# changelog

author: Hans de Goede <hdegoede@redhat.com> - 2:0.15.0-0.2.20110718525e3df
changelog:
  - Add support usb redirection over the network, see:
    http://fedoraproject.org/wiki/Features/UsbNetworkRedirection
  - Restore chardev flow control patches


author: Richard W.M. Jones <rjones@redhat.com> - 2:0.15.0-2
changelog:
  - Add upstream qemu patch 'Allow to leave type on default in -machine'
    (2645c6dcaf6ea2a51a3b6dfa407dd203004e4d11).


author: Daniel P. Berrange <berrange@redhat.com> - 2:0.15.0-4
changelog:
  - Enable DTrace tracing backend for SystemTAP (rhbz #737763)
  - Enable build with curl (rhbz #737006)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.15.1-1
changelog:
  - Require seabios-bin >= 0.6.0-2 (#741992)
  - Replace init scripts with systemd units (#741920)
  - Update to 0.15.1 stable upstream


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-4
changelog:
  - Disable tests since they hang intermittently.
  - Add kvmvapic.bin (replaces vapic.bin).
  - Add cpus-x86_64.conf.  qemu now creates /etc/qemu/target-x86_64.conf
    as an empty file.
  - Add qemu-icon.bmp.
  - Add qemu-bridge-helper.
  - Build and include virtfs-proxy-helper + man page (thanks Hans de Goede).


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-7
changelog:
  - Add patch to fix default machine options.  This fixes libvirt
    detection of qemu.
  - Back out patch 1 which conflicts.


author: Cole Robinson <crobinso@redhat.com> - 1.1.1-1
changelog:
  - Upstream stable release 1.1.1
  - Fix systemtap tapsets (bz 831763)
  - Fix VNC audio tunnelling (bz 840653)
  - Don't renable ksm on update (bz 815156)
  - Bump usbredir dep (bz 812097)
  - Fix RPM install error on non-virt machines (bz 660629)
  - Obsolete openbios to fix upgrade dependency issues (bz 694802)


author: Adam Jackson <ajax@redhat.com> 1.2.0-0.5.rc1
changelog:
  - Flip Requires: ceph >= foo to Conflicts: ceph < foo, so we pull in only the
    libraries which we need and not the rest of ceph which we don't.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-1
changelog:
  - New upstream release 1.2.0 final
  - Add support for Spice seamless migration
  - Add support for Spice dynamic monitors
  - Add support for usb-redir live migration


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.2.0-8
changelog:
  - Use 'global' instead of 'define', and underscore in definition name,
    n-v-r, and 'dist' tag of SLOF, all to fix RHBZ#855252.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-11
changelog:
  - Rebuild against latest spice-server and spice-protocol
  - Fix non-seamless migration failing with vms with usb-redir devices,
    to allow boxes to load such vms from disk


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-13
changelog:
  - Add ppc support to kvm.modules (original patch by David Gibson)
  - Replace x86only build with kvmonly build: add separate defines and
    conditionals for all packages, so that they can be chosen and
    renamed in kvmonly builds and so that qemu has the appropriate requires
  - Automatically pick libfdt dependancy
  - Add knob to disable spice+seccomp


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-16
changelog:
  - add s390x KVM support
  - distribute pre-built firmware or device trees for Alpha, Microblaze, S390
  - add missing system targets
  - add missing linux-user targets
  - fix previous commit


author: Cole Robinson <crobinso@redhat.com> - 2:1.2.0-18
changelog:
  - Fix loading arm initrd if kernel is very large (bz #862766)
  - Don't use reserved word 'function' in systemtap files (bz #870972)
  - Drop assertion that was triggering when pausing guests w/ qxl (bz


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-19
changelog:
  - Sync spice patches with upstream, minor bugfixes and set the qxl pci
    device revision to 4 by default, so that guests know they can use
    the new features


author: Cole Robinson <crobinso@redhat.com> - 2:1.3.0-1
changelog:
  - Switch base tarball from qemu-kvm to qemu
  - qemu 1.3 release
  - Option to use linux VFIO driver to assign PCI devices
  - Many USB3 improvements
  - New paravirtualized hardware random number generator device.
  - Support for Glusterfs volumes with "gluster://" -drive URI
  - Block job commands for live block commit and storage migration


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-3
changelog:
  - Remove dependency on bogus qemu-kvm-kvm package [bz#870343]
  - Resolves: bz#870343
    (qemu-kvm-1.2.0-16.el7 cant be installed)


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-5
changelog:
  - Fix patch contents for usb-redir (bz#895491)
  - Resolves: bz#895491
    (PATCH: 0110-usb-redir-Add-flow-control-support.patch has been mangled on rebase !!)


author: Alon Levy <alevy@redhat.com> - 3:1.3.0-6
changelog:
  - Bump epoch back to 3 since there has already been a 3 package release:
    3:1.2.0-20.el7 https://brewweb.devel.redhat.com/buildinfo?buildID=244866
  - Mark explicit libcacard dependency on new enough qemu-img to avoid conflict
    since /usr/bin/vscclient was moved from qemu-img to libcacard subpackage.


author: Michal Novotny <minovotn@redhat.com> - 3:1.3.0-8
changelog:
  - Missing package qemu-system-x86 in hardware certification kvm testing (bz#912433)
  - Resolves: bz#912433
    (Missing package qemu-system-x86 in hardware certification kvm testing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.4.0-4
changelog:
  - Enable build of libcacard subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-img subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-guest-agent subpackage for non-x86_64 archs (bz #873174)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.5.0-2
changelog:
  - Enable werror (bz #948290)
  - Enable nbd driver (bz #875871)
  - Fix udev rules file location (bz #958860)
  - Remove +x bit from systemd unit files (bz #965000)
  - Drop unneeded kvm.modules on x86 (bz #963642)
  - Fix build flags
  - Enable libusb


