argument.patch [bz#737879]
  - kvm-scsi-virtio-blk-usb-msd-Clean-up-device-init-error-m.patch [bz#737879]
  - Resolves: bz#737879
    (Qemu-kvm fails to exit when given invalid "-drive" option name or option value)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.215.el6
changelog:
  - kvm-virtio-serial-kill-VirtIOSerialDevice.patch [bz#769528]
  - kvm-virtio-serial-Clean-up-virtconsole-detection.patch [bz#769528]
  - kvm-virtio-serial-Drop-useless-property-is_console.patch [bz#769528]
  - kvm-virtio-serial-bus-Simplify-handle_output-function.patch [bz#769528]
  - kvm-virtio-serial-Drop-redundant-VirtIOSerialPort-member.patch [bz#769528]
  - kvm-virtio-console-Simplify-init-callbacks.patch [bz#769528]
  - kvm-virtio-serial-Turn-props-any-virtio-serial-bus-devic.patch [bz#769528]
  - kvm-virtio-console-Check-if-chardev-backends-available-b.patch [bz#769528]
  - kvm-virtio-console-Properly-initialise-class-methods.patch [bz#769528]
  - kvm-virtio-serial-bus-Ports-are-expected-to-implement-ha.patch [bz#769528]
  - Resolves: bz#769528
    (virtio-serial: Backport code cleanups from upstream)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.216.el6
changelog:
  - kvm-usb-storage-cancel-I-O-on-reset.patch [bz#769760]
  - Resolves: bz#769760
    (Formatting of usb-storage disk attached on usb-hub fails to end)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.217.el6
changelog:
  - kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off.patch [bz#756677]
  - CVE: CVE-2011-4127
  - Resolves: bz#756677
    (qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off (CVE-2011-4127 mitigation) [rhel-6.3)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.218.el6
changelog:
  - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772086]
  - CVE: CVE-2012-0029
  - Resolves: bz#772086
    (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-6.3])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.219.el6
changelog:
  - kvm-KSM-add-manpage-entry-for-redhat-disable-KSM.patch [bz#719269]
  - Resolves: bz#719269
    (No -redhat-disable-KSM introduction in man page)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.220.el6
changelog:
  - kvm-block-add-eject-request-callback.patch [bz#739944]
  - kvm-atapi-implement-eject-requests.patch [bz#739944]
  - Resolves: bz#739944
    (CD-ROMs cannot be ejected in virtualized Fedora 16)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.221.el6
changelog:
  - kvm-pci-assign-Fix-PCI_EXP_FLAGS_TYPE-shift.patch [bz#754565]
  - kvm-pci-assign-Fix-PCIe-lnkcap.patch [bz#754565]
  - kvm-pci-assign-Remove-bogus-PCIe-lnkcap-wmask-setting.patch [bz#754565]
  - kvm-pci-assign-Harden-I-O-port-test.patch [bz#754565]
  - Resolves: bz#754565
    (Fix device assignment Coverity issues)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.222.el6
changelog:
  - kvm-qemu-img-rebase-Fix-segfault-if-backing-file-can-t-b.patch [bz#736942]
  - kvm-usb-host-fix-host-close.patch [bz#746866]
  - kvm-usb-host-add-usb_host_do_reset-function.patch [bz#769745]
  - kvm-Fix-parse-of-usb-device-description-with-multiple-co.patch [bz#746866]