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.1-2
changelog:
  - Fix package package version info (bz #952996)
  - pc: Replace upstream machine types by RHEL-7 types (bz #977864)
  - target-i386: Update model values on Conroe/Penryn/Nehalem CPU model (bz #861210)
  - target-i386: Set level=4 on Conroe/Penryn/Nehalem (bz #861210)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-2
changelog:
  - SPEC file prepared for RHEL/RHEV split (rhbz #987165)
  - RHEL guest( sata disk ) can not boot up (rhbz #981723)
  - Kill the "use flash device for BIOS unless KVM" misfeature (rhbz #963280)
  - Provide RHEL-6 machine types (rhbz #983991)
  - Change s3/s4 default to "disable". (rhbz #980840)  
  - Support Virtual Memory Disk Format in qemu (rhbz #836675)
  - Glusterfs backend for QEMU (rhbz #805139)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-3
changelog:
  - query mem info from monitor would cause qemu-kvm hang [RHEL-7] (rhbz #970047)
  - Throttle-down guest to help with live migration convergence (backport to RHEL7.0) (rhbz #985958)
  - disable (for now) EFI-enabled roms (rhbz #962563)
  - qemu-kvm "vPMU passthrough" mode breaks migration, shouldn't be enabled by default (rhbz #853101)
  - Remove pending watches after virtserialport unplug (rhbz #992900)
  - Containment of error when an SR-IOV device encounters an error... (rhbz #984604)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-4
changelog:
  - qemu: guest agent creates files with insecure permissions in deamon mode [rhel-7.0] (rhbz 974444)
  - update qemu-ga config & init script in RHEL7 wrt. fsfreeze hook (rhbz 969942)
  - RHEL7 does not have equivalent functionality for __com.redhat_qxl_screendump (rhbz 903910)
  - SEP flag behavior for CPU models of RHEL6 machine types should be compatible (rhbz 960216)
  - crash command can not read the dump-guest-memory file when paging=false [RHEL-7] (rhbz 981582)
  - RHEL 7 qemu-kvm fails to build on F19 host due to libusb deprecated API (rhbz 996469)
  - Live migration support in virtio-blk-data-plane (rhbz 995030)
  - qemu-img resize can execute successfully even input invalid syntax (rhbz 992935)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-2.el7
changelog:
  - kvm-osdep-add-qemu_get_local_state_pathname.patch [bz#964304]
  - kvm-qga-determine-default-state-dir-and-pidfile-dynamica.patch [bz#964304]
  - kvm-configure-don-t-save-any-fixed-local_statedir-for-wi.patch [bz#964304]
  - kvm-qga-create-state-directory-on-win32.patch [bz#964304]
  - kvm-qga-save-state-directory-in-ga_install_service-RHEL-.patch [bz#964304]
  - kvm-Makefile-create-.-var-run-when-installing-the-POSIX-.patch [bz#964304]
  - kvm-qemu-option-Fix-qemu_opts_find-for-null-id-arguments.patch [bz#980782]
  - kvm-qemu-option-Fix-qemu_opts_set_defaults-for-corner-ca.patch [bz#980782]
  - kvm-vl-New-qemu_get_machine_opts.patch [bz#980782]
  - kvm-Fix-machine-options-accel-kernel_irqchip-kvm_shadow_.patch [bz#980782]
  - kvm-microblaze-Fix-latent-bug-with-default-DTB-lookup.patch [bz#980782]
  - kvm-Simplify-machine-option-queries-with-qemu_get_machin.patch [bz#980782]
  - kvm-pci-add-VMSTATE_MSIX.patch [bz#838170]
  - kvm-xhci-add-XHCISlot-addressed.patch [bz#838170]
  - kvm-xhci-add-xhci_alloc_epctx.patch [bz#838170]
  - kvm-xhci-add-xhci_init_epctx.patch [bz#838170]
  - kvm-xhci-add-live-migration-support.patch [bz#838170]
  - kvm-pc-set-level-xlevel-correctly-on-486-qemu32-CPU-mode.patch [bz#918907]
  - kvm-pc-Remove-incorrect-rhel6.x-compat-model-value-for-C.patch [bz#918907]
  - kvm-pc-rhel6.x-has-x2apic-present-on-Conroe-Penryn-Nehal.patch [bz#918907]
  - kvm-pc-set-compat-CPUID-0x80000001-.EDX-bits-on-Westmere.patch [bz#918907]
  - kvm-pc-Remove-PCLMULQDQ-from-Westmere-on-rhel6.x-machine.patch [bz#918907]
  - kvm-pc-SandyBridge-rhel6.x-compat-fixes.patch [bz#918907]
  - kvm-pc-Haswell-doesn-t-have-rdtscp-on-rhel6.x.patch [bz#918907]
  - kvm-i386-fix-LAPIC-TSC-deadline-timer-save-restore.patch [bz#972433]
  - kvm-all.c-max_cpus-should-not-exceed-KVM-vcpu-limit.patch [bz#996258]
  - kvm-add-timestamp-to-error_report.patch [bz#906937]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906937]
  - Resolves: bz#838170
    (Add live migration support for USB [xhci, usb-uas])
  - Resolves: bz#906937
    ([Hitachi 7.0 FEAT][QEMU]Add a time stamp to error message (*))
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#964304
    (Windows guest agent service failed to be started)
  - Resolves: bz#972433
    ("INFO: rcu_sched detected stalls" after RHEL7 kvm vm migrated)
  - Resolves: bz#980782
    (kernel_irqchip defaults to off instead of on without -machine)
  - Resolves: bz#996258
    (boot guest with maxcpu=255 successfully but actually max number of vcpu is 160)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-1.5.3-4.el7
changelog:
  - kvm-block-package-preparation-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-move-input-parsing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-committing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-rollback-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-make-all-steps-in-qmp_transaction-as-callback.patch [bz#1005818]
  - kvm-blockdev-drop-redundant-proto_drv-check.patch [bz#1005818]
  - kvm-block-Don-t-parse-protocol-from-file.filename.patch [bz#1005818]
  - kvm-Revert-block-Disable-driver-specific-options-for-1.5.patch [bz#1005818]
  - kvm-qcow2-Add-refcount-update-reason-to-all-callers.patch [bz#1005818]
  - kvm-qcow2-Options-to-enable-discard-for-freed-clusters.patch [bz#1005818]
  - kvm-qcow2-Batch-discards.patch [bz#1005818]
  - kvm-block-Always-enable-discard-on-the-protocol-level.patch [bz#1005818]
  - kvm-qapi.py-Avoid-code-duplication.patch [bz#1005818]
  - kvm-qapi.py-Allow-top-level-type-reference-for-command-d.patch [bz#1005818]
  - kvm-qapi-schema-Use-BlockdevSnapshot-type-for-blockdev-s.patch [bz#1005818]
  - kvm-qapi-types.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-qapi-visit.py-Split-off-generate_visit_struct_fields.patch [bz#1005818]
  - kvm-qapi-visit.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-docs-Document-QAPI-union-types.patch [bz#1005818]
  - kvm-qapi-Add-visitor-for-implicit-structs.patch [bz#1005818]
  - kvm-qapi-Flat-unions-with-arbitrary-discriminator.patch [bz#1005818]
  - kvm-qapi-Add-consume-argument-to-qmp_input_get_object.patch [bz#1005818]
  - kvm-qapi.py-Maintain-a-list-of-union-types.patch [bz#1005818]
  - kvm-qapi-qapi-types.py-native-list-support.patch [bz#1005818]
  - kvm-qapi-Anonymous-unions.patch [bz#1005818]
  - kvm-block-Allow-driver-option-on-the-top-level.patch [bz#1005818]
  - kvm-QemuOpts-Add-qemu_opt_unset.patch [bz#1005818]
  - kvm-blockdev-Rename-I-O-throttling-options-for-QMP.patch [bz#1005818]
  - kvm-qemu-iotests-Update-051-reference-output.patch [bz#1005818]
  - kvm-blockdev-Rename-readonly-option-to-read-only.patch [bz#1005818]
  - kvm-blockdev-Split-up-cache-option.patch [bz#1005818]
  - kvm-qcow2-Use-dashes-instead-of-underscores-in-options.patch [bz#1005818]
  - kvm-qemu-iotests-filter-QEMU-version-in-monitor-banner.patch [bz#1006959]
  - kvm-tests-set-MALLOC_PERTURB_-to-expose-memory-bugs.patch [bz#1006959]
  - kvm-qemu-iotests-Whitespace-cleanup.patch [bz#1006959]
  - kvm-qemu-iotests-Fixed-test-case-026.patch [bz#1006959]
  - kvm-qemu-iotests-Fix-test-038.patch [bz#1006959]
  - kvm-qemu-iotests-Remove-lsi53c895a-tests-from-051.patch [bz#1006959]
  - Resolves: bz#1005818
    (qcow2: Backport discard command line options)
  - Resolves: bz#1006959
    (qemu-iotests false positives)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-7.el7
changelog:
  - kvm-spice-fix-display-initialization.patch [bz#974887]
  - kvm-Remove-i82550-network-card-emulation.patch [bz#921983]
  - kvm-Remove-usb-wacom-tablet.patch [bz#903914]
  - kvm-Disable-usb-uas.patch [bz#903914]
  - kvm-Disable-vhost-scsi.patch [bz#994642]
  - kvm-Remove-no-hpet-option.patch [bz#947441]
  - kvm-Disable-isa-parallel.patch [bz#1002286]
  - kvm-xhci-implement-warm-port-reset.patch [bz#949514]
  - kvm-usb-add-serial-bus-property.patch [bz#953304]
  - kvm-rhel6-compat-usb-serial-numbers.patch [bz#953304]
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#995866]
  - kvm-gluster-Add-image-resize-support.patch [bz#1007226]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007226]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#1007226]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#1007226]
  - kvm-Preparation-for-usb-bt-dongle-conditional-build.patch [bz#1001131]
  - kvm-Remove-dev-bluetooth.c-dependency-from-vl.c.patch [bz#1001131]
  - kvm-exec-Fix-Xen-RAM-allocation-with-unusual-options.patch [bz#1009328]
  - kvm-exec-Clean-up-fall-back-when-mem-path-allocation-fai.patch [bz#1009328]
  - kvm-exec-Reduce-ifdeffery-around-mem-path.patch [bz#1009328]
  - kvm-exec-Simplify-the-guest-physical-memory-allocation-h.patch [bz#1009328]
  - kvm-exec-Drop-incorrect-dead-S390-code-in-qemu_ram_remap.patch [bz#1009328]
  - kvm-exec-Clean-up-unnecessary-S390-ifdeffery.patch [bz#1009328]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#1009328]
  - kvm-pc_sysfw-Fix-ISA-BIOS-init-for-ridiculously-big-flas.patch [bz#1009328]
  - kvm-virtio-scsi-Make-type-virtio-scsi-common-abstract.patch [bz#903918]
  - kvm-qga-move-logfiles-to-new-directory-for-easier-SELinu.patch [bz#1009491]
  - kvm-target-i386-add-cpu64-rhel6-CPU-model.patch [bz#918907]
  - kvm-fix-steal-time-MSR-vmsd-callback-to-proper-opaque-ty.patch [bz#903889]
  - Resolves: bz#1001131
    (Disable or remove device usb-bt-dongle)
  - Resolves: bz#1002286
    (Disable or remove device isa-parallel)
  - Resolves: bz#1007226
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009328
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#1009491
    (move qga logfiles to new /var/log/qemu-ga/ directory [RHEL-7])
  - Resolves: bz#903889
    (The value of steal time in "top" command always is "0.0% st" after guest migration)
  - Resolves: bz#903914
    (Disable or remove usb related devices that we will not support)
  - Resolves: bz#903918
    (Disable or remove emulated SCSI devices we will not support)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921983
    (Disable or remove emulated network devices that we will not support)
  - Resolves: bz#947441
    (HPET device must be disabled)
  - Resolves: bz#949514
    (fail to passthrough the USB3.0 stick to windows guest with xHCI controller under pc-i440fx-1.4)
  - Resolves: bz#953304
    (Serial number of some USB devices must be fixed for older RHEL machine types)
  - Resolves: bz#974887
    (the screen of guest fail to display correctly when use spice + qxl driver)
  - Resolves: bz#994642
    (should disable vhost-scsi)
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-8.el7
changelog:
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#995866]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#995866]
  - kvm-qemu-iotests-add-poke_file-utility-function.patch [bz#995866]
  - kvm-qemu-iotests-add-empty-test-case-for-vmdk.patch [bz#995866]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#995866]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#995866]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#995866]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#995866]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#995866]
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995866]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995866]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995866]
  - kvm-vmdk-support-vmfs-files.patch [bz#995866]
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-9.el7
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005036]
  - kvm-spec-include-userspace-iSCSI-initiator-in-block-driv.patch [bz#923843]
  - kvm-linux-headers-update-to-kernel-3.10.0-26.el7.patch [bz#1008987]
  - kvm-target-i386-add-feature-kvm_pv_unhalt.patch [bz#1008987]
  - kvm-warn-if-num-cpus-is-greater-than-num-recommended.patch [bz#1010881]
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#1007222]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#1007222]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#1007222]
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1017049]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1017049]
  - kvm-qemu-iotests-add-monolithicFlat-creation-test-to-059.patch [bz#1017049]
  - Resolves: bz#1005036
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1007222
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#1008987
    (pvticketlocks: add kvm feature kvm_pv_unhalt)
  - Resolves: bz#1010881
    (backport vcpu soft limit warning)
  - Resolves: bz#1017049
    (qemu-img refuses to open the vmdk format image its created)
  - Resolves: bz#923843
    (include userspace iSCSI initiator in block driver whitelist)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-10.el7
changelog:
  - kvm-xhci-fix-endpoint-interval-calculation.patch [bz#1001604]
  - kvm-xhci-emulate-intr-endpoint-intervals-correctly.patch [bz#1001604]
  - kvm-xhci-reset-port-when-disabling-slot.patch [bz#1001604]
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1001604]
  - kvm-target-i386-Set-model-6-on-qemu64-qemu32-CPU-models.patch [bz#1004290]
  - kvm-pc-rhel6-doesn-t-have-APIC-on-pentium-CPU-models.patch [bz#918907]
  - kvm-pc-RHEL-6-had-x2apic-set-on-Opteron_G-123.patch [bz#918907]
  - kvm-pc-RHEL-6-don-t-have-RDTSCP.patch [bz#918907]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1009285]
  - kvm-seccomp-fine-tuning-whitelist-by-adding-times.patch [bz#1004175]
  - kvm-block-add-bdrv_write_zeroes.patch [bz#921465]
  - kvm-block-raw-add-bdrv_co_write_zeroes.patch [bz#921465]
  - kvm-rdma-export-qemu_fflush.patch [bz#921465]
  - kvm-block-migration-efficiently-encode-zero-blocks.patch [bz#921465]
  - kvm-Fix-real-mode-guest-migration.patch [bz#921465]
  - kvm-Fix-real-mode-guest-segments-dpl-value-in-savevm.patch [bz#921465]
  - kvm-migration-add-autoconvergence-documentation.patch [bz#921465]
  - kvm-migration-send-total-time-in-QMP-at-completed-stage.patch [bz#921465]
  - kvm-migration-don-t-use-uninitialized-variables.patch [bz#921465]
  - kvm-pc-drop-external-DSDT-loading.patch [bz#921465]
  - kvm-hda-codec-refactor-common-definitions-into-a-header-.patch [bz#954195]
  - kvm-hda-codec-make-mixemu-selectable-at-runtime.patch [bz#954195]
  - kvm-audio-remove-CONFIG_MIXEMU-configure-option.patch [bz#954195]
  - kvm-pc_piix-disable-mixer-for-6.4.0-machine-types-and-be.patch [bz#954195]
  - kvm-spec-mixemu-config-option-is-no-longer-supported-and.patch [bz#954195]
  - Resolves: bz#1001604
    (usb hub doesn't work properly (win7 sees downstream port #1 only).)
  - Resolves: bz#1004175
    ('-sandbox on'  option  cause  qemu-kvm process hang)
  - Resolves: bz#1004290
    (Use model 6 for qemu64 and intel cpus)
  - Resolves: bz#1009285
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921465
    (Migration can not finished even the "remaining ram" is already 0 kb)
  - Resolves: bz#954195
    (RHEL machines <=6.4 should not use mixemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-11.el7
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#994414]
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#922010]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#922010]
  - kvm-qemu-socket-catch-monitor_get_fd-failures.patch [bz#922010]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#922010]
  - kvm-error-add-error_setg_file_open-helper.patch [bz#922010]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#922010]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#922010]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#922010]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#922010]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#922010]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#922010]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#922010]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-chardev-handle-qmp_chardev_add-KIND_MUX-failure.patch [bz#922010]
  - kvm-acpi-piix4-Enable-qemu-kvm-compatibility-mode.patch [bz#1019474]
  - kvm-target-i386-support-loading-of-cpu-xsave-subsection.patch [bz#1004743]
  - Resolves: bz#1004743
    (XSAVE migration format not compatible between RHEL6 and RHEL7)
  - Resolves: bz#1019474
    (RHEL-7 can't load piix4_pm migration section from RHEL-6.5)
  - Resolves: bz#922010
    (RFE: support hotplugging chardev & serial ports)
  - Resolves: bz#994414
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-12.el7
changelog:
  - kvm-vl-Clean-up-parsing-of-boot-option-argument.patch [bz#997817]
  - kvm-qemu-option-check_params-is-now-unused-drop-it.patch [bz#997817]
  - kvm-vl-Fix-boot-order-and-once-regressions-and-related-b.patch [bz#997817]
  - kvm-vl-Rename-boot_devices-to-boot_order-for-consistency.patch [bz#997817]
  - kvm-pc-Make-no-fd-bootchk-stick-across-boot-order-change.patch [bz#997817]
  - kvm-doc-Drop-ref-to-Bochs-from-no-fd-bootchk-documentati.patch [bz#997817]
  - kvm-libqtest-Plug-fd-and-memory-leaks-in-qtest_quit.patch [bz#997817]
  - kvm-libqtest-New-qtest_end-to-go-with-qtest_start.patch [bz#997817]
  - kvm-qtest-Don-t-reset-on-qtest-chardev-connect.patch [bz#997817]
  - kvm-boot-order-test-New-covering-just-PC-for-now.patch [bz#997817]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1019352]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#989608]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#989608]
  - kvm-spec-Whitelist-rbd-block-driver.patch [bz#989608]
  - Resolves: bz#1019352
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#989608
    ([7.0 FEAT] qemu runtime support for librbd backend (ceph))
  - Resolves: bz#997817
    (-boot order and -boot once regressed since RHEL-6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-13.el7
changelog:
  - kvm-seabios-paravirt-allow-more-than-1TB-in-x86-guest.patch [bz#989677]
  - kvm-scsi-prefer-UUID-to-VM-name-for-the-initiator-name.patch [bz#1006468]
  - kvm-Fix-incorrect-rhel_rhev_conflicts-macro-usage.patch [bz#1017693]
  - Resolves: bz#1006468
    (libiscsi initiator name should use vm UUID)
  - Resolves: bz#1017693
    (incorrect use of rhel_rhev_conflicts)
  - Resolves: bz#989677
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-14.el7
changelog:
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.patch [bz#928867]
  - kvm-migrate-vPMU-state.patch [bz#928867]
  - kvm-blockdev-do-not-default-cache.no-flush-to-true.patch [bz#1009993]
  - kvm-virtio-blk-do-not-relay-a-previous-driver-s-WCE-conf.patch [bz#1009993]
  - kvm-rng-random-use-error_setg_file_open.patch [bz#907743]
  - kvm-block-mirror_complete-use-error_setg_file_open.patch [bz#907743]
  - kvm-blockdev-use-error_setg_file_open.patch [bz#907743]
  - kvm-cpus-use-error_setg_file_open.patch [bz#907743]
  - kvm-dump-qmp_dump_guest_memory-use-error_setg_file_open.patch [bz#907743]
  - kvm-savevm-qmp_xen_save_devices_state-use-error_setg_fil.patch [bz#907743]
  - kvm-block-bdrv_reopen_prepare-don-t-use-QERR_OPEN_FILE_F.patch [bz#907743]
  - kvm-qerror-drop-QERR_OPEN_FILE_FAILED-macro.patch [bz#907743]
  - kvm-rhel-Drop-ivshmem-device.patch [bz#787463]
  - kvm-usb-remove-old-usb-host-code.patch [bz#1001144]
  - kvm-Add-rhel6-pxe-roms-files.patch [bz#997702]
  - kvm-Add-rhel6-pxe-rom-to-redhat-rpm.patch [bz#997702]
  - kvm-Fix-migration-from-rhel6.5-to-rhel7-with-ipxe.patch [bz#997702]
  - kvm-pc-Don-t-prematurely-explode-QEMUMachineInitArgs.patch [bz#994490]
  - kvm-pc-Don-t-explode-QEMUMachineInitArgs-into-local-vari.patch [bz#994490]
  - kvm-smbios-Normalize-smbios_entry_add-s-error-handling-t.patch [bz#994490]
  - kvm-smbios-Convert-to-QemuOpts.patch [bz#994490]
  - kvm-smbios-Improve-diagnostics-for-conflicting-entries.patch [bz#994490]
  - kvm-smbios-Make-multiple-smbios-type-accumulate-sanely.patch [bz#994490]
  - kvm-smbios-Factor-out-smbios_maybe_add_str.patch [bz#994490]
  - kvm-hw-Pass-QEMUMachine-to-its-init-method.patch [bz#994490]
  - kvm-smbios-Set-system-manufacturer-product-version-by-de.patch [bz#994490]
  - kvm-smbios-Decouple-system-product-from-QEMUMachine.patch [bz#994490]
  - kvm-rhel-SMBIOS-type-1-branding.patch [bz#994490]
  - kvm-Add-disable-rhev-features-option-to-configure.patch []
  - Resolves: bz#1001144
    (Disable or remove device usb-host-linux)
  - Resolves: bz#1009993
    (RHEL7 guests do not issue fdatasyncs on virtio-blk)
  - Resolves: bz#787463
    (disable ivshmem (was: [Hitachi 7.0 FEAT] Support ivshmem (Inter-VM Shared Memory)))
  - Resolves: bz#907743
    (qemu-ga: empty reason string for OpenFileFailed error)
  - Resolves: bz#928867
    (Virtual PMU support during live migration - qemu-kvm)
  - Resolves: bz#994490
    (Set per-machine-type SMBIOS strings)
  - Resolves: bz#997702
    (Migration from RHEL6.5 host to RHEL7.0 host is failed with virtio-net device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-15.el7
changelog:
  - kvm-cow-make-reads-go-at-a-decent-speed.patch [bz#989646]
  - kvm-cow-make-writes-go-at-a-less-indecent-speed.patch [bz#989646]
  - kvm-cow-do-not-call-bdrv_co_is_allocated.patch [bz#989646]
  - kvm-block-keep-bs-total_sectors-up-to-date-even-for-grow.patch [bz#989646]
  - kvm-block-make-bdrv_co_is_allocated-static.patch [bz#989646]
  - kvm-block-do-not-use-total_sectors-in-bdrv_co_is_allocat.patch [bz#989646]
  - kvm-block-remove-bdrv_is_allocated_above-bdrv_co_is_allo.patch [bz#989646]
  - kvm-block-expect-errors-from-bdrv_co_is_allocated.patch [bz#989646]
  - kvm-block-Fix-compiler-warning-Werror-uninitialized.patch [bz#989646]
  - kvm-qemu-img-always-probe-the-input-image-for-allocated-.patch [bz#989646]
  - kvm-block-make-bdrv_has_zero_init-return-false-for-copy-.patch [bz#989646]
  - kvm-block-introduce-bdrv_get_block_status-API.patch [bz#989646]
  - kvm-block-define-get_block_status-return-value.patch [bz#989646]
  - kvm-block-return-get_block_status-data-and-flags-for-for.patch [bz#989646]
  - kvm-block-use-bdrv_has_zero_init-to-return-BDRV_BLOCK_ZE.patch [bz#989646]
  - kvm-block-return-BDRV_BLOCK_ZERO-past-end-of-backing-fil.patch [bz#989646]
  - kvm-qemu-img-add-a-map-subcommand.patch [bz#989646]
  - kvm-docs-qapi-document-qemu-img-map.patch [bz#989646]
  - kvm-raw-posix-return-get_block_status-data-and-flags.patch [bz#989646]
  - kvm-raw-posix-report-unwritten-extents-as-zero.patch [bz#989646]
  - kvm-block-add-default-get_block_status-implementation-fo.patch [bz#989646]
  - kvm-block-look-for-zero-blocks-in-bs-file.patch [bz#989646]
  - kvm-qemu-img-fix-invalid-JSON.patch [bz#989646]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#989646]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#989646]
  - kvm-block-get_block_status-avoid-redundant-callouts-on-r.patch [bz#989646]
  - kvm-qcow2-Restore-total_sectors-value-in-save_vmstate.patch [bz#1025740]
  - kvm-qcow2-Unset-zero_beyond_eof-in-save_vmstate.patch [bz#1025740]
  - kvm-qemu-iotests-Test-for-loading-VM-state-from-qcow2.patch [bz#1025740]
  - kvm-apic-rename-apic-specific-bitopts.patch [bz#1001216]
  - kvm-hw-import-bitmap-operations-in-qdev-core-header.patch [bz#1001216]
  - kvm-qemu-help-Sort-devices-by-logical-functionality.patch [bz#1001216]
  - kvm-devices-Associate-devices-to-their-logical-category.patch [bz#1001216]
  - kvm-Mostly-revert-qemu-help-Sort-devices-by-logical-func.patch [bz#1001216]
  - kvm-qdev-monitor-Group-device_add-help-and-info-qdm-by-c.patch [bz#1001216]
  - kvm-qdev-Replace-no_user-by-cannot_instantiate_with_devi.patch [bz#1001216]
  - kvm-sysbus-Set-cannot_instantiate_with_device_add_yet.patch [bz#1001216]
  - kvm-cpu-Document-why-cannot_instantiate_with_device_add_.patch [bz#1001216]
  - kvm-apic-Document-why-cannot_instantiate_with_device_add.patch [bz#1001216]
  - kvm-pci-host-Consistently-set-cannot_instantiate_with_de.patch [bz#1001216]
  - kvm-ich9-Document-why-cannot_instantiate_with_device_add.patch [bz#1001216]
  - kvm-piix3-piix4-Clean-up-use-of-cannot_instantiate_with_.patch [bz#1001216]
  - kvm-vt82c686-Clean-up-use-of-cannot_instantiate_with_dev.patch [bz#1001216]
  - kvm-isa-Clean-up-use-of-cannot_instantiate_with_device_a.patch [bz#1001216]
  - kvm-qdev-Do-not-let-the-user-try-to-device_add-when-it-c.patch [bz#1001216]
  - kvm-rhel-Revert-unwanted-cannot_instantiate_with_device_.patch [bz#1001216]
  - kvm-rhel-Revert-downstream-changes-to-unused-default-con.patch [bz#1001076]
  - kvm-rhel-Drop-cfi.pflash01-and-isa-ide-device.patch [bz#1001076]
  - kvm-rhel-Drop-isa-vga-device.patch [bz#1001088]
  - kvm-rhel-Make-isa-cirrus-vga-device-unavailable.patch [bz#1001088]
  - kvm-rhel-Make-ccid-card-emulated-device-unavailable.patch [bz#1001123]
  - kvm-x86-fix-migration-from-pre-version-12.patch [bz#1005695]
  - kvm-x86-cpuid-reconstruct-leaf-0Dh-data.patch [bz#1005695]
  - kvm-kvmvapic-Catch-invalid-ROM-size.patch [bz#920021]
  - kvm-kvmvapic-Enter-inactive-state-on-hardware-reset.patch [bz#920021]
  - kvm-kvmvapic-Clear-also-physical-ROM-address-when-enteri.patch [bz#920021]
  - kvm-block-optionally-disable-live-block-jobs.patch [bz#987582]
  - kvm-rpm-spec-template-disable-live-block-ops-for-rhel-en.patch [bz#987582]
  - kvm-migration-disable-live-block-migration-b-i-for-rhel-.patch [bz#1022392]
  - kvm-Build-ceph-rbd-only-for-rhev.patch [bz#987583]
  - kvm-spec-Disable-host-cdrom-RHEL-only.patch [bz#760885]
  - kvm-rhel-Make-pci-serial-2x-and-pci-serial-4x-device-una.patch [bz#1001180]
  - kvm-usb-host-libusb-Fix-reset-handling.patch [bz#980415]
  - kvm-usb-host-libusb-Configuration-0-may-be-a-valid-confi.patch [bz#980383]
  - kvm-usb-host-libusb-Detach-kernel-drivers-earlier.patch [bz#980383]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#1010858]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#1010858]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#1010858]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#1010858]
  - kvm-fw_cfg-add-API-to-find-FW-cfg-object.patch [bz#990601]
  - kvm-pvpanic-use-FWCfgState-explicitly.patch [bz#990601]
  - kvm-pvpanic-initialization-cleanup.patch [bz#990601]
  - kvm-pvpanic-fix-fwcfg-for-big-endian-hosts.patch [bz#990601]
  - kvm-hw-misc-make-pvpanic-known-to-user.patch [bz#990601]
  - kvm-gdbstub-do-not-restart-crashed-guest.patch [bz#990601]
  - kvm-gdbstub-fix-for-commit-87f25c12bfeaaa0c41fb857713bbc.patch [bz#990601]
  - kvm-vl-allow-cont-from-panicked-state.patch [bz#990601]
  - kvm-hw-misc-don-t-create-pvpanic-device-by-default.patch [bz#990601]
  - kvm-block-vhdx-add-migration-blocker.patch [bz#1007176]
  - kvm-qemu-kvm.spec-add-vhdx-to-the-read-only-block-driver.patch [bz#1007176]
  - kvm-qemu-kvm.spec-Add-VPC-VHD-driver-to-the-block-read-o.patch [bz#1007176]
  - Resolves: bz#1001076
    (Disable or remove other block devices we won't support)
  - Resolves: bz#1001088
    (Disable or remove display devices we won't support)
  - Resolves: bz#1001123
    (Disable or remove device ccid-card-emulated)
  - Resolves: bz#1001180
    (Disable or remove devices pci-serial-2x, pci-serial-4x)
  - Resolves: bz#1001216
    (Fix no_user or provide another way make devices unavailable with -device / device_add)
  - Resolves: bz#1005695
    (QEMU should hide CPUID.0Dh values that it does not support)
  - Resolves: bz#1007176
    (Add VPC and VHDX file formats as supported in qemu-kvm (read-only))
  - Resolves: bz#1010858
    (Disable unused human monitor commands)
  - Resolves: bz#1022392
    (Disable live-storage-migration in qemu-kvm (migrate -b/-i))
  - Resolves: bz#1025740
    (Saving VM state on qcow2 images results in VM state corruption)
  - Resolves: bz#760885
    (Disable host cdrom passthrough)
  - Resolves: bz#920021
    (qemu-kvm segment fault when reboot guest after hot unplug device with option ROM)
  - Resolves: bz#980383
    (The usb3.0 stick can't be returned back to host after shutdown guest with usb3.0 pass-through)
  - Resolves: bz#980415
    (libusbx: error [_open_sysfs_attr] open /sys/bus/usb/devices/4-1/bConfigurationValue failed ret=-1 errno=2)
  - Resolves: bz#987582
    (Initial Virtualization Differentiation for RHEL7 (Live snapshots))
  - Resolves: bz#987583
    (Initial Virtualization Differentiation for RHEL7 (Ceph enablement))
  - Resolves: bz#989646
    (Support backup vendors in qemu to access qcow disk readonly)
  - Resolves: bz#990601
    (pvpanic device triggers guest bugs when present by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-16.el7
changelog:
  - kvm-block-drop-bs_snapshots-global-variable.patch [bz#1026524]
  - kvm-block-move-snapshot-code-in-block.c-to-block-snapsho.patch [bz#1026524]
  - kvm-block-fix-vvfat-error-path-for-enable_write_target.patch [bz#1026524]
  - kvm-block-Bugfix-format-and-snapshot-used-in-drive-optio.patch [bz#1026524]
  - kvm-iscsi-use-bdrv_new-instead-of-stack-structure.patch [bz#1026524]
  - kvm-qcow2-Add-corrupt-bit.patch [bz#1004347]
  - kvm-qcow2-Metadata-overlap-checks.patch [bz#1004347]
  - kvm-qcow2-Employ-metadata-overlap-checks.patch [bz#1004347]
  - kvm-qcow2-refcount-Move-OFLAG_COPIED-checks.patch [bz#1004347]
  - kvm-qcow2-refcount-Repair-OFLAG_COPIED-errors.patch [bz#1004347]
  - kvm-qcow2-refcount-Repair-shared-refcount-blocks.patch [bz#1004347]
  - kvm-qcow2_check-Mark-image-consistent.patch [bz#1004347]
  - kvm-qemu-iotests-Overlapping-cluster-allocations.patch [bz#1004347]
  - kvm-w32-Fix-access-to-host-devices-regression.patch [bz#1026524]
  - kvm-add-qemu-img-convert-n-option-skip-target-volume-cre.patch [bz#1026524]
  - kvm-bdrv-Use-Error-for-opening-images.patch [bz#1026524]
  - kvm-bdrv-Use-Error-for-creating-images.patch [bz#1026524]
  - kvm-block-Error-parameter-for-open-functions.patch [bz#1026524]
  - kvm-block-Error-parameter-for-create-functions.patch [bz#1026524]
  - kvm-qemu-img-create-Emit-filename-on-error.patch [bz#1026524]
  - kvm-qcow2-Use-Error-parameter.patch [bz#1026524]
  - kvm-qemu-iotests-Adjustments-due-to-error-propagation.patch [bz#1026524]
  - kvm-block-raw-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-win32-Employ-error-parameter.patch [bz#1026524]
  - kvm-blkdebug-Employ-error-parameter.patch [bz#1026524]
  - kvm-blkverify-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-posix-Employ-error-parameter.patch [bz#1026524]
  - kvm-block-raw-win32-Always-use-errno-in-hdev_open.patch [bz#1026524]
  - kvm-qmp-Documentation-for-BLOCK_IMAGE_CORRUPTED.patch [bz#1004347]
  - kvm-qcow2-Correct-snapshots-size-for-overlap-check.patch [bz#1004347]
  - kvm-qcow2-CHECK_OFLAG_COPIED-is-obsolete.patch [bz#1004347]
  - kvm-qcow2-Correct-endianness-in-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Switch-L1-table-in-a-single-sequence.patch [bz#1004347]
  - kvm-qcow2-Use-pread-for-inactive-L1-in-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Remove-wrong-metadata-overlap-check.patch [bz#1004347]
  - kvm-qcow2-Use-negated-overflow-check-mask.patch [bz#1004347]
  - kvm-qcow2-Make-overlap-check-mask-variable.patch [bz#1004347]
  - kvm-qcow2-Add-overlap-check-options.patch [bz#1004347]
  - kvm-qcow2-Array-assigning-options-to-OL-check-bits.patch [bz#1004347]
  - kvm-qcow2-Add-more-overlap-check-bitmask-macros.patch [bz#1004347]
  - kvm-qcow2-Evaluate-overlap-check-options.patch [bz#1004347]
  - kvm-qapi-types.py-Split-off-generate_struct_fields.patch [bz#978402]
  - kvm-qapi-types.py-Fix-enum-struct-sizes-on-i686.patch [bz#978402]
  - kvm-qapi-types-visit.py-Pass-whole-expr-dict-for-structs.patch [bz#978402]
  - kvm-qapi-types-visit.py-Inheritance-for-structs.patch [bz#978402]
  - kvm-blockdev-Introduce-DriveInfo.enable_auto_del.patch [bz#978402]
  - kvm-Implement-qdict_flatten.patch [bz#978402]
  - kvm-blockdev-blockdev-add-QMP-command.patch [bz#978402]
  - kvm-blockdev-Separate-ID-generation-from-DriveInfo-creat.patch [bz#978402]
  - kvm-blockdev-Pass-QDict-to-blockdev_init.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-media-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-if-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Moving-parsing-of-geometry-options-to-drive.patch [bz#978402]
  - kvm-blockdev-Move-parsing-of-boot-option-to-drive_init.patch [bz#978402]
  - kvm-blockdev-Move-bus-unit-index-processing-to-drive_ini.patch [bz#978402]
  - kvm-blockdev-Move-virtio-blk-device-creation-to-drive_in.patch [bz#978402]
  - kvm-blockdev-Remove-IF_-check-for-read-only-blockdev_ini.patch [bz#978402]
  - kvm-qemu-iotests-Check-autodel-behaviour-for-device_del.patch [bz#978402]
  - kvm-blockdev-Remove-media-parameter-from-blockdev_init.patch [bz#978402]
  - kvm-blockdev-Don-t-disable-COR-automatically-with-blockd.patch [bz#978402]
  - kvm-blockdev-blockdev_init-error-conversion.patch [bz#978402]
  - kvm-sd-Avoid-access-to-NULL-BlockDriverState.patch [bz#978402]
  - kvm-blockdev-fix-cdrom-read_only-flag.patch [bz#978402]
  - kvm-block-fix-backing-file-overriding.patch [bz#978402]
  - kvm-block-Disable-BDRV_O_COPY_ON_READ-for-the-backing-fi.patch [bz#978402]
  - kvm-block-Don-t-copy-backing-file-name-on-error.patch [bz#978402]
  - kvm-qemu-iotests-Try-creating-huge-qcow2-image.patch [bz#980771]
  - kvm-block-move-qmp-and-info-dump-related-code-to-block-q.patch [bz#980771]
  - kvm-block-dump-snapshot-and-image-info-to-specified-outp.patch [bz#980771]
  - kvm-block-add-snapshot-info-query-function-bdrv_query_sn.patch [bz#980771]
  - kvm-block-add-image-info-query-function-bdrv_query_image.patch [bz#980771]
  - kvm-qmp-add-ImageInfo-in-BlockDeviceInfo-used-by-query-b.patch [bz#980771]
  - kvm-vmdk-Implement-.bdrv_has_zero_init.patch [bz#980771]
  - kvm-qemu-iotests-Add-basic-ability-to-use-binary-sample-.patch [bz#980771]
  - kvm-qemu-iotests-Quote-TEST_IMG-and-TEST_DIR-usage.patch [bz#980771]
  - kvm-qemu-iotests-fix-test-case-059.patch [bz#980771]
  - kvm-qapi-Add-ImageInfoSpecific-type.patch [bz#980771]
  - kvm-block-Add-bdrv_get_specific_info.patch [bz#980771]
  - kvm-block-qapi-Human-readable-ImageInfoSpecific-dump.patch [bz#980771]
  - kvm-qcow2-Add-support-for-ImageInfoSpecific.patch [bz#980771]
  - kvm-qemu-iotests-Discard-specific-info-in-_img_info.patch [bz#980771]
  - kvm-qemu-iotests-Additional-info-from-qemu-img-info.patch [bz#980771]
  - kvm-vmdk-convert-error-code-to-use-errp.patch [bz#980771]
  - kvm-vmdk-refuse-enabling-zeroed-grain-with-flat-images.patch [bz#980771]
  - kvm-qapi-Add-optional-field-compressed-to-ImageInfo.patch [bz#980771]
  - kvm-vmdk-Only-read-cid-from-image-file-when-opening.patch [bz#980771]
  - kvm-vmdk-Implment-bdrv_get_specific_info.patch [bz#980771]
  - Resolves: bz#1004347
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1026524
    (Backport block layer error parameter patches)
  - Resolves: bz#978402
    ([RFE] Add discard support to qemu-kvm layer)
  - Resolves: bz#980771
    ([RFE]  qemu-img should be able to tell the compat version of a qcow2 image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-17.el7
changelog:
  - kvm-pci-assign-Add-MSI-affinity-support.patch [bz#1025877]
  - kvm-Fix-potential-resource-leak-missing-fclose.patch [bz#1025877]
  - kvm-pci-assign-remove-the-duplicate-function-name-in-deb.patch [bz#1025877]
  - kvm-Remove-s390-ccw-img-loader.patch [bz#1017682]
  - kvm-Fix-vscclient-installation.patch [bz#1017681]
  - kvm-Change-qemu-bridge-helper-permissions-to-4755.patch [bz#1017689]
  - kvm-net-update-nic-info-during-device-reset.patch [bz#922589]
  - kvm-net-e1000-update-network-information-when-macaddr-is.patch [bz#922589]
  - kvm-net-rtl8139-update-network-information-when-macaddr-.patch [bz#922589]
  - kvm-virtio-net-fix-up-HMP-NIC-info-string-on-reset.patch [bz#1026689]
  - kvm-vfio-pci-VGA-quirk-update.patch [bz#1025477]
  - kvm-vfio-pci-Add-support-for-MSI-affinity.patch [bz#1025477]
  - kvm-vfio-pci-Test-device-reset-capabilities.patch [bz#1026550]
  - kvm-vfio-pci-Lazy-PCI-option-ROM-loading.patch [bz#1026550]
  - kvm-vfio-pci-Cleanup-error_reports.patch [bz#1026550]
  - kvm-vfio-pci-Add-dummy-PCI-ROM-write-accessor.patch [bz#1026550]
  - kvm-vfio-pci-Fix-endian-issues-in-vfio_pci_size_rom.patch [bz#1026550]
  - kvm-linux-headers-Update-to-include-vfio-pci-hot-reset-s.patch [bz#1025472]
  - kvm-vfio-pci-Implement-PCI-hot-reset.patch [bz#1025472]
  - kvm-linux-headers-Update-for-KVM-VFIO-device.patch [bz#1025474]
  - kvm-vfio-pci-Make-use-of-new-KVM-VFIO-device.patch [bz#1025474]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#995866]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#995866]
  - kvm-e1000-rtl8139-update-HMP-NIC-when-every-bit-is-writt.patch [bz#922589]
  - kvm-don-t-disable-ctrl_mac_addr-feature-for-6.5-machine-.patch [bz#1005039]
  - Resolves: bz#1005039
    (add compat property to disable ctrl_mac_addr feature)
  - Resolves: bz#1017681
    (rpmdiff test "Multilib regressions": vscclient is a libtool script on s390/s390x/ppc/ppc64)
  - Resolves: bz#1017682
    (/usr/share/qemu-kvm/s390-ccw.img need not be distributed)
  - Resolves: bz#1017689
    (/usr/libexec/qemu-bridge-helper permissions should be 4755)
  - Resolves: bz#1025472
    (Nvidia GPU device assignment - qemu-kvm - bus reset support)
  - Resolves: bz#1025474
    (Nvidia GPU device assignment - qemu-kvm - NoSnoop support)
  - Resolves: bz#1025477
    (VFIO MSI affinity)
  - Resolves: bz#1025877
    (pci-assign lacks MSI affinity support)
  - Resolves: bz#1026550
    (QEMU VFIO update ROM loading code)
  - Resolves: bz#1026689
    (virtio-net: macaddr is reset but network info of monitor isn't updated)
  - Resolves: bz#922589
    (e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest)
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-19.el7
changelog:
  - kvm-qapi-qapi-visit.py-fix-list-handling-for-union-types.patch [bz#848203]
  - kvm-qapi-qapi-visit.py-native-list-support.patch [bz#848203]
  - kvm-qapi-enable-generation-of-native-list-code.patch [bz#848203]
  - kvm-net-add-support-of-mac-programming-over-macvtap-in-Q.patch [bz#848203]
  - Resolves: bz#848203
    (MAC Programming for virtio over macvtap - qemu-kvm support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-20.el7
changelog:
  - kvm-pc-drop-virtio-balloon-pci-event_idx-compat-property.patch [bz#1029539]
  - kvm-virtio-net-only-delete-bh-that-existed.patch [bz#922463]
  - kvm-virtio-net-broken-RX-filtering-logic-fixed.patch [bz#1029370]
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1025138]
  - kvm-block-Round-up-total_sectors.patch [bz#1025138]
  - kvm-doc-fix-hardcoded-helper-path.patch [bz#1016952]
  - kvm-introduce-RFQDN_REDHAT-RHEL-6-7-fwd.patch [bz#971933]
  - kvm-error-reason-in-BLOCK_IO_ERROR-BLOCK_JOB_ERROR-event.patch [bz#971938]
  - kvm-improve-debuggability-of-BLOCK_IO_ERROR-BLOCK_JOB_ER.patch [bz#895041]
  - kvm-vfio-pci-Fix-multifunction-on.patch [bz#1029275]
  - kvm-qcow2-Change-default-for-new-images-to-compat-1.1.patch [bz#1026739]
  - kvm-qcow2-change-default-for-new-images-to-compat-1.1-pa.patch [bz#1026739]
  - kvm-rng-egd-offset-the-point-when-repeatedly-read-from-t.patch [bz#1032862]
  - kvm-Fix-rhel-rhev-conflict-for-qemu-kvm-common.patch [bz#1033463]
  - Resolves: bz#1016952
    (qemu-kvm man page guide wrong path for qemu-bridge-helper)
  - Resolves: bz#1025138
    (Read/Randread/Randrw performance regression)
  - Resolves: bz#1026739
    (qcow2: Switch to compat=1.1 default for new images)
  - Resolves: bz#1029275
    (Guest only find one 82576 VF(function 0) while use multifunction)
  - Resolves: bz#1029370
    ([whql][netkvm][wlk] Virtio-net device handles RX multicast filtering improperly)
  - Resolves: bz#1029539
    (Machine type rhel6.1.0 and  balloon device cause migration fail from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#1032862
    (virtio-rng-egd: repeatedly read same random data-block w/o considering the buffer offset)
  - Resolves: bz#1033463
    (can not upgrade qemu-kvm-common to qemu-kvm-common-rhev due to conflicts)
  - Resolves: bz#895041
    (QMP: forward port I/O error debug messages)
  - Resolves: bz#922463
    (qemu-kvm core dump when virtio-net multi queue guest hot-unpluging vNIC)
  - Resolves: bz#971933
    (QMP: add RHEL's vendor extension prefix)
  - Resolves: bz#971938
    (QMP: Add error reason to BLOCK_IO_ERROR event)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-21.el7
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007334]
  - Resolves: bz#1007334
    (CVE-2013-4344 qemu-kvm: qemu: buffer overflow in scsi_target_emulate_report_luns [rhel-7.0])