  - kvm-usb-host-properly-release-port-on-unplug-exit.patch [bz#769745]
  - kvm-Revert-QMP-HMP-Drop-the-live-snapshot-commands.patch [bz#752003]
  - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSC_ATR-messa.patch [bz#752003]
  - Resolves: bz#736942
    (qcow2:Segment fault when rebase snapshot on iscsi disk but do no create the qcow2 file on it)
  - Resolves: bz#746866
    (Passthrough then delete host usb stick too fast causes host usb stick missing)
  - Resolves: bz#752003
    (EMBARGOED CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSC_ATR message [rhel-6.3])
  - Resolves: bz#769745
    (Released usb stick after passthrough fails to be reused on host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.223.el6
changelog:
  - kvm-Simplify-qemu_realloc.patch [bz#758194]
  - kvm-slirp-remove-dead-assignments-spotted-by-clang.patch [bz#758194]
  - kvm-update-bochs-vbe-interface.patch [bz#758194]
  - kvm-x86-remove-dead-assignments-spotted-by-clang-analyze.patch [bz#758194]
  - kvm-Fix-tiny-leak-in-qemu_opts_parse.patch [bz#758194]
  - kvm-Fix-uint8_t-comparisons-with-negative-values.patch [bz#758194]
  - kvm-vl.c-Remove-dead-assignment.patch [bz#758194]
  - kvm-remove-pointless-if-from-vl.c.patch [bz#758194]
  - kvm-eepro100-initialize-a-variable-in-all-cases.patch [bz#758194]
  - kvm-vnc-auth-sasl-fix-a-memory-leak.patch [bz#758194]
  - kvm-loader-fix-a-file-descriptor-leak.patch [bz#758194]
  - kvm-qemu-io-fix-a-memory-leak.patch [bz#758194]
  - kvm-x86-Prevent-sign-extension-of-DR7-in-guest-debug.patch [bz#758194]
  - kvm-pci-Fix-memory-leak.patch [bz#758194]
  - kvm-Fix-warning-on-OpenBSD.patch [bz#758194]
  - kvm-Fix-net_check_clients-warnings-make-it-per-vlan.patch [bz#758194]
  - kvm-pcnet-Fix-sign-extension-make-ipxe-work-with-2G-RAM.patch [bz#758194]
  - kvm-qcow2-Fix-memory-leaks-in-error-cases.patch [bz#758194]
  - kvm-Do-not-use-dprintf.patch [bz#758194]
  - kvm-qemu-io-fix-aio-help-texts.patch [bz#758194]
  - kvm-Fix-lld-or-llx-printf-format-use.patch [bz#758194]
  - kvm-vhost_net.c-v2-Fix-build-failure-introduced-by-0bfcd.patch [bz#758194]
  - kvm-qemu-io-Fix-formatting.patch [bz#758194]
  - kvm-qemu-io-Fix-if-scoping-bug.patch [bz#758194]
  - kvm-fix-memory-leak-in-aio_write_f.patch [bz#758194]
  - kvm-block-Fix-bdrv_open-use-after-free.patch [bz#758194]
  - kvm-block-Remove-dead-code.patch [bz#758194]
  - kvm-ide-Fix-off-by-one-error-in-array-index-check.patch [bz#758194]
  - kvm-sysbus-Supply-missing-va_end.patch [bz#758194]
  - kvm-Fix-warning-about-uninitialized-variable.patch [bz#758194]
  - kvm-Error-check-find_ram_offset.patch [bz#758194]
  - kvm-readline-Fix-buffer-overrun-on-re-add-to-history.patch [bz#758194]
  - kvm-Clean-up-assertion-in-get_boot_devices_list.patch [bz#758194]
  - kvm-malloc-shims-to-simplify-backporting.patch [bz#758194]
  - kvm-ui-vnc-Convert-sasl.mechlist-to-g_malloc-friends.patch [bz#758194]
  - kvm-x86-cpuid-move-CPUID-functions-into-separate-file.patch [bz#758194]
  - kvm-x86-cpuid-Convert-remaining-strdup-to-g_strdup.patch [bz#758194]