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-22.el7
changelog:
  - Fix ksmtuned with set_process_name=1 [bz#1027420]
  - Fix committed memory when no qemu-kvm running [bz#1027418]
  - kvm-virtio-net-fix-the-memory-leak-in-rxfilter_notify.patch [bz#1033810]
  - kvm-qom-Fix-memory-leak-in-object_property_set_link.patch [bz#1033810]
  - kvm-fix-intel-hda-live-migration.patch [bz#1036537]
  - kvm-vfio-pci-Release-all-MSI-X-vectors-when-disabled.patch [bz#1029743]
  - kvm-Query-KVM-for-available-memory-slots.patch [bz#921490]
  - kvm-block-Dont-ignore-previously-set-bdrv_flags.patch [bz#1039501]
  - kvm-cleanup-trace-events.pl-New.patch [bz#997832]
  - kvm-slavio_misc-Fix-slavio_led_mem_readw-_writew-tracepo.patch [bz#997832]
  - kvm-milkymist-minimac2-Fix-minimac2_read-_write-tracepoi.patch [bz#997832]
  - kvm-trace-events-Drop-unused-events.patch [bz#997832]
  - kvm-trace-events-Fix-up-source-file-comments.patch [bz#997832]
  - kvm-trace-events-Clean-up-with-scripts-cleanup-trace-eve.patch [bz#997832]
  - kvm-trace-events-Clean-up-after-removal-of-old-usb-host-.patch [bz#997832]
  - kvm-net-Update-netdev-peer-on-link-change.patch [bz#1027571]
  - Resolves: bz#1027418
    (ksmtuned committed_memory() still returns "", not 0, when no qemu running)
  - Resolves: bz#1027420
    (ksmtuned can’t handle libvirt WITH set_process_name=1)
  - Resolves: bz#1027571
    ([virtio-win]win8.1 guest network can not resume automatically after do "set_link tap1 on")
  - Resolves: bz#1029743
    (qemu-kvm core dump after hot plug/unplug 82576 PF about 100 times)
  - Resolves: bz#1033810
    (memory leak in using object_get_canonical_path())
  - Resolves: bz#1036537
    (Cross version migration from RHEL6.5 host to RHEL7.0 host with sound device failed.)
  - Resolves: bz#1039501
    ([provisioning] discard=on broken)
  - Resolves: bz#921490
    (qemu-kvm core dumped after hot plugging more than 11 VF through vfio-pci)
  - Resolves: bz#997832
    (Backport trace fixes proactively to avoid confusion and silly conflicts)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-23.el7
changelog:
  - kvm-qdev-monitor-Unref-device-when-device_add-fails.patch [bz#1003773]
  - kvm-qdev-Drop-misleading-qdev_free-function.patch [bz#1003773]
  - kvm-blockdev-fix-drive_init-opts-and-bs_opts-leaks.patch [bz#1003773]
  - kvm-libqtest-rename-qmp-to-qmp_discard_response.patch [bz#1003773]
  - kvm-libqtest-add-qmp-fmt-.-QDict-function.patch [bz#1003773]
  - kvm-blockdev-test-add-test-case-for-drive_add-duplicate-.patch [bz#1003773]
  - kvm-qdev-monitor-test-add-device_add-leak-test-cases.patch [bz#1003773]
  - kvm-qtest-Use-display-none-by-default.patch [bz#1003773]
  - Resolves: bz#1003773
    (When virtio-blk-pci device with dataplane is failed to be added, the drive cannot be released.)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-24.el7
changelog:
  - kvm-range-add-Range-structure.patch [bz#1034876]
  - kvm-range-add-Range-to-typedefs.patch [bz#1034876]
  - kvm-range-add-min-max-operations-on-ranges.patch [bz#1034876]
  - kvm-qdev-Add-SIZE-type-to-qdev-properties.patch [bz#1034876]
  - kvm-qapi-make-visit_type_size-fallback-to-type_int.patch [bz#1034876]
  - kvm-pc-move-IO_APIC_DEFAULT_ADDRESS-to-include-hw-i386-i.patch [bz#1034876]
  - kvm-pci-add-helper-to-retrieve-the-64-bit-range.patch [bz#1034876]
  - kvm-pci-fix-up-w64-size-calculation-helper.patch [bz#1034876]
  - kvm-refer-to-FWCfgState-explicitly.patch [bz#1034876]
  - kvm-fw_cfg-move-typedef-to-qemu-typedefs.h.patch [bz#1034876]
  - kvm-arch_init-align-MR-size-to-target-page-size.patch [bz#1034876]
  - kvm-loader-store-FW-CFG-ROM-files-in-RAM.patch [bz#1034876]
  - kvm-pci-store-PCI-hole-ranges-in-guestinfo-structure.patch [bz#1034876]
  - kvm-pc-pass-PCI-hole-ranges-to-Guests.patch [bz#1034876]
  - kvm-pc-replace-i440fx_common_init-with-i440fx_init.patch [bz#1034876]
  - kvm-pc-don-t-access-fw-cfg-if-NULL.patch [bz#1034876]
  - kvm-pc-add-I440FX-QOM-cast-macro.patch [bz#1034876]
  - kvm-pc-limit-64-bit-hole-to-2G-by-default.patch [bz#1034876]
  - kvm-q35-make-pci-window-address-size-match-guest-cfg.patch [bz#1034876]
  - kvm-q35-use-64-bit-window-programmed-by-guest.patch [bz#1034876]
  - kvm-piix-use-64-bit-window-programmed-by-guest.patch [bz#1034876]
  - kvm-pc-fix-regression-for-64-bit-PCI-memory.patch [bz#1034876]
  - kvm-cleanup-object.h-include-error.h-directly.patch [bz#1034876]
  - kvm-qom-cleanup-struct-Error-references.patch [bz#1034876]
  - kvm-qom-add-pointer-to-int-property-helpers.patch [bz#1034876]
  - kvm-fw_cfg-interface-to-trigger-callback-on-read.patch [bz#1034876]
  - kvm-loader-support-for-unmapped-ROM-blobs.patch [bz#1034876]
  - kvm-pcie_host-expose-UNMAPPED-macro.patch [bz#1034876]
  - kvm-pcie_host-expose-address-format.patch [bz#1034876]
  - kvm-q35-use-macro-for-MCFG-property-name.patch [bz#1034876]
  - kvm-q35-expose-mmcfg-size-as-a-property.patch [bz#1034876]
  - kvm-i386-add-ACPI-table-files-from-seabios.patch [bz#1034876]
  - kvm-acpi-add-rules-to-compile-ASL-source.patch [bz#1034876]
  - kvm-acpi-pre-compiled-ASL-files.patch [bz#1034876]
  - kvm-acpi-ssdt-pcihp-updat-generated-file.patch [bz#1034876]
  - kvm-loader-use-file-path-size-from-fw_cfg.h.patch [bz#1034876]
  - kvm-i386-add-bios-linker-loader.patch [bz#1034876]
  - kvm-loader-allow-adding-ROMs-in-done-callbacks.patch [bz#1034876]
  - kvm-i386-define-pc-guest-info.patch [bz#1034876]
  - kvm-acpi-piix-add-macros-for-acpi-property-names.patch [bz#1034876]
  - kvm-piix-APIs-for-pc-guest-info.patch [bz#1034876]
  - kvm-ich9-APIs-for-pc-guest-info.patch [bz#1034876]
  - kvm-pvpanic-add-API-to-access-io-port.patch [bz#1034876]
  - kvm-hpet-add-API-to-find-it.patch [bz#1034876]
  - kvm-hpet-fix-build-with-CONFIG_HPET-off.patch [bz#1034876]
  - kvm-acpi-add-interface-to-access-user-installed-tables.patch [bz#1034876]
  - kvm-pc-use-new-api-to-add-builtin-tables.patch [bz#1034876]
  - kvm-i386-ACPI-table-generation-code-from-seabios.patch [bz#1034876]
  - kvm-ssdt-fix-PBLK-length.patch [bz#1034876]
  - kvm-ssdt-proc-update-generated-file.patch [bz#1034876]
  - kvm-pc-disable-pci-info.patch [bz#1034876]
  - kvm-acpi-build-fix-build-on-glib-2.22.patch [bz#1034876]
  - kvm-acpi-build-fix-build-on-glib-2.14.patch [bz#1034876]
  - kvm-acpi-build-fix-support-for-glib-2.22.patch [bz#1034876]
  - kvm-acpi-build-Fix-compiler-warning-missing-gnu_printf-f.patch [bz#1034876]
  - kvm-exec-Fix-prototype-of-phys_mem_set_alloc-and-related.patch [bz#1034876]
  - Resolves: bz#1034876
    (export acpi tables to guests)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-25.el7
changelog:
  - kvm-Change-package-description.patch [bz#1017696]
  - kvm-seccomp-add-kill-to-the-syscall-whitelist.patch [bz#1026314]
  - kvm-json-parser-fix-handling-of-large-whole-number-value.patch [bz#997915]
  - kvm-qapi-add-QMP-input-test-for-large-integers.patch [bz#997915]
  - kvm-qapi-fix-visitor-serialization-tests-for-numbers-dou.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-visitor-serializat.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-QMP-output-visitor.patch [bz#997915]
  - kvm-qapi-add-native-list-coverage-for-QMP-input-visitor-.patch [bz#997915]
  - kvm-qapi-lack-of-two-commas-in-dict.patch [bz#997915]
  - kvm-tests-QAPI-schema-parser-tests.patch [bz#997915]
  - kvm-tests-Use-qapi-schema-test.json-as-schema-parser-tes.patch [bz#997915]
  - kvm-qapi.py-Restructure-lexer-and-parser.patch [bz#997915]
  - kvm-qapi.py-Decent-syntax-error-reporting.patch [bz#997915]
  - kvm-qapi.py-Reject-invalid-characters-in-schema-file.patch [bz#997915]
  - kvm-qapi.py-Fix-schema-parser-to-check-syntax-systematic.patch [bz#997915]
  - kvm-qapi.py-Fix-diagnosing-non-objects-at-a-schema-s-top.patch [bz#997915]
  - kvm-qapi.py-Rename-expr_eval-to-expr-in-parse_schema.patch [bz#997915]
  - kvm-qapi.py-Permit-comments-starting-anywhere-on-the-lin.patch [bz#997915]
  - kvm-scripts-qapi.py-Avoid-syntax-not-supported-by-Python.patch [bz#997915]
  - kvm-tests-Fix-schema-parser-test-for-in-tree-build.patch [bz#997915]
  - Resolves: bz#1017696
    ([branding] remove references to dynamic translation and user-mode emulation)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#997915
    (Backport new QAPI parser proactively to help developers and avoid silly conflicts)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-26.el7
changelog:
  - Add BuildRequires to libRDMAcm-devel for RDMA support [bz#1011720]
  - kvm-add-a-header-file-for-atomic-operations.patch [bz#1011720]
  - kvm-savevm-Fix-potential-memory-leak.patch [bz#1011720]
  - kvm-migration-Fail-migration-on-bdrv_flush_all-error.patch [bz#1011720]
  - kvm-rdma-add-documentation.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_update_position.patch [bz#1011720]
  - kvm-rdma-export-yield_until_fd_readable.patch [bz#1011720]
  - kvm-rdma-export-throughput-w-MigrationStats-QMP.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_file_mode_is_not_valid.patch [bz#1011720]
  - kvm-rdma-introduce-qemu_ram_foreach_block.patch [bz#1011720]
  - kvm-rdma-new-QEMUFileOps-hooks.patch [bz#1011720]
  - kvm-rdma-introduce-capability-x-rdma-pin-all.patch [bz#1011720]
  - kvm-rdma-update-documentation-to-reflect-new-unpin-suppo.patch [bz#1011720]- kvm-rdma-bugfix-ram_control_save_page.patch [bz#1011720]
  - kvm-rdma-introduce-ram_handle_compressed.patch [bz#1011720]
  - kvm-rdma-core-logic.patch [bz#1011720]
  - kvm-rdma-send-pc.ram.patch [bz#1011720]
  - kvm-rdma-allow-state-transitions-between-other-states-be.patch [bz#1011720]
  - kvm-rdma-introduce-MIG_STATE_NONE-and-change-MIG_STATE_S.patch [bz#1011720]
  - kvm-rdma-account-for-the-time-spent-in-MIG_STATE_SETUP-t.patch [bz#1011720]
  - kvm-rdma-bugfix-make-IPv6-support-work.patch [bz#1011720]
  - kvm-rdma-forgot-to-turn-off-the-debugging-flag.patch [bz#1011720]
  - kvm-rdma-correct-newlines-in-error-statements.patch [bz#1011720]
  - kvm-rdma-don-t-use-negative-index-to-array.patch [bz#1011720]
  - kvm-rdma-qemu_rdma_post_send_control-uses-wrongly-RDMA_W.patch [bz#1011720]
  - kvm-rdma-use-DRMA_WRID_READY.patch [bz#1011720]
  - kvm-rdma-memory-leak-RDMAContext-host.patch [bz#1011720]
  - kvm-rdma-use-resp.len-after-validation-in-qemu_rdma_regi.patch [bz#1011720]
  - kvm-rdma-validate-RDMAControlHeader-len.patch [bz#1011720]
  - kvm-rdma-check-if-RDMAControlHeader-len-match-transferre.patch [bz#1011720]
  - kvm-rdma-proper-getaddrinfo-handling.patch [bz#1011720]
  - kvm-rdma-IPv6-over-Ethernet-RoCE-is-broken-in-linux-work.patch [bz#1011720]
  - kvm-rdma-remaining-documentation-fixes.patch [bz#1011720]
  - kvm-rdma-silly-ipv6-bugfix.patch [bz#1011720]
  - kvm-savevm-fix-wrong-initialization-by-ram_control_load_.patch [bz#1011720]
  - kvm-arch_init-right-return-for-ram_save_iterate.patch [bz#1011720]
  - kvm-rdma-clean-up-of-qemu_rdma_cleanup.patch [bz#1011720]
  - kvm-rdma-constify-ram_chunk_-index-start-end.patch [bz#1011720]
  - kvm-migration-Fix-debug-print-type.patch [bz#1011720]
  - kvm-arch_init-make-is_zero_page-accept-size.patch [bz#1011720]
  - kvm-migration-ram_handle_compressed.patch [bz#1011720]
  - kvm-migration-fix-spice-migration.patch [bz#1011720]
  - kvm-pci-assign-cap-number-of-devices-that-can-be-assigne.patch [bz#678368]
  - kvm-vfio-cap-number-of-devices-that-can-be-assigned.patch [bz#678368]
  - kvm-Revert-usb-tablet-Don-t-claim-wakeup-capability-for-.patch [bz#1039513]
  - kvm-mempath-prefault-pages-manually-v4.patch [bz#1026554]
  - Resolves: bz#1011720
    ([HP 7.0 Feat]: Backport RDMA based live guest migration changes from upstream to RHEL7.0 KVM)
  - Resolves: bz#1026554
    (qemu: mempath: prefault pages manually)
  - Resolves: bz#1039513
    (backport remote wakeup for ehci)
  - Resolves: bz#678368
    (RFE: Support more than 8 assigned devices)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-27.el7
changelog:
  - Change systemd service location [bz#1025217]
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1007710 bz#1029852]
  - Resolves: bz#1007710
    ([RFE] Enable qemu-img to support VMDK version 3)
  - Resolves: bz#1025217
    (systemd can't control ksm.service and ksmtuned.service)
  - Resolves: bz#1029852
    (qemu-img fails to convert vmdk image with "qemu-img: Could not open 'image.vmdk'")


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-28.el7
changelog:
  - kvm-virtio_pci-fix-level-interrupts-with-irqfd.patch [bz#1035132]
  - Resolves: bz#1035132
    (fail to boot and call trace with x-data-plane=on specified for rhel6.5 guest)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-29.el7
changelog:
  - kvm-QMP-Forward-port-__com.redhat_drive_del-from-RHEL-6.patch [bz#889051]
  - kvm-QMP-Forward-port-__com.redhat_drive_add-from-RHEL-6.patch [bz#889051]
  - kvm-HMP-Forward-port-__com.redhat_drive_add-from-RHEL-6.patch [bz#889051]
  - kvm-QMP-Document-throttling-parameters-of-__com.redhat_d.patch [bz#889051]
  - kvm-HMP-Disable-drive_add-for-Red-Hat-Enterprise-Linux.patch [bz#889051]
  - Resolves: bz#889051
    (Commands "__com.redhat_drive_add/del" don' t exist in RHEL7.0)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-30.el7
changelog:
  - kvm-Revert-HMP-Disable-drive_add-for-Red-Hat-Enterprise-2.patch.patch [bz#889051]
  - Resolves: bz#889051
    (Commands "__com.redhat_drive_add/del" don' t exist in RHEL7.0)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-32.el7
changelog:
  - kvm-block-change-default-of-.has_zero_init-to-0.patch.patch [bz#1007815]
  - kvm-iscsi-factor-out-sector-conversions.patch.patch [bz#1007815]
  - kvm-iscsi-add-logical-block-provisioning-information-to-.patch.patch [bz#1007815]
  - kvm-iscsi-add-.bdrv_get_block_status.patch.patch.patch [bz#1007815]
  - kvm-iscsi-split-discard-requests-in-multiple-parts.patch.patch.patch [bz#1007815]
  - kvm-block-make-BdrvRequestFlags-public.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-to-bdrv_-_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-introduce-BDRV_REQ_MAY_UNMAP-request-flag.patch.patch.patch [bz#1007815]
  - kvm-block-add-logical-block-provisioning-info-to-BlockDr.patch.patch.patch [bz#1007815]
  - kvm-block-add-wrappers-for-logical-block-provisioning-in.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-add-.bdrv_get_info.patch.patch [bz#1007815]
  - kvm-block-add-BlockLimits-structure-to-BlockDriverState.patch.patch.patch [bz#1007815]
  - kvm-block-raw-copy-BlockLimits-on-raw_open.patch.patch.patch [bz#1007815]
  - kvm-block-honour-BlockLimits-in-bdrv_co_do_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-honour-BlockLimits-in-bdrv_co_discard.patch.patch.patch [bz#1007815]
  - kvm-iscsi-set-limits-in-BlockDriverState.patch.patch.patch [bz#1007815]
  - kvm-iscsi-simplify-iscsi_co_discard.patch.patch.patch [bz#1007815]
  - kvm-iscsi-add-bdrv_co_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-introduce-bdrv_make_zero.patch.patch.patch [bz#1007815]
  - kvm-block-get_block_status-fix-BDRV_BLOCK_ZERO-for-unall.patch.patch.patch [bz#1007815]
  - kvm-qemu-img-add-support-for-fully-allocated-images.patch.patch.patch [bz#1007815]
  - kvm-qemu-img-conditionally-zero-out-target-on-convert.patch.patch.patch [bz#1007815]
  - kvm-block-generalize-BlockLimits-handling-to-cover-bdrv_.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-to-BlockRequest.patch.patch.patch [bz#1007815]
  - kvm-block-add-flags-argument-to-bdrv_co_write_zeroes-tra.patch.patch.patch [bz#1007815]
  - kvm-block-add-bdrv_aio_write_zeroes.patch.patch.patch [bz#1007815]
  - kvm-block-handle-ENOTSUP-from-discard-in-generic-code.patch.patch.patch [bz#1007815]
  - kvm-block-make-bdrv_co_do_write_zeroes-stricter-in-produ.patch.patch.patch [bz#1007815]
  - kvm-vpc-vhdx-add-get_info.patch.patch.patch [bz#1007815]
  - kvm-block-drivers-add-discard-write_zeroes-properties-to.patch.patch.patch [bz#1007815]
  - kvm-block-drivers-expose-requirement-for-write-same-alig.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-remove-.bdrv_has_zero_init.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-updated-copyright.patch.patch.patch [bz#1007815]
  - kvm-block-iscsi-check-WRITE-SAME-support-differently-dep.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-catch-write-protection-errors-in-UNMAP.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-reject-ANCHOR-1-for-UNMAP-and-WRITE-SAME-c.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-correctly-implement-WRITE-SAME.patch.patch.patch [bz#1007815]
  - kvm-scsi-disk-fix-WRITE-SAME-with-large-non-zero-payload.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-implement-write_zeroes-with-MAY_UNMAP-for-.patch.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-implement-write_zeroes-with-MAY_UNMAP-for-.patch.patch.patch.patch.patch [bz#1007815]
  - kvm-raw-posix-add-support-for-write_zeroes-on-XFS-and-bl.patch.patch [bz#1007815]
  - kvm-qemu-iotests-033-is-fast.patch.patch [bz#1007815]
  - kvm-qemu-img-add-support-for-skipping-zeroes-in-input-du.patch.patch [bz#1007815]
  - kvm-qemu-img-fix-usage-instruction-for-qemu-img-convert.patch.patch [bz#1007815]
  - kvm-block-iscsi-set-bdi-cluster_size.patch.patch [bz#1007815]
  - kvm-block-add-opt_transfer_length-to-BlockLimits.patch.patch [bz#1039557]
  - kvm-block-iscsi-set-bs-bl.opt_transfer_length.patch.patch [bz#1039557]
  - kvm-qemu-img-dynamically-adjust-iobuffer-size-during-con.patch.patch [bz#1039557]
  - kvm-qemu-img-round-down-request-length-to-an-aligned-sec.patch.patch [bz#1039557]
  - kvm-qemu-img-decrease-progress-update-interval-on-conver.patch.patch [bz#1039557]
  - Resolves: bz#1007815
    (fix WRITE SAME support)
  - Resolves: bz#1039557
    (optimize qemu-img for thin provisioned images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-33.el7
changelog:
  - kvm-block-qemu-iotests-for-vhdx-read-sample-dynamic-imag.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG-usage-io-p.patch [bz#879234]
  - kvm-block-qemu-iotests-fix-_make_test_img-to-work-with-s.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG.base-usage.patch [bz#879234]
  - kvm-block-qemu-iotests-add-quotes-to-TEST_IMG-usage-in-0.patch [bz#879234]
  - kvm-block-qemu-iotests-removes-duplicate-double-quotes-i.patch [bz#879234]
  - kvm-block-vhdx-minor-comments-and-typo-correction.patch [bz#879234]
  - kvm-block-vhdx-add-header-update-capability.patch [bz#879234]
  - kvm-block-vhdx-code-movement-VHDXMetadataEntries-and-BDR.patch [bz#879234]
  - kvm-block-vhdx-log-support-struct-and-defines.patch [bz#879234]
  - kvm-block-vhdx-break-endian-translation-functions-out.patch [bz#879234]
  - kvm-block-vhdx-update-log-guid-in-header-and-first-write.patch [bz#879234]
  - kvm-block-vhdx-code-movement-move-vhdx_close-above-vhdx_.patch [bz#879234]
  - kvm-block-vhdx-log-parsing-replay-and-flush-support.patch [bz#879234]
  - kvm-block-vhdx-add-region-overlap-detection-for-image-fi.patch [bz#879234]
  - kvm-block-vhdx-add-log-write-support.patch [bz#879234]
  - kvm-block-vhdx-write-support.patch [bz#879234]
  - kvm-block-vhdx-remove-BAT-file-offset-bit-shifting.patch [bz#879234]
  - kvm-block-vhdx-move-more-endian-translations-to-vhdx-end.patch [bz#879234]
  - kvm-block-vhdx-break-out-code-operations-to-functions.patch [bz#879234]
  - kvm-block-vhdx-fix-comment-typos-in-header-fix-incorrect.patch [bz#879234]
  - kvm-block-vhdx-add-.bdrv_create-support.patch [bz#879234]
  - kvm-block-vhdx-update-_make_test_img-to-filter-out-vhdx-.patch [bz#879234]
  - kvm-block-qemu-iotests-for-vhdx-add-write-test-support.patch [bz#879234]
  - kvm-block-vhdx-qemu-iotest-log-replay-of-data-sector.patch [bz#879234]
  - Resolves: bz#879234
    ([RFE] qemu-img: Add/improve support for VHDX format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-34.el7
changelog:
  - kvm-block-stream-Don-t-stream-unbacked-devices.patch [bz#965636]
  - kvm-qemu-io-Let-open-pass-options-to-block-driver.patch [bz#1004347]
  - kvm-qcow2.py-Subcommand-for-changing-header-fields.patch [bz#1004347]
  - kvm-qemu-iotests-Remaining-error-propagation-adjustments.patch [bz#1004347]
  - kvm-qemu-iotests-Add-test-for-inactive-L2-overlap.patch [bz#1004347]
  - kvm-qemu-iotests-Adjust-test-result-039.patch [bz#1004347]
  - kvm-virtio-net-don-t-update-mac_table-in-error-state.patch [bz#1048671]
  - kvm-qcow2-Zero-initialise-first-cluster-for-new-images.patch [bz#1032904]
  - Resolves: bz#1004347
    (Backport qcow2 corruption prevention patches)
  - Resolves: bz#1032904
    (qemu-img can not create libiscsi qcow2_v3 image)
  - Resolves: bz#1048671
    (virtio-net: mac_table change isn't recovered in error state)
  - Resolves: bz#965636
    (streaming with no backing file should not do anything)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-35.el7
changelog:
  - kvm-option-Add-assigned-flag-to-QEMUOptionParameter.patch [bz#1033490]
  - kvm-qcow2-refcount-Snapshot-update-for-zero-clusters.patch [bz#1033490]
  - kvm-qemu-iotests-Snapshotting-zero-clusters.patch [bz#1033490]
  - kvm-block-Image-file-option-amendment.patch [bz#1033490]
  - kvm-qcow2-cache-Empty-cache.patch [bz#1033490]
  - kvm-qcow2-cluster-Expand-zero-clusters.patch [bz#1033490]
  - kvm-qcow2-Save-refcount-order-in-BDRVQcowState.patch [bz#1033490]
  - kvm-qcow2-Implement-bdrv_amend_options.patch [bz#1033490]
  - kvm-qcow2-Correct-bitmap-size-in-zero-expansion.patch [bz#1033490]
  - kvm-qcow2-Free-only-newly-allocated-clusters-on-error.patch [bz#1033490]
  - kvm-qcow2-Add-missing-space-in-error-message.patch [bz#1033490]
  - kvm-qemu-iotest-qcow2-image-option-amendment.patch [bz#1033490]
  - kvm-qemu-iotests-New-test-case-in-061.patch [bz#1033490]
  - kvm-qemu-iotests-Preallocated-zero-clusters-in-061.patch [bz#1033490]
  - Resolves: bz#1033490
    (Cannot upgrade/downgrade qcow2 images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-36.el7
changelog:
  - kvm-Add-support-statement-to-help-output.patch [bz#972773]
  - kvm-__com.redhat_qxl_screendump-add-docs.patch [bz#903910]
  - kvm-vl-Round-memory-sizes-below-2MiB-up-to-2MiB.patch [bz#999836]
  - kvm-seccomp-exit-if-seccomp_init-fails.patch [bz#1044845]
  - kvm-redhat-qemu-kvm.spec-require-python-for-build.patch [bz#1034876]
  - kvm-redhat-qemu-kvm.spec-require-iasl.patch [bz#1034876]
  - kvm-configure-make-iasl-option-actually-work.patch [bz#1034876]
  - kvm-redhat-qemu-kvm.spec-add-cpp-as-build-dependency.patch [bz#1034876]
  - kvm-acpi-build-disable-with-no-acpi.patch [bz#1045386]
  - kvm-ehci-implement-port-wakeup.patch [bz#1039513]
  - kvm-qdev-monitor-Fix-crash-when-device_add-is-called-wit.patch [bz#1026712 bz#1046007]
  - kvm-block-vhdx-improve-error-message-and-.bdrv_check-imp.patch [bz#1035001]
  - kvm-docs-updated-qemu-img-man-page-and-qemu-doc-to-refle.patch [bz#1017650]
  - kvm-enable-pvticketlocks-by-default.patch [bz#1052340]
  - kvm-fix-boot-strict-regressed-in-commit-6ef4716.patch [bz#997817]
  - kvm-vl-make-boot_strict-variable-static-not-used-outside.patch [bz#997817]
  - Resolves: bz#1017650
    (need to update qemu-img man pages on "VHDX" format)
  - Resolves: bz#1026712
    (Qemu core dumpd when boot guest with driver name as "virtio-pci")
  - Resolves: bz#1034876
    (export acpi tables to guests)
  - Resolves: bz#1035001
    (VHDX: journal log should not be replayed by default, but rather via qemu-img check -r all)
  - Resolves: bz#1039513
    (backport remote wakeup for ehci)
  - Resolves: bz#1044845
    (QEMU seccomp sandbox - exit if seccomp_init() fails)
  - Resolves: bz#1045386
    (qemu-kvm: hw/i386/acpi-build.c:135: acpi_get_pm_info: Assertion `obj' failed.)
  - Resolves: bz#1046007
    (qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0)
  - Resolves: bz#1052340
    (pvticketlocks: default on)
  - Resolves: bz#903910
    (RHEL7 does not have equivalent functionality for __com.redhat_qxl_screendump)
  - Resolves: bz#972773
    (RHEL7: Clarify support statement in KVM help)
  - Resolves: bz#997817
    (-boot order and -boot once regressed since RHEL-6)
  - Resolves: bz#999836
    (-m 1 crashes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-37.el7
changelog:
  - kvm-bitmap-use-long-as-index.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_flags-result-is.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-return-vo.patch [bz#997559]
  - kvm-exec-use-accessor-function-to-know-if-memory-is-dirt.patch [bz#997559]
  - kvm-memory-create-function-to-set-a-single-dirty-bit.patch [bz#997559]
  - kvm-exec-drop-useless-if.patch [bz#997559]
  - kvm-exec-create-function-to-get-a-single-dirty-bit.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_is_dirty-return-bool.patch [bz#997559]
  - kvm-memory-all-users-of-cpu_physical_memory_get_dirty-us.patch [bz#997559]
  - kvm-memory-set-single-dirty-flags-when-possible.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-always-di.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_mask_dirty_range-always-c.patch [bz#997559]
  - kvm-memory-use-bit-2-for-migration.patch [bz#997559]
  - kvm-memory-make-sure-that-client-is-always-inside-range.patch [bz#997559]
  - kvm-memory-only-resize-dirty-bitmap-when-memory-size-inc.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_clear_dirty_flag-result-i.patch [bz#997559]
  - kvm-bitmap-Add-bitmap_zero_extend-operation.patch [bz#997559]
  - kvm-memory-split-dirty-bitmap-into-three.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_clear_dirty_flag-i.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_set_dirty-in-its-o.patch [bz#997559]
  - kvm-memory-unfold-cpu_physical_memory_set_dirty_flag.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_get_dirty-the-main-f.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_get_dirty-is-used-as-retu.patch [bz#997559]
  - kvm-memory-s-mask-clear-cpu_physical_memory_mask_dirty_r.patch [bz#997559]
  - kvm-memory-use-find_next_bit-to-find-dirty-bits.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_range-now-uses-.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_clear_dirty_range-now-use.patch [bz#997559]
  - kvm-memory-s-dirty-clean-in-cpu_physical_memory_is_dirty.patch [bz#997559]
  - kvm-memory-make-cpu_physical_memory_reset_dirty-take-a-l.patch [bz#997559]
  - kvm-exec-Remove-unused-global-variable-phys_ram_fd.patch [bz#997559]
  - kvm-memory-cpu_physical_memory_set_dirty_tracking-should.patch [bz#997559]
  - kvm-memory-move-private-types-to-exec.c.patch [bz#997559]
  - kvm-memory-split-cpu_physical_memory_-functions-to-its-o.patch [bz#997559]
  - kvm-memory-unfold-memory_region_test_and_clear.patch [bz#997559]
  - kvm-use-directly-cpu_physical_memory_-api-for-tracki.patch [bz#997559]
  - kvm-refactor-start-address-calculation.patch [bz#997559]
  - kvm-memory-move-bitmap-synchronization-to-its-own-functi.patch [bz#997559]
  - kvm-memory-syncronize-kvm-bitmap-using-bitmaps-operation.patch [bz#997559]
  - kvm-ram-split-function-that-synchronizes-a-range.patch [bz#997559]
  - kvm-migration-synchronize-memory-bitmap-64bits-at-a-time.patch [bz#997559]
  - Resolves: bz#997559
    (Improve live migration bitmap handling)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-38.el7
changelog:
  - kvm-intel-hda-fix-position-buffer.patch [bz#947785]
  - kvm-The-calculation-of-bytes_xfer-in-qemu_put_buffer-is-.patch [bz#1003467]
  - kvm-migration-Fix-rate-limit.patch [bz#1003467]
  - kvm-audio-honor-QEMU_AUDIO_TIMER_PERIOD-instead-of-wakin.patch [bz#1017636]
  - kvm-audio-Lower-default-wakeup-rate-to-100-times-second.patch [bz#1017636]
  - kvm-audio-adjust-pulse-to-100Hz-wakeup-rate.patch [bz#1017636]
  - kvm-pc-Fix-rhel6.-3dnow-3dnowext-compat-bits.patch [bz#918907]
  - kvm-add-firmware-to-machine-options.patch [bz#1038603]
  - kvm-switch-rhel7-machine-types-to-big-bios.patch [bz#1038603]
  - kvm-add-bios-256k.bin-from-seabios-bin-1.7.2.2-10.el7.no.patch [bz#1038603]
  - kvm-pci-fix-pci-bridge-fw-path.patch [bz#1034518]
  - kvm-hw-cannot_instantiate_with_device_add_yet-due-to-poi.patch [bz#1031098]
  - kvm-qdev-Document-that-pointer-properties-kill-device_ad.patch [bz#1031098]
  - kvm-Add-back-no-hpet-but-ignore-it.patch [bz#1044742]
  - Resolves: bz#1003467
    (Backport migration fixes from post qemu 1.6)
  - Resolves: bz#1017636
    (PATCH: fix qemu using 50% host cpu when audio is playing)
  - Resolves: bz#1031098
    (Disable device smbus-eeprom)
  - Resolves: bz#1034518
    (boot order wrong with q35)
  - Resolves: bz#1038603
    (make seabios 256k for rhel7 machine types)
  - Resolves: bz#1044742
    (Cannot create guest on remote RHEL7 host using F20 virt-manager, libvirt's qemu -no-hpet detection is broken)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#947785
    (In rhel6.4 guest  sound recorder doesn't work when  playing audio)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-39.el7
changelog:
  - kvm-Revert-qdev-monitor-Fix-crash-when-device_add-is-cal.patch [bz#669524]
  - kvm-Revert-qdev-Do-not-let-the-user-try-to-device_add-wh.patch [bz#669524]
  - kvm-qdev-monitor-Clean-up-qdev_device_add-variable-namin.patch [bz#669524]
  - kvm-qdev-monitor-Fix-crash-when-device_add-is-called.2.patch.patch [bz#669524]
  - kvm-qdev-monitor-Avoid-qdev-as-variable-name.patch [bz#669524]
  - kvm-qdev-monitor-Inline-qdev_init-for-device_add.patch [bz#669524]
  - kvm-qdev-Do-not-let-the-user-try-to-device_add-when-it.2.patch.patch [bz#669524]
  - kvm-qdev-monitor-Avoid-device_add-crashing-on-non-device.patch [bz#669524]
  - kvm-qdev-monitor-Improve-error-message-for-device-nonexi.patch [bz#669524]
  - kvm-exec-change-well-known-physical-sections-to-macros.patch [bz#1003535]