  - kvm-x86-cpuid-Plug-memory-leak-in-cpudef_setfield.patch [bz#758194]
  - kvm-x86-cpuid-Fix-crash-on-cpu.patch [bz#758194]
  - kvm-keymaps-Use-glib-memory-allocation-and-free-function.patch [bz#758194]
  - kvm-ui-Plug-memory-leaks-on-parse_keyboard_layout-error-.patch [bz#758194]
  - kvm-raw-posix-Always-check-paio_init-result.patch [bz#758194]
  - kvm-posix-aio-compat-Plug-memory-leak-on-paio_init-error.patch [bz#758194]
  - kvm-os-posix-Plug-fd-leak-in-qemu_create_pidfile.patch [bz#758194]
  - kvm-qemu-sockets-Plug-fd-leak-on-unix_connect_opts-error.patch [bz#758194]
  - kvm-usb-linux-Disable-legacy-proc-bus-usb-and-dev-bus-us.patch [bz#758194]
  - kvm-ehci-add-assert.patch [bz#758194]
  - kvm-slirp-Clean-up-net_slirp_hostfwd_remove-s-use-of-get.patch [bz#758194]
  - kvm-cutils-Drop-broken-support-for-zero-strtosz-default_.patch [bz#758194]
  - kvm-console-Fix-qemu_default_pixelformat-for-24-bpp.patch [bz#758194]
  - kvm-console-Clean-up-confusing-indentation-in-console_pu.patch [bz#758194]
  - kvm-console-Fix-console_putchar-for-CSI-J.patch [bz#758194]
  - Resolves: bz#758194
    (Coverity omnibus)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.224.el6
changelog:
  - kvm-virtio-blk-pass-full-status-to-the-guest.patch [bz#740504]
  - Resolves: bz#740504
    (SCSI INQUIRY (opcode 0x12) to virtio devices in the KVM guest returns success even when the underlying host devices have failed.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.225.el6
changelog:
  - kvm-pci-assign-Fix-PCI_EXP_FLAGS_TYPE-shift.patch [bz#754565]
  - kvm-pci-assign-Fix-PCIe-lnkcap.patch [bz#754565]
  - kvm-pci-assign-Remove-bogus-PCIe-lnkcap-wmask-setting.patch [bz#754565]
  - kvm-pci-assign-Harden-I-O-port-test.patch [bz#754565]
  - kvm-redhat-updating-version-info-for-qemu-kvm-0.12.1.2-2.patch []
  - Resolves: bz#754565
    (Fix device assignment Coverity issues)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.226.el6
changelog:
  - kvm-QMP-configure-script-enable-disable-for-live-snapsho.patch [bz#769111]
  - kvm-qdev-Add-a-free-method-to-disassociate-chardev-from-.patch [bz#770512]
  - kvm-virtio-console-no-need-to-remove-char-handlers-expli.patch [bz#770512]
  - Resolves: bz#769111
    (RFE: Re-enable live snapshot feature, with configuration option to enable/disable.)
  - Resolves: bz#770512
    (Virtio serial chardev will be still in use even failed to hot plug a serial port on it)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.227.el6
changelog:
  - kvm-pci-assign-Fix-multifunction-support.patch [bz#782161]
  - Resolves: bz#782161
    (pci-assign: Fix multifunction support)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.228.el6
changelog:
  - kvm-Drop-whole-archive-and-static-libraries.patch [bz#783950]
  - kvm-make-qemu-img-depends-on-config-host.h.patch [bz#783950]
  - kvm-Fix-generation-of-config-host.h.patch [bz#783950]
  - kvm-cloop-use-pread.patch [bz#783950]
  - kvm-cloop-use-qemu-block-API.patch [bz#783950]
  - kvm-block-bochs-improve-format-checking.patch [bz#783950]
  - kvm-bochs-use-pread.patch [bz#783950]
  - kvm-bochs-use-qemu-block-API.patch [bz#783950]
  - kvm-parallels-use-pread.patch [bz#783950]
  - kvm-parallels-use-qemu-block-API.patch [bz#783950]
  - kvm-dmg-fix-reading-of-uncompressed-chunks.patch [bz#783950]
  - kvm-dmg-use-pread.patch [bz#783950]
  - kvm-dmg-use-qemu-block-API.patch [bz#783950]
  - kvm-cow-use-pread-pwrite.patch [bz#783950]
  - kvm-cow-stop-using-mmap.patch [bz#783950]
  - kvm-cow-use-qemu-block-API.patch [bz#783950]
  - kvm-vpc-Implement-bdrv_flush.patch [bz#783950]
  - kvm-vmdk-Fix-COW.patch [bz#783950]
  - kvm-vmdk-Clean-up-backing-file-handling.patch [bz#783950]
  - kvm-vmdk-Convert-to-bdrv_open.patch [bz#783950]
  - kvm-block-set-sector-dirty-on-AIO-write-completion.patch [bz#783950]
  - kvm-trace-Trace-bdrv_aio_flush.patch [bz#783950]
  - kvm-block-Removed-unused-function-bdrv_write_sync.patch [bz#783950]
  - kvm-tools-Use-real-async.c-instead-of-stubs.patch [bz#783950]
  - kvm-Cleanup-Be-consistent-and-use-BDRV_SECTOR_SIZE-inste.patch [bz#783950]
  - kvm-Cleanup-raw-posix.c-Be-more-consistent-using-BDRV_SE.patch [bz#783950]
  - kvm-block-allow-resizing-of-images-residing-on-host-devi.patch [bz#783950]
  - kvm-raw-posix-Fix-test-for-host-CD-ROM.patch [bz#783950]
  - kvm-raw-posix-Fix-bdrv_flush-error-return-values.patch [bz#783950]
  - kvm-block-raw-posix-Abort-on-pread-beyond-end-of-non-gro.patch [bz#783950]
  - kvm-raw-posix-raw_pwrite-comment-fixup.patch [bz#783950]
  - kvm-raw-posix-add-discard-support.patch [bz#783950]
  - kvm-win32-pair-qemu_memalign-with-qemu_vfree.patch [bz#783950]
  - kvm-qcow2-refcount-remove-write-only-variables.patch [bz#783950]
  - kvm-qcow2-Use-Qcow2Cache-in-writeback-mode-during-loadvm.patch [bz#783950]
  - kvm-qcow2-Add-bdrv_discard-support.patch [bz#783950]
  - kvm-coroutine-introduce-coroutines.patch [bz#783950]
  - kvm-block-Add-bdrv_co_readv-writev.patch [bz#783950]
  - kvm-block-Emulate-AIO-functions-with-bdrv_co_readv-write.patch [bz#783950]
  - kvm-block-Add-bdrv_co_readv-writev-emulation.patch [bz#783950]
  - kvm-coroutines-Locks.patch [bz#783950]
  - kvm-qcow2-Avoid-direct-AIO-callback.patch [bz#783950]
  - kvm-block-Avoid-unchecked-casts-for-AIOCBs.patch [bz#783950]
  - kvm-qcow2-Use-QLIST_FOREACH_SAFE-macro.patch [bz#783950]
  - kvm-qcow2-Fix-in-flight-list-after-qcow2_cache_put-failu.patch [bz#783950]
  - kvm-qcow2-Use-coroutines.patch [bz#783950]
  - kvm-block-qcow-Don-t-ignore-immediate-read-write-and-oth.patch [bz#783950]
  - kvm-qcow-Avoid-direct-AIO-callback.patch [bz#783950]
  - kvm-qcow-Use-coroutines.patch [bz#783950]
  - kvm-qcow-initialize-coroutine-mutex.patch [bz#783950]
  - kvm-dma-Avoid-reentrancy-in-DMA-transfer-handlers.patch [bz#783950]
  - kvm-Allow-nested-qemu_bh_poll-after-BH-deletion.patch [bz#783950]
  - kvm-Revert-qed-avoid-deadlock-on-emulated-synchronous-I-.patch [bz#783950]
  - kvm-async-Remove-AsyncContext.patch [bz#783950]
  - kvm-coroutines-Use-one-global-bottom-half-for-CoQueue.patch [bz#783950]
  - kvm-posix-aio-compat-Allow-read-after-EOF.patch [bz#783950]
  - kvm-linux-aio-Fix-laio_submit-error-handling.patch [bz#783950]