  - kvm-exec-separate-sections-and-nodes-per-address-space.patch [bz#1003535]
  - Resolves: bz#1003535
    (qemu-kvm core dump when boot vm with more than 32 virtio disks/nics)
  - Resolves: bz#669524
    (Confusing error message from -device <unknown dev>)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-40.el7
changelog:
  - kvm-avoid-a-bogus-COMPLETED-CANCELLED-transition.patch [bz#1053699]
  - kvm-introduce-MIG_STATE_CANCELLING-state.patch [bz#1053699]
  - kvm-vvfat-use-bdrv_new-to-allocate-BlockDriverState.patch [bz#1041301]
  - kvm-block-implement-reference-count-for-BlockDriverState.patch [bz#1041301]
  - kvm-block-make-bdrv_delete-static.patch [bz#1041301]
  - kvm-migration-omit-drive-ref-as-we-have-bdrv_ref-now.patch [bz#1041301]
  - kvm-xen_disk-simplify-blk_disconnect-with-refcnt.patch [bz#1041301]
  - kvm-nbd-use-BlockDriverState-refcnt.patch [bz#1041301]
  - kvm-block-use-BDS-ref-for-block-jobs.patch [bz#1041301]
  - kvm-block-Make-BlockJobTypes-const.patch [bz#1041301]
  - kvm-blockjob-rename-BlockJobType-to-BlockJobDriver.patch [bz#1041301]
  - kvm-qapi-Introduce-enum-BlockJobType.patch [bz#1041301]
  - kvm-qapi-make-use-of-new-BlockJobType.patch [bz#1041301]
  - kvm-mirror-Don-t-close-target.patch [bz#1041301]
  - kvm-mirror-Move-base-to-MirrorBlockJob.patch [bz#1041301]
  - kvm-block-Add-commit_active_start.patch [bz#1041301]
  - kvm-commit-Support-commit-active-layer.patch [bz#1041301]
  - kvm-qemu-iotests-prefill-some-data-to-test-image.patch [bz#1041301]
  - kvm-qemu-iotests-Update-test-cases-for-commit-active.patch [bz#1041301]
  - kvm-commit-Remove-unused-check.patch [bz#1041301]
  - kvm-blockdev-use-bdrv_getlength-in-qmp_drive_mirror.patch [bz#921890]
  - kvm-qemu-iotests-make-assert_no_active_block_jobs-common.patch [bz#921890]
  - kvm-block-drive-mirror-Check-for-NULL-backing_hd.patch [bz#921890]
  - kvm-qemu-iotests-Extend-041-for-unbacked-mirroring.patch [bz#921890]
  - kvm-qapi-schema-Update-description-for-NewImageMode.patch [bz#921890]
  - kvm-block-drive-mirror-Reuse-backing-HD-for-sync-none.patch [bz#921890]
  - kvm-qemu-iotests-Fix-test-041.patch [bz#921890]
  - kvm-scsi-bus-fix-transfer-length-and-direction-for-VERIF.patch [bz#1035644]
  - kvm-scsi-disk-fix-VERIFY-emulation.patch [bz#1035644]
  - kvm-block-ensure-bdrv_drain_all-works-during-bdrv_delete.patch [bz#1041301]
  - kvm-use-recommended-max-vcpu-count.patch [bz#998708]
  - kvm-pc-Create-pc_compat_rhel-functions.patch [bz#1049706]
  - kvm-pc-Enable-x2apic-by-default-on-more-recent-CPU-model.patch [bz#1049706]
  - kvm-Build-all-subpackages-for-RHEV.patch [bz#1007204]
  - Resolves: bz#1007204
    (qemu-img-rhev  qemu-kvm-rhev-tools are not built for qemu-kvm-1.5.3-3.el7)
  - Resolves: bz#1035644
    (rhel7.0host + windows guest + virtio-win + 'chkdsk' in the guest gives qemu assertion in scsi_dma_complete)
  - Resolves: bz#1041301
    (live snapshot merge (commit) of the active layer)
  - Resolves: bz#1049706
    (MIss CPUID_EXT_X2APIC in Westmere cpu model)
  - Resolves: bz#1053699
    (Backport Cancelled race condition fixes)
  - Resolves: bz#921890
    (Core dump when block mirror with "sync" is "none" and mode is "absolute-paths")
  - Resolves: bz#998708
    (qemu-kvm: maximum vcpu should be recommended maximum)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-41.el7
changelog:
  - kvm-help-add-id-suboption-to-iscsi.patch [bz#1019221]
  - kvm-scsi-disk-add-UNMAP-limits-to-block-limits-VPD-page.patch [bz#1037503]
  - kvm-qdev-Fix-32-bit-compilation-in-print_size.patch [bz#1034876]
  - kvm-qdev-Use-clz-in-print_size.patch [bz#1034876]
  - Resolves: bz#1019221
    (Iscsi miss id sub-option in help output)
  - Resolves: bz#1034876
    (export acpi tables to guests)
  - Resolves: bz#1037503
    (fix thin provisioning support for block device backends)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-43.el7
changelog:
  - kvm-piix-gigabyte-alignment-for-ram.patch [bz#1026548]
  - kvm-pc_piix-document-gigabyte_align.patch [bz#1026548]
  - kvm-q35-gigabyle-alignment-for-ram.patch [bz#1026548]
  - kvm-virtio-bus-remove-vdev-field.patch [bz#983344]
  - kvm-virtio-pci-remove-vdev-field.patch [bz#983344]
  - kvm-virtio-bus-cleanup-plug-unplug-interface.patch [bz#983344]
  - kvm-virtio-blk-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-serial-switch-exit-callback-to-VirtioDeviceCl.patch [bz#983344]
  - kvm-virtio-net-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-scsi-switch-exit-callback-to-VirtioDeviceClas.patch [bz#983344]
  - kvm-virtio-balloon-switch-exit-callback-to-VirtioDeviceC.patch [bz#983344]
  - kvm-virtio-rng-switch-exit-callback-to-VirtioDeviceClass.patch [bz#983344]
  - kvm-virtio-pci-add-device_unplugged-callback.patch [bz#983344]
  - kvm-block-use-correct-filename-for-error-report.patch [bz#1051438]
  - Resolves: bz#1026548
    (i386: pc: align gpa<->hpa on 1GB boundary)
  - Resolves: bz#1051438
    (Error message contains garbled characters when unable to open image due to bad permissions (permission denied).)
  - Resolves: bz#983344
    (QEMU core dump and host will reboot when do hot-unplug a virtio-blk disk which use  the switch behind switch)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-44.el7
changelog:
  - kvm-Partially-revert-rhel-Drop-cfi.pflash01-and-isa-ide-.patch [bz#1032346]
  - kvm-Revert-pc-Disable-the-use-flash-device-for-BIOS-unle.patch [bz#1032346]
  - kvm-memory-Replace-open-coded-memory_region_is_romd.patch [bz#1032346]
  - kvm-memory-Rename-readable-flag-to-romd_mode.patch [bz#1032346]
  - kvm-isapc-Fix-non-KVM-qemu-boot-read-write-memory-for-is.patch [bz#1032346]
  - kvm-add-kvm_readonly_mem_enabled.patch [bz#1032346]
  - kvm-support-using-KVM_MEM_READONLY-flag-for-regions.patch [bz#1032346]
  - kvm-pc_sysfw-allow-flash-pflash-memory-to-be-used-with-K.patch [bz#1032346]
  - kvm-fix-double-free-the-memslot-in-kvm_set_phys_mem.patch [bz#1032346]
  - kvm-sysfw-remove-read-only-pc_sysfw_flash_vs_rom_bug_com.patch [bz#1032346]
  - kvm-pc_sysfw-remove-the-rom_only-property.patch [bz#1032346]
  - kvm-pc_sysfw-do-not-make-it-a-device-anymore.patch [bz#1032346]
  - kvm-hw-i386-pc_sysfw-support-two-flash-drives.patch [bz#1032346]
  - kvm-i440fx-test-qtest_start-should-be-paired-with-qtest_.patch [bz#1032346]
  - kvm-i440fx-test-give-each-GTest-case-its-own-qtest.patch [bz#1032346]
  - kvm-i440fx-test-generate-temporary-firmware-blob.patch [bz#1032346]
  - kvm-i440fx-test-verify-firmware-under-4G-and-1M-both-bio.patch [bz#1032346]
  - kvm-piix-fix-32bit-pci-hole.patch [bz#1032346]
  - kvm-qapi-Add-backing-to-BlockStats.patch [bz#1041564]
  - kvm-pc-Disable-RDTSCP-unconditionally-on-rhel6.-machine-.patch [bz#918907]
  - kvm-pc-Disable-RDTSCP-on-AMD-CPU-models.patch [bz#1056428 bz#874400]
  - kvm-block-add-.bdrv_reopen_prepare-stub-for-iscsi.patch [bz#1030301]
  - Resolves: bz#1030301
    (qemu-img can not merge live snapshot to backing file(r/w backing file via libiscsi))
  - Resolves: bz#1032346
    (basic OVMF support (non-volatile UEFI variables in flash, and fixup for ACPI tables))
  - Resolves: bz#1041564
    ([NFR] qemu: Returning the watermark for all the images opened for writing)
  - Resolves: bz#1056428
    ("rdtscp" flag defined on Opteron_G5 model and cann't be exposed to guest)
  - Resolves: bz#874400
    ("rdtscp" flag defined on Opteron_G5 model and cann't be exposed to guest)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-45.el7
changelog:
  - kvm-vfio-pci-Fail-initfn-on-DMA-mapping-errors.patch [bz#1044815]
  - kvm-vfio-Destroy-memory-regions.patch [bz#1052030]
  - kvm-docs-qcow2-compat-1.1-is-now-the-default.patch [bz#1048092]
  - kvm-hda-codec-disable-streams-on-reset.patch [bz#947812]
  - kvm-QEMUBH-make-AioContext-s-bh-re-entrant.patch [bz#1009297]
  - kvm-qxl-replace-pipe-signaling-with-bottom-half.patch [bz#1009297]
  - Resolves: bz#1009297
    (RHEL7.0 guest gui can not be used in dest host after migration)
  - Resolves: bz#1044815
    (vfio initfn succeeds even if IOMMU mappings fail)
  - Resolves: bz#1048092
    (manpage of qemu-img contains error statement about compat option)
  - Resolves: bz#1052030
    (src qemu-kvm core dump after hotplug/unhotplug GPU device and do local migration)
  - Resolves: bz#947812
    (There's a shot voice after  'system_reset'  during playing music inside rhel6 guest w/ intel-hda device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-46.el7
changelog:
  - kvm-block-fix-backing-file-segfault.patch [bz#748906]
  - kvm-block-Move-initialisation-of-BlockLimits-to-bdrv_ref.patch [bz#748906]
  - kvm-raw-Fix-BlockLimits-passthrough.patch [bz#748906]
  - kvm-block-Inherit-opt_transfer_length.patch [bz#748906]
  - kvm-block-Update-BlockLimits-when-they-might-have-change.patch [bz#748906]
  - kvm-qemu_memalign-Allow-small-alignments.patch [bz#748906]
  - kvm-block-Detect-unaligned-length-in-bdrv_qiov_is_aligne.patch [bz#748906]
  - kvm-block-Don-t-use-guest-sector-size-for-qemu_blockalig.patch [bz#748906]
  - kvm-block-rename-buffer_alignment-to-guest_block_size.patch [bz#748906]
  - kvm-raw-Probe-required-direct-I-O-alignment.patch [bz#748906]
  - kvm-block-Introduce-bdrv_aligned_preadv.patch [bz#748906]
  - kvm-block-Introduce-bdrv_co_do_preadv.patch [bz#748906]
  - kvm-block-Introduce-bdrv_aligned_pwritev.patch [bz#748906]
  - kvm-block-write-Handle-COR-dependency-after-I-O-throttli.patch [bz#748906]
  - kvm-block-Introduce-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-block-Switch-BdrvTrackedRequest-to-byte-granularity.patch [bz#748906]
  - kvm-block-Allow-waiting-for-overlapping-requests-between.patch [bz#748906]
  - kvm-block-use-DIV_ROUND_UP-in-bdrv_co_do_readv.patch [bz#748906]
  - kvm-block-Make-zero-after-EOF-work-with-larger-alignment.patch [bz#748906]
  - kvm-block-Generalise-and-optimise-COR-serialisation.patch [bz#748906]
  - kvm-block-Make-overlap-range-for-serialisation-dynamic.patch [bz#748906]
  - kvm-block-Fix-32-bit-truncation-in-mark_request_serialis.patch [bz#748906]
  - kvm-block-Allow-wait_serialising_requests-at-any-point.patch [bz#748906]
  - kvm-block-Align-requests-in-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-lock-Fix-memory-leaks-in-bdrv_co_do_pwritev.patch [bz#748906]
  - kvm-block-Assert-serialisation-assumptions-in-pwritev.patch [bz#748906]
  - kvm-block-Change-coroutine-wrapper-to-byte-granularity.patch [bz#748906]
  - kvm-block-Make-bdrv_pread-a-bdrv_prwv_co-wrapper.patch [bz#748906]
  - kvm-block-Make-bdrv_pwrite-a-bdrv_prwv_co-wrapper.patch [bz#748906]
  - kvm-iscsi-Set-bs-request_alignment.patch [bz#748906]
  - kvm-blkdebug-Make-required-alignment-configurable.patch [bz#748906]
  - kvm-blkdebug-Don-t-leak-bs-file-on-failure.patch [bz#748906]
  - kvm-qemu-io-New-command-sleep.patch [bz#748906]
  - kvm-qemu-iotests-Filter-out-qemu-io-prompt.patch [bz#748906]
  - kvm-qemu-iotests-Test-pwritev-RMW-logic.patch [bz#748906]
  - kvm-block-bdrv_aligned_pwritev-Assert-overlap-range.patch [bz#748906]
  - kvm-block-Don-t-call-ROUND_UP-with-negative-values.patch [bz#748906]
  - Resolves: bz#748906
    (qemu fails on disk with 4k sectors and cache=off)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-47.el7
changelog:
  - kvm-seccomp-add-mkdir-and-fchmod-to-the-whitelist.patch [bz#1026314]
  - kvm-seccomp-add-some-basic-shared-memory-syscalls-to-the.patch [bz#1026314]
  - kvm-scsi-Support-TEST-UNIT-READY-in-the-dummy-LUN0.patch [bz#1004143]
  - kvm-usb-add-vendor-request-defines.patch [bz#1039530]
  - kvm-usb-move-usb_-hi-lo-helpers-to-header-file.patch [bz#1039530]
  - kvm-usb-add-support-for-microsoft-os-descriptors.patch [bz#1039530]
  - kvm-usb-add-microsoft-os-descriptors-compat-property.patch [bz#1039530]
  - kvm-usb-hid-add-microsoft-os-descriptor-support.patch [bz#1039530]
  - kvm-configure-add-option-to-disable-fstack-protect.patch [bz#1044182]
  - kvm-exec-always-use-MADV_DONTFORK.patch [bz#1004197]
  - kvm-pc-Save-size-of-RAM-below-4GB.patch [bz#1048080]
  - kvm-acpi-Fix-PCI-hole-handling-on-build_srat.patch [bz#1048080]
  - kvm-Add-check-for-cache-size-smaller-than-page-size.patch [bz#1017096]
  - kvm-XBZRLE-cache-size-should-not-be-larger-than-guest-me.patch [bz#1047448]
  - kvm-Don-t-abort-on-out-of-memory-when-creating-page-cach.patch [bz#1047448]
  - kvm-Don-t-abort-on-memory-allocation-error.patch [bz#1047448]
  - kvm-Set-xbzrle-buffers-to-NULL-after-freeing-them-to-avo.patch [bz#1038540]
  - kvm-migration-fix-free-XBZRLE-decoded_buf-wrong.patch [bz#1038540]
  - kvm-block-resize-backing-file-image-during-offline-commi.patch [bz#1047254]
  - kvm-block-resize-backing-image-during-active-layer-commi.patch [bz#1047254]
  - kvm-block-update-block-commit-documentation-regarding-im.patch [bz#1047254]
  - kvm-block-Fix-bdrv_commit-return-value.patch [bz#1047254]
  - kvm-block-remove-QED-.bdrv_make_empty-implementation.patch [bz#1047254]
  - kvm-block-remove-qcow2-.bdrv_make_empty-implementation.patch [bz#1047254]
  - kvm-qemu-progress-Drop-unused-include.patch [bz#997878]
  - kvm-qemu-progress-Fix-progress-printing-on-SIGUSR1.patch [bz#997878]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#997878]
  - Resolves: bz#1004143
    ("test unit ready failed" on LUN 0 delays boot when a virtio-scsi target does not have any disk on LUN 0)
  - Resolves: bz#1004197
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#1017096
    (Fail to migrate while the size of migrate-compcache less then 4096)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1038540
    (qemu-kvm aborted while cancel migration then restart it (with page delta compression))
  - Resolves: bz#1039530
    (add support for microsoft os descriptors)
  - Resolves: bz#1044182
    (Relax qemu-kvm stack protection to -fstack-protector-strong)
  - Resolves: bz#1047254
    (qemu-img failed to commit image)
  - Resolves: bz#1047448
    (qemu-kvm core  dump in src host when do migration with "migrate_set_capability xbzrle on and migrate_set_cache_size 10000G")
  - Resolves: bz#1048080
    (Qemu-kvm NUMA emulation failed)
  - Resolves: bz#997878
    (Kill -SIGUSR1 `pidof qemu-img convert` can not get progress of qemu-img)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-48.el7
changelog:
  - kvm-spec-disable-qom-cast-debug.patch [bz#1063942]
  - kvm-fix-guest-physical-bits-to-match-host-to-go-beyond-1.patch [bz#989677]
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1065225]
  - Resolves: bz#1063942
    (configure qemu-kvm with --disable-qom-cast-debug)
  - Resolves: bz#1065225
    (QMP socket breaks on unexpected close)
  - Resolves: bz#989677
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-49.el7
changelog:
  - kvm-xhci-add-support-for-suspend-resume.patch [bz#1012365]
  - kvm-qcow2-remove-n_start-and-n_end-of-qcow2_alloc_cluste.patch [bz#1049176]
  - kvm-qcow2-fix-offset-overflow-in-qcow2_alloc_clusters_at.patch [bz#1049176]
  - kvm-qcow2-check-for-NULL-l2meta.patch [bz#1055848]
  - kvm-qemu-iotests-add-test-for-qcow2-preallocation-with-d.patch [bz#1055848]
  - Resolves: bz#1012365
    (xhci usb storage lost in guest after wakeup from S3)
  - Resolves: bz#1049176
    (qemu-img core dump when using "-o preallocation=metadata,cluster_size=2048k" to create image of libiscsi lun)
  - Resolves: bz#1055848
    (qemu-img core dumped when cluster size is larger than the default value with opreallocation=metadata specified)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-50.el7
changelog:
  - kvm-mempath-prefault-fix-off-by-one-error.patch [bz#1069039]
  - kvm-qemu-option-has_help_option-and-is_valid_option_list.patch [bz#1065873]
  - kvm-qemu-img-create-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-convert-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-amend-Support-multiple-o-options.patch [bz#1065873]
  - kvm-qemu-img-Allow-o-help-with-incomplete-argument-list.patch [bz#1065873]
  - kvm-qemu-iotests-Check-qemu-img-command-line-parsing.patch [bz#1065873]
  - Resolves: bz#1065873
    (qemu-img silently ignores options with multiple -o parameters)
  - Resolves: bz#1069039
    (-mem-prealloc option behaviour is opposite to expected)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-51.el7
changelog:
  - kvm-qmp-access-the-local-QemuOptsLists-for-drive-option.patch [bz#1026184]
  - kvm-qxl-add-sanity-check.patch [bz#751937]
  - kvm-Fix-two-XBZRLE-corruption-issues.patch [bz#1063417]
  - kvm-qdev-monitor-set-DeviceState-opts-before-calling-rea.patch [bz#1037956]
  - kvm-vfio-blacklist-loading-of-unstable-roms.patch [bz#1037956]
  - kvm-block-Set-block-filename-sizes-to-PATH_MAX-instead-o.patch [bz#1072339]
  - Resolves: bz#1026184
    (QMP: querying -drive option returns a NULL parameter list)
  - Resolves: bz#1037956
    (bnx2x: boot one guest to do vfio-pci with all PFs assigned in same group meet QEMU segmentation fault (Broadcom BCM57810 card))
  - Resolves: bz#1063417
    (google stressapptest vs Migration)
  - Resolves: bz#1072339
    (RHEV: Cannot start VMs that have more than 23 snapshots.)
  - Resolves: bz#751937
    (qxl triggers assert during iofuzz test)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-52.el7
changelog:
  - kvm-target-i386-Move-hyperv_-static-globals-to-X86CPU.patch [bz#1004773]
  - kvm-Fix-uninitialized-cpuid_data.patch [bz#1057173]
  - kvm-fix-coexistence-of-KVM-and-Hyper-V-leaves.patch [bz#1004773]
  - kvm-make-availability-of-Hyper-V-enlightenments-depe.patch [bz#1004773]
  - kvm-make-hyperv-hypercall-and-guest-os-id-MSRs-migra.patch [bz#1004773]
  - kvm-make-hyperv-vapic-assist-page-migratable.patch [bz#1004773]
  - kvm-target-i386-Convert-hv_relaxed-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-hv_vapic-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-hv_spinlocks-to-static-property.patch [bz#1057173]
  - kvm-target-i386-Convert-check-and-enforce-to-static-prop.patch [bz#1004773]
  - kvm-target-i386-Cleanup-foo-feature-handling.patch [bz#1057173]
  - kvm-add-support-for-hyper-v-timers.patch [bz#1057173]
  - Resolves: bz#1004773
    (Hyper-V guest OS id and hypercall MSRs not migrated)
  - Resolves: bz#1057173
    (KVM Hyper-V Enlightenment - New feature - hv-time (QEMU))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-53.el7
changelog:
  - kvm-dataplane-Fix-startup-race.patch [bz#1069541]
  - kvm-QMP-Relax-__com.redhat_drive_add-parameter-checking.patch [bz#1057471]
  - kvm-all-exit-in-case-max-vcpus-exceeded.patch [bz#993429]
  - kvm-block-gluster-code-movements-state-storage-changes.patch [bz#1031526]
  - kvm-block-gluster-add-reopen-support.patch [bz#1031526]
  - kvm-virtio-net-add-feature-bit-for-any-header-s-g.patch [bz#990989]
  - kvm-spec-Add-README.rhel6-gpxe-source.patch [bz#1073774]
  - kvm-pc-Add-RHEL6-e1000-gPXE-image.patch [bz#1073774]
  - kvm-loader-rename-in_ram-has_mr.patch [bz#1064018]
  - kvm-pc-avoid-duplicate-names-for-ROM-MRs.patch [bz#1064018]
  - kvm-qemu-img-convert-Fix-progress-output.patch [bz#1073728]
  - kvm-qemu-iotests-Test-progress-output-for-conversion.patch [bz#1073728]
  - kvm-iscsi-Use-bs-sg-for-everything-else-than-disks.patch [bz#1067784]
  - kvm-block-Fix-bs-request_alignment-assertion-for-bs-sg-1.patch [bz#1067784]
  - kvm-qemu_file-use-fwrite-correctly.patch [bz#1005103]
  - kvm-qemu_file-Fix-mismerge-of-use-fwrite-correctly.patch [bz#1005103]
  - Resolves: bz#1005103
    (Migration should fail when migrate guest offline to a file which is specified to a readonly directory.)
  - Resolves: bz#1031526
    (Can not commit snapshot when disk is using glusterfs:native backend)
  - Resolves: bz#1057471
    (fail to do hot-plug with "discard = on" with "Invalid parameter 'discard'" error)
  - Resolves: bz#1064018
    (abort from conflicting genroms)
  - Resolves: bz#1067784
    (qemu-kvm: block.c:850: bdrv_open_common: Assertion `bs->request_alignment != 0' failed. Aborted (core dumped))
  - Resolves: bz#1069541
    (Segmentation fault when boot guest with dataplane=on)
  - Resolves: bz#1073728
    (progress bar doesn't display when converting with -p)
  - Resolves: bz#1073774
    (e1000 ROM cause migrate fail  from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#990989
    (backport inline header virtio-net optimization)
  - Resolves: bz#993429
    (kvm: test maximum number of vcpus supported (rhel7))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-54.el7
changelog:
  - kvm-qdev-monitor-Set-properties-after-parent-is-assigned.patch [bz#1046248]
  - kvm-block-Update-image-size-in-bdrv_invalidate_cache.patch [bz#1048575]
  - kvm-qcow2-Keep-option-in-qcow2_invalidate_cache.patch [bz#1048575]
  - kvm-qcow2-Check-bs-drv-in-copy_sectors.patch [bz#1048575]
  - kvm-block-bs-drv-may-be-NULL-in-bdrv_debug_resume.patch [bz#1048575]
  - kvm-iotests-Test-corruption-during-COW-request.patch [bz#1048575]
  - Resolves: bz#1046248
    (qemu-kvm crash when send "info qtree" after hot plug a device with invalid addr)
  - Resolves: bz#1048575
    (Segmentation fault occurs after migrate guest(use scsi disk and add stress) to des machine)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-55.el7
changelog:
  - kvm-scsi-Change-scsi-sense-buf-size-to-252.patch [bz#1058173]
  - kvm-scsi-Fix-migration-of-scsi-sense-data.patch [bz#1058173]
  - Resolves: bz#1058173
    (qemu-kvm core dump booting guest with scsi-generic disk attached when using built-in iscsi driver)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-56.el7
changelog:
  - kvm-configure-Fix-bugs-preventing-Ceph-inclusion.patch [bz#1078809]
  - Resolves: bz#1078809
    (can not boot qemu-kvm-rhev with rbd image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-57.el7
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078308]
  - Resolves: bz#1078308
    (EMBARGOED CVE-2014-0150 qemu: virtio-net: fix guest-triggerable buffer overrun [rhel-7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-58.el7
changelog:
  - kvm-pc-Use-cpu64-rhel6-CPU-model-by-default-on-rhel6-mac.patch [bz#1080170]
  - kvm-target-i386-Copy-cpu64-rhel6-definition-into-qemu64.patch [bz#1078607 bz#1080170]
  - Resolves: bz#1080170
    (intel 82576 VF not work in windows 2008 x86 - Code 12 [TestOnly])
  - Resolves: bz#1080170
    (Default CPU model for rhel6.* machine-types is different from RHEL-6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-59.el7
changelog:
  - kvm-qemu-iotests-add-.-check-cloop-support.patch [bz#1066691]
  - kvm-qemu-iotests-add-cloop-input-validation-tests.patch [bz#1066691]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079455]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079320]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079455]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079455]
  - kvm-size-off-by-one.patch [bz#1066691]
  - kvm-qemu-iotests-Support-for-bochs-format.patch [bz#1066691]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1066691]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079339]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079320]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079315]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1066691]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079455]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079315]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079455]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079346]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079455]
  - kvm-qcow2-Check-header_length-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079455]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1066691]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079455]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079455]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1066691]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079339]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079320]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1066691]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1066691]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1066691]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079320]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1066691]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1066691]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1066691]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1066691]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079325]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1066691]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079325]
  - kvm-block-vdi-bounds-check-qemu-io-tests.patch [bz#1066691]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079320]
  - kvm-qcow2-Fix-copy_sectors-with-VM-state.patch [bz#1066691]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079333]
  - kvm-qcow2-Fix-L1-allocation-size-in-qcow2_snapshot_load_.patch [bz#1079325]
  - kvm-qcow2-Check-maximum-L1-size-in-qcow2_snapshot_load_t.patch [bz#1079320]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1066691]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079320]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079315]
  - kvm-fix-machine-check-propagation.patch [bz#740107]
  - Resolves: bz#1066691
    (qemu-kvm: include leftover patches from block layer security audit)
  - Resolves: bz#1079315
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-7.0])
  - Resolves: bz#1079320
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-7.0])
  - Resolves: bz#1079325
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-7.0])
  - Resolves: bz#1079333
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-7.0])
  - Resolves: bz#1079339
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-7.0])
  - Resolves: bz#1079346
    (CVE-2014-0148 qemu-kvm: Qemu: vhdx: bounds checking for block_size and logical_sector_size [rhel-7.0])
  - Resolves: bz#1079455
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-7.0])
  - Resolves: bz#740107
    ([Hitachi 7.0 FEAT]  KVM: MCA Recovery for KVM guest OS memory)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-60.el7
changelog:
  - kvm-qcow2-fix-dangling-refcount-table-entry.patch [bz#1081793]
  - kvm-qcow2-link-all-L2-meta-updates-in-preallocate.patch [bz#1081393]
  - Resolves: bz#1081393
    (qemu-img will prompt that 'leaked clusters were found' while creating images with '-o preallocation=metadata,cluster_size<=1024')
  - Resolves: bz#1081793
    (qemu-img core dumped when creating a qcow2 image base on block device(iscsi or libiscsi))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-61.el7
changelog:
  - kvm-iscsi-fix-indentation.patch [bz#1083413]
  - kvm-iscsi-correctly-propagate-errors-in-iscsi_open.patch [bz#1083413]
  - kvm-block-iscsi-query-for-supported-VPD-pages.patch [bz#1083413]
  - kvm-block-iscsi-fix-segfault-if-writesame-fails.patch [bz#1083413]
  - kvm-iscsi-recognize-invalid-field-ASCQ-from-WRITE-SAME-c.patch [bz#1083413]
  - kvm-iscsi-ignore-flushes-on-scsi-generic-devices.patch [bz#1083413]
  - kvm-iscsi-always-query-max-WRITE-SAME-length.patch [bz#1083413]
  - kvm-iscsi-Don-t-set-error-if-already-set-in-iscsi_do_inq.patch [bz#1083413]
  - kvm-iscsi-Remember-to-set-ret-for-iscsi_open-in-error-ca.patch [bz#1083413]
  - kvm-qemu_loadvm_state-shadow-SeaBIOS-for-VM-incoming-fro.patch [bz#1027565]
  - kvm-uhci-UNfix-irq-routing-for-RHEL-6-machtypes-RHEL-onl.patch [bz#1085701]
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087980]
  - Resolves: bz#1027565
    (fail to reboot guest after migration from RHEL6.5 host to RHEL7.0 host)
  - Resolves: bz#1083413
    (qemu-kvm: iSCSI: Failure. SENSE KEY:ILLEGAL_REQUEST(5) ASCQ:INVALID_FIELD_IN_CDB(0x2400))
  - Resolves: bz#1085701
    (Guest hits call trace migrate from RHEL6.5 to RHEL7.0 host with -M 6.1 & balloon & uhci device)
  - Resolves: bz#1087980
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-62.el7
changelog:
  - kvm-pc-add-hot_add_cpu-callback-to-all-machine-types.patch [bz#1094285]
  - Resolves: bz#1094285
    (Hot plug CPU not working with RHEL6  machine types running on RHEL7 host.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-63.el7
changelog:
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1038914]
  - kvm-qcow2-Free-preallocated-zero-clusters.patch [bz#1052093]
  - kvm-qemu-iotests-Discard-preallocated-zero-clusters.patch [bz#1052093]
  - kvm-XBZRLE-Fix-qemu-crash-when-resize-the-xbzrle-cache.patch [bz#1066338]
  - kvm-Provide-init-function-for-ram-migration.patch [bz#1066338]
  - kvm-Init-the-XBZRLE.lock-in-ram_mig_init.patch [bz#1066338]
  - kvm-XBZRLE-Fix-one-XBZRLE-corruption-issues.patch [bz#1066338]
  - kvm-Count-used-RAMBlock-pages-for-migration_dirty_pages.patch [bz#1074913]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095678]
  - kvm-virtio-net-out-of-bounds-buffer-write-on-invalid-sta.patch [bz#1095690]
  - kvm-virtio-net-out-of-bounds-buffer-write-on-load.patch [bz#1095685]
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095695]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095738]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095742]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095783]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095766]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095766]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095747]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_l2.patch [bz#1095747]
  - kvm-vmstate-reduce-code-duplication.patch [bz#1095716]
  - kvm-vmstate-add-VMS_MUST_EXIST.patch [bz#1095716]
  - kvm-vmstate-add-VMSTATE_VALIDATE.patch [bz#1095716]
  - kvm-hpet-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095707]
  - kvm-hw-pci-pcie_aer.c-fix-buffer-overruns-on-invalid-sta.patch [bz#1095716]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096829]
  - kvm-qcow-correctly-propagate-errors.patch [bz#1097230]
  - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097230]
  - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097230]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097230]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097237]
  - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097237]
  - Resolves: bz#1038914
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)
  - Resolves: bz#1052093
    (qcow2 corruptions (leaked clusters after installing a rhel7 guest using virtio_scsi))
  - Resolves: bz#1066338
    (Reduce the migrate cache size during migration causes qemu segment fault)
  - Resolves: bz#1074913
    (migration can not finish with 1024k 'remaining ram' left after hotunplug 4 nics)
  - Resolves: bz#1095678
    (CVE-2013-4148 qemu-kvm: qemu: virtio-net: buffer overflow on invalid state load [rhel-7.1])
  - Resolves: bz#1095685
    (CVE-2013-4149 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on load [rhel-7.1])
  - Resolves: bz#1095690
    (CVE-2013-4150 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on invalid state load [rhel-7.1])
  - Resolves: bz#1095695
    (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-7.1])
  - Resolves: bz#1095707
    (CVE-2013-4527 qemu-kvm: qemu: hpet: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095716
    (CVE-2013-4529 qemu-kvm: qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095738
    (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-7.1])
  - Resolves: bz#1095742
    (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-7.1])
  - Resolves: bz#1095747
    (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-7.1])
  - Resolves: bz#1095766
    (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-7.1])
  - Resolves: bz#1095783
    (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-7.1])
  - Resolves: bz#1096829
    (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-7.1])
  - Resolves: bz#1097230
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-7.1])
  - Resolves: bz#1097237
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-64.el7
changelog:
  - kvm-zero-initialize-KVM_SET_GSI_ROUTING-input.patch [bz#1098976]
  - kvm-skip-system-call-when-msi-route-is-unchanged.patch [bz#1098976]
  - Resolves: bz#1098976
    (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-65.el7
changelog:
  - kvm-Allow-mismatched-virtio-config-len.patch [bz#1113009]
  - Resolves: bz#1113009
    (Migration failed with virtio-blk from RHEL6.5.0 host to RHEL7.0 host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-66.el7
changelog:
  - kvm-xhci-fix-overflow-in-usb_xhci_post_load.patch [bz#1074219]
  - kvm-migration-qmp_migrate-keep-working-after-syntax-erro.patch [bz#1086598]
  - kvm-seccomp-add-shmctl-mlock-and-munlock-to-the-syscall-.patch [bz#1026314]
  - kvm-exit-when-no-kvm-and-vcpu-count-160.patch [bz#1076326]
  - kvm-Disallow-outward-migration-while-awaiting-incoming-m.patch [bz#1086987]
  - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#1088695 bz#1093983]
  - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097020]
  - kvm-aio-Fix-use-after-free-in-cancellation-path.patch [bz#1095877]
  - kvm-scsi-disk-Improve-error-messager-if-can-t-get-versio.patch [bz#1021788]
  - kvm-scsi-Improve-error-messages-more.patch [bz#1021788]
  - kvm-memory-Don-t-call-memory_region_update_coalesced_ran.patch [bz#1096645]
  - kvm-kvmclock-Ensure-time-in-migration-never-goes-backwar.patch [bz#1098602]
  - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock_cu.patch [bz#1098602]
  - Resolves: bz#1021788
    (the error message "scsi generic interface too old" is wrong more often than not)
  - Resolves: bz#1026314
    (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1074219
    (qemu core dump when install a RHEL.7 guest(xhci) with migration)
  - Resolves: bz#1076326
    (qemu-kvm does not quit when booting guest w/ 161 vcpus and "-no-kvm")
  - Resolves: bz#1086598
    (migrate_cancel wont take effect on previouly wrong migrate -d cmd)
  - Resolves: bz#1086987
    (src qemu crashed when starting migration in inmigrate mode)
  - Resolves: bz#1088695
    (there are four "gluster" in qemu-img supported format list)
  - Resolves: bz#1093983
    (there are three "nbd" in qemu-img supported format list)
  - Resolves: bz#1095877
    (segmentation fault in qemu-kvm due to use-after-free of a SCSIGenericReq (host device pass-through))
  - Resolves: bz#1096645
    ([FJ7.0 Bug] RHEL7.0 guest attaching 150 or more virtio-blk disks fails to start up)
  - Resolves: bz#1097020
    ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images)
  - Resolves: bz#1098602
    (kvmclock: Ensure time in migration never goes backward (backport))