  - kvm-linux-aio-Allow-reads-beyond-the-end-of-growable-ima.patch [bz#783950]
  - kvm-block-Use-bdrv_co_-instead-of-synchronous-versions-i.patch [bz#783950]
  - kvm-qcow-qcow2-Allocate-QCowAIOCB-structure-using-stack.patch [bz#783950]
  - kvm-Introduce-emulation-for-g_malloc-and-friends.patch [bz#783950]
  - kvm-Convert-the-block-layer-to-g_malloc.patch [bz#783950]
  - kvm-qcow2-Removed-unused-AIOCB-fields.patch [bz#783950]
  - kvm-qcow2-removed-cur_nr_sectors-field-in-QCowAIOCB.patch [bz#783950]
  - kvm-qcow2-remove-l2meta-from-QCowAIOCB.patch [bz#783950]
  - kvm-qcow2-remove-cluster_offset-from-QCowAIOCB.patch [bz#783950]
  - kvm-qcow2-remove-common-from-QCowAIOCB.patch [bz#783950]
  - kvm-qcow2-reindent-and-use-while-before-the-big-jump.patch [bz#783950]
  - kvm-qcow2-Removed-QCowAIOCB-entirely.patch [bz#783950]
  - kvm-qcow2-remove-memory-leak.patch [bz#783950]
  - kvm-qcow2-Properly-initialise-QcowL2Meta.patch [bz#783950]
  - kvm-qcow2-Fix-error-cases-to-run-depedent-requests.patch [bz#783950]
  - kvm-async-Allow-nested-qemu_bh_poll-calls.patch [bz#783950]
  - kvm-block-directly-invoke-.bdrv_aio_-in-bdrv_co_io_em.patch [bz#783950]
  - kvm-block-directly-invoke-.bdrv_-from-emulation-function.patch [bz#783950]
  - kvm-block-split-out-bdrv_co_do_readv-and-bdrv_co_do_writ.patch [bz#783950]
  - kvm-block-switch-bdrv_read-bdrv_write-to-coroutines.patch [bz#783950]
  - kvm-block-switch-bdrv_aio_readv-to-coroutines.patch [bz#783950]
  - kvm-block-mark-blocks-dirty-on-coroutine-write-completio.patch [bz#783950]
  - kvm-block-switch-bdrv_aio_writev-to-coroutines.patch [bz#783950]
  - kvm-block-drop-emulation-functions-that-use-coroutines.patch [bz#783950]
  - kvm-raw-posix-remove-bdrv_read-bdrv_write.patch [bz#783950]
  - kvm-block-use-coroutine-interface-for-raw-format.patch [bz#783950]
  - kvm-block-drop-.bdrv_read-.bdrv_write-emulation.patch [bz#783950]
  - kvm-block-drop-bdrv_has_async_rw.patch [bz#783950]
  - kvm-trace-add-arguments-to-bdrv_co_io_em-trace-event.patch [bz#783950]
  - kvm-block-rename-bdrv_co_rw_bh.patch [bz#783950]
  - kvm-block-unify-flush-implementations.patch [bz#783950]
  - kvm-block-drop-redundant-bdrv_flush-implementation.patch [bz#783950]
  - kvm-block-add-bdrv_co_discard-and-bdrv_aio_discard-suppo.patch [bz#783950]
  - kvm-block-add-a-CoMutex-to-synchronous-read-drivers.patch [bz#783950]
  - kvm-block-take-lock-around-bdrv_read-implementations.patch [bz#783950]
  - kvm-block-take-lock-around-bdrv_write-implementations.patch [bz#783950]
  - kvm-block-change-flush-to-co_flush.patch [bz#783950]
  - kvm-block-change-discard-to-co_discard.patch [bz#783950]
  - kvm-coroutine-switch-per-thread-free-pool-to-a-global-po.patch [bz#783950]
  - kvm-Fix-memory-leak-in-register-save-load-due-to-xsave-s.patch [bz#789417]
  - kvm-x86-Avoid-runtime-allocation-of-xsave-buffer.patch [bz#789417]
  - kvm-pc-add-6.3.0-machine-type.patch [bz#788682]
  - Resolves: bz#783950
    (RFE: Backport corountine-based block layer)
  - Resolves: bz#788682
    (add rhel6.3.0 machine type)
  - Resolves: bz#789417
    (Fix memory leak in register save load due to xsave support)