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-67.el7
changelog:
  - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990724]
  - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118707]
  - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118707]
  - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118707]
  - kvm-aio-fix-qemu_bh_schedule-bh-ctx-race-condition.patch [bz#1116728]
  - kvm-block-Improve-driver-whitelist-checks.patch [bz#999789]
  - kvm-vmdk-Fix-format-specific-information-create-type-for.patch [bz#1029271]
  - kvm-virtio-pci-Report-an-error-when-msix-vectors-init-fa.patch [bz#1095645]
  - kvm-scsi-Report-error-when-lun-number-is-in-use.patch [bz#1096576]
  - kvm-util-Split-out-exec_dir-from-os_find_datadir.patch [bz#1017685]
  - kvm-rules.mak-fix-obj-to-a-real-relative-path.patch [bz#1017685]
  - kvm-rules.mak-allow-per-object-cflags-and-libs.patch [bz#1017685]
  - kvm-block-use-per-object-cflags-and-libs.patch [bz#1017685]
  - kvm-vmdk-Fix-creating-big-description-file.patch [bz#1039791]
  - Resolves: bz#1017685
    (Gluster etc. should not be a dependency of vscclient and libcacard)
  - Resolves: bz#1029271
    (Format specific information (create type) was wrong when create it specified subformat='streamOptimized')
  - Resolves: bz#1039791
    (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat)
  - Resolves: bz#1095645
    (vectors of virtio-scsi-pci will be 0 when set vectors>=129)
  - Resolves: bz#1096576
    (QEMU core dumped when boot up two scsi-hd disk on the same virtio-scsi-pci controller in Intel host)
  - Resolves: bz#1116728
    (Backport qemu_bh_schedule() race condition fix)
  - Resolves: bz#1118707
    (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info)
  - Resolves: bz#990724
    (qemu-kvm failing when invalid machine type is provided)
  - Resolves: bz#999789
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-68.el7
changelog:
  - kvm-virtio-net-Do-not-filter-VLANs-without-F_CTRL_VLAN.patch [bz#1065724]
  - kvm-virtio-net-add-vlan-receive-state-to-RxFilterInfo.patch [bz#1065724]
  - kvm-virtio-rng-check-return-value-of-virtio_load.patch [bz#1116941]
  - kvm-qapi-treat-all-negative-return-of-strtosz_suffix-as-.patch [bz#1074403]
  - Resolves: bz#1065724
    (rx filter incorrect when guest disables VLAN filtering)
  - Resolves: bz#1074403
    (qemu-kvm can not give any warning hint when set sndbuf with negative value)
  - Resolves: bz#1116941
    (Return value of virtio_load not checked in virtio_rng_load)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-69.el7
changelog:
  - kvm-rdma-bug-fixes.patch [bz#1107821]
  - kvm-virtio-serial-report-frontend-connection-state-via-m.patch [bz#1122151]
  - kvm-char-report-frontend-open-closed-state-in-query-char.patch [bz#1122151]
  - kvm-acpi-fix-tables-for-no-hpet-configuration.patch [bz#1129552]
  - kvm-mirror-Fix-resource-leak-when-bdrv_getlength-fails.patch [bz#1130603]
  - kvm-blockjob-Add-block_job_yield.patch [bz#1130603]
  - kvm-mirror-Go-through-ready-complete-process-for-0-len-i.patch [bz#1130603]
  - kvm-qemu-iotests-Test-BLOCK_JOB_READY-event-for-0Kb-imag.patch [bz#1130603]
  - kvm-block-make-top-argument-to-block-commit-optional.patch [bz#1130603]
  - kvm-qemu-iotests-Test-0-length-image-for-mirror.patch [bz#1130603]
  - kvm-mirror-Fix-qiov-size-for-short-requests.patch [bz#1130603]
  - Resolves: bz#1107821
    (rdma migration: seg if destination isn't listening)
  - Resolves: bz#1122151
    (Pass close from qemu-ga)
  - Resolves: bz#1129552
    (backport "acpi: fix tables for no-hpet configuration")
  - Resolves: bz#1130603
    (advertise active commit to libvirt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-70.el7
changelog:
  - kvm-Enforce-stack-protector-usage.patch [bz#1064260]
  - kvm-pc-increase-maximal-VCPU-count-to-240.patch [bz#1134408]
  - kvm-gluster-Add-discard-support-for-GlusterFS-block-driv.patch [bz#1136534]
  - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088150]
  - kvm-qdev-properties-system.c-Allow-vlan-or-netdev-for-de.patch [bz#996011]
  - kvm-vl-process-object-after-other-backend-options.patch [bz#1128095]
  - Resolves: bz#1064260
    (Handle properly --enable-fstack-protector option)
  - Resolves: bz#1088150
    (qemu-img coredumpd when try to create a gluster format image)
  - Resolves: bz#1128095
    (chardev 'chr0' isn't initialized when we try to open rng backend)
  - Resolves: bz#1134408
    ([HP 7.1 FEAT] Increase qemu-kvm's VCPU limit to 240)
  - Resolves: bz#1136534
    (glusterfs backend does not support discard)
  - Resolves: bz#996011
    (vlan and queues options cause core dumped when qemu-kvm process quit(or ctrl+c))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-71.el7
changelog:
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#1054077]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#1054077]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#1054077]
  - kvm-qemu-Adjust-qemu-wakeup.patch [bz#1064156]
  - kvm-vmstate_xhci_event-fix-unterminated-field-list.patch [bz#1122147]
  - kvm-vmstate_xhci_event-bug-compat-with-RHEL-7.0-RHEL-onl.patch [bz#1122147]
  - kvm-pflash_cfi01-write-flash-contents-to-bdrv-on-incomin.patch [bz#1139702]
  - kvm-ide-test-Add-enum-value-for-DEV.patch [bz#1123372]
  - kvm-ide-test-Add-FLUSH-CACHE-test-case.patch [bz#1123372]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1123372]
  - kvm-IDE-Fill-the-IDENTIFY-request-consistently.patch [bz#852348]
  - kvm-ide-Add-resize-callback-to-ide-core.patch [bz#852348]
  - Resolves: bz#1054077
    (qemu crash when reboot win7 guest with spice display)
  - Resolves: bz#1064156
    ([qxl] The guest show black screen while resumed guest which managedsaved in pmsuspended status.)
  - Resolves: bz#1122147
    (CVE-2014-5263 vmstate_xhci_event: fix unterminated field list)
  - Resolves: bz#1123372
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1139702
    (pflash (UEFI varstore) migration shortcut for libvirt [RHEL])
  - Resolves: bz#852348
    (fail to block_resize local data disk with IDE/AHCI disk_interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-72.el7
changelog:
  - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1139118]
  - kvm-vbe-rework-sanity-checks.patch [bz#1139118]
  - kvm-spice-display-add-display-channel-id-to-the-debug-me.patch [bz#1139118]
  - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1139118]
  - Resolves: bz#1139118
    (CVE-2014-3615 qemu-kvm: Qemu: crash when guest sets high resolution [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-73.el7
changelog:
  - kvm-scsi-disk-fix-bug-in-scsi_block_new_request-introduc.patch [bz#1105880]
  - Resolves: bz#1105880
    (bug in scsi_block_new_request() function introduced by upstream commit 137745c5c60f083ec982fe9e861e8c16ebca1ba8)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-74.el7
changelog:
  - kvm-ide-Add-wwn-support-to-IDE-ATAPI-drive.patch [bz#1131316]
  - kvm-vmdk-Allow-vmdk_create-to-work-with-protocol.patch [bz#1098086]
  - kvm-block-make-vdi-bounds-check-match-upstream.patch [bz#1098086]
  - kvm-vdi-say-why-an-image-is-bad.patch [bz#1098086]
  - kvm-block-do-not-abuse-EMEDIUMTYPE.patch [bz#1098086]
  - kvm-cow-correctly-propagate-errors.patch [bz#1098086]
  - kvm-block-Use-correct-width-in-format-strings.patch [bz#1098086]
  - kvm-vdi-remove-double-conversion.patch [bz#1098086]
  - kvm-block-vdi-Error-out-immediately-in-vdi_create.patch [bz#1098086]
  - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1098086]
  - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1098086]
  - kvm-block-allow-bdrv_unref-to-be-passed-NULL-pointers.patch [bz#1098086]
  - kvm-block-vdi-use-block-layer-ops-in-vdi_create-instead-.patch [bz#1098086]
  - kvm-block-use-the-standard-ret-instead-of-result.patch [bz#1098086]
  - kvm-block-vpc-use-block-layer-ops-in-vpc_create-instead-.patch [bz#1098086]
  - kvm-block-iotest-update-084-to-test-static-VDI-image-cre.patch [bz#1098086]
  - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch [bz#1122925]
  - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch [bz#1122925]
  - kvm-block-add-backing-file-option-to-block-stream.patch [bz#1122925]
  - kvm-block-add-__com.redhat_change-backing-file-qmp-comma.patch [bz#1122925]
  - Resolves: bz#1098086
    (RFE: Supporting creating vmdk/vdi/vpc format disk with protocols (glusterfs))
  - Resolves: bz#1122925
    (Maintain relative path to backing file image during live merge (block-commit))
  - Resolves: bz#1131316
    (fail to specify wwn for virtual IDE CD-ROM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-75.el7
changelog:
  - kvm-target-i386-Broadwell-CPU-model.patch [bz#1116117]
  - kvm-pc-Add-Broadwell-CPUID-compatibility-bits.patch [bz#1116117]
  - kvm-virtio-balloon-fix-integer-overflow-in-memory-stats-.patch [bz#1142290]
  - Resolves: bz#1116117
    ([Intel 7.1 FEAT] Broadwell new instructions support for KVM - qemu-kvm)
  - Resolves: bz#1142290
    (guest is stuck when setting balloon memory with large guest-stats-polling-interval)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-76.el7
changelog:
  - kvm-usb-hcd-xhci-QOM-Upcast-Sweep.patch [bz#980747]
  - kvm-usb-hcd-xhci-QOM-parent-field-cleanup.patch [bz#980747]
  - kvm-uhci-egsm-fix.patch [bz#1046873]
  - kvm-usb-redir-fix-use-after-free.patch [bz#1046574 bz#1088116]
  - kvm-xhci-remove-leftover-debug-printf.patch [bz#980833]
  - kvm-xhci-add-tracepoint-for-endpoint-state-changes.patch [bz#980833]
  - kvm-xhci-add-port-to-slot_address-tracepoint.patch [bz#980833]
  - kvm-usb-parallelize-usb3-streams.patch [bz#1075846]
  - kvm-xhci-Init-a-transfers-xhci-slotid-and-epid-member-on.patch [bz#1075846]
  - kvm-xhci-Add-xhci_epid_to_usbep-helper-function.patch [bz#980833]
  - kvm-xhci-Fix-memory-leak-on-xhci_disable_ep.patch [bz#980833]
  - kvm-usb-Also-reset-max_packet_size-on-ep_reset.patch [bz#1075846]
  - kvm-usb-Fix-iovec-memleak-on-combined-packet-free.patch [bz#1075846]
  - kvm-usb-hcd-xhci-Remove-unused-sstreamsm-member-from-XHC.patch [bz#980747]
  - kvm-usb-hcd-xhci-Remove-unused-cancelled-member-from-XHC.patch [bz#980747]
  - kvm-usb-hcd-xhci-Report-completion-of-active-transfer-wi.patch [bz#980747]
  - kvm-usb-hcd-xhci-Update-endpoint-context-dequeue-pointer.patch [bz#980747]
  - kvm-xhci-Add-a-few-missing-checks-for-disconnected-devic.patch [bz#980833]
  - kvm-usb-Add-max_streams-attribute-to-endpoint-info.patch [bz#1111450]
  - kvm-usb-Add-usb_device_alloc-free_streams.patch [bz#1111450]
  - kvm-xhci-Call-usb_device_alloc-free_streams.patch [bz#980833]
  - kvm-uhci-invalidate-queue-on-device-address-changes.patch [bz#1111450]
  - kvm-xhci-iso-fix-time-calculation.patch [bz#949385]
  - kvm-xhci-iso-allow-for-some-latency.patch [bz#949385]
  - kvm-xhci-switch-debug-printf-to-tracepoint.patch [bz#980747]
  - kvm-xhci-use-DPRINTF-instead-of-fprintf-stderr.patch [bz#980833]
  - kvm-xhci-child-detach-fix.patch [bz#980833]
  - kvm-usb-add-usb_pick_speed.patch [bz#1075846]
  - kvm-xhci-make-port-reset-trace-point-more-verbose.patch [bz#980833]
  - kvm-usb-initialize-libusb_device-to-avoid-crash.patch [bz#1111450]
  - kvm-target-i386-get-CPL-from-SS.DPL.patch [bz#1097363]
  - kvm-trace-use-unique-Red-Hat-version-number-in-simpletra.patch [bz#1088112]
  - kvm-trace-add-pid-field-to-simpletrace-record.patch [bz#1088112]
  - kvm-simpletrace-add-support-for-trace-record-pid-field.patch [bz#1088112]
  - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#1088112]
  - kvm-trace-extract-stap_escape-function-for-reuse.patch [bz#1088112]
  - kvm-trace-add-tracetool-simpletrace_stap-format.patch [bz#1088112]
  - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#1088112]
  - kvm-trace-install-trace-events-file.patch [bz#1088112]
  - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#1088112]
  - kvm-simpletrace-install-simpletrace.py.patch [bz#1088112]
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1088112]
  - kvm-rdma-Fix-block-during-rdma-migration.patch [bz#1152969]
  - Resolves: bz#1046574
    (fail to passthrough the USB speaker redirected from usb-redir with xhci controller)
  - Resolves: bz#1046873
    (fail to be recognized the hotpluging usb-storage device with xhci controller in win2012R2 guest)
  - Resolves: bz#1075846
    (qemu-kvm core dumped when hotplug/unhotplug USB3.0 device multi times)
  - Resolves: bz#1088112
    ([Fujitsu 7.1 FEAT]:QEMU: capturing trace data all the time using ftrace-based tracing)
  - Resolves: bz#1088116
    (qemu crash when device_del usb-redir)
  - Resolves: bz#1097363
    (qemu ' KVM internal error. Suberror: 1'  when  query cpu frequently during pxe boot in Intel "Q95xx" host)
  - Resolves: bz#1111450
    (Guest crash when hotplug usb while disable virt_use_usb)
  - Resolves: bz#1152969
    (Qemu-kvm got stuck when migrate to wrong RDMA ip)
  - Resolves: bz#949385
    (passthrough USB speaker to win2012 guest fail to work well)
  - Resolves: bz#980747
    (flood with 'xhci: wrote doorbell while xHC stopped or paused' when redirected USB Webcam from usb-host with xHCI controller)
  - Resolves: bz#980833
    (xhci: FIXME: endpoint stopped w/ xfers running, data might be lost)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-77.el7
changelog:
  - kvm-seccomp-add-semctl-to-the-syscall-whitelist.patch [bz#1026314]
  - kvm-Revert-kvmclock-Ensure-proper-env-tsc-value-for-kvmc.patch [bz#1098602 bz#1130428]
  - kvm-Revert-kvmclock-Ensure-time-in-migration-never-goes-.patch [bz#1098602 bz#1130428]
  - kvm-Introduce-cpu_clean_all_dirty.patch [bz#1098602 bz#1130428]
  - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock.v2.patch [bz#1098602 bz#1130428]
  - kvm-kvmclock-Ensure-time-in-migration-never-goes-back.v2.patch [bz#1098602 bz#1130428]
  - Resolves: bz#1026314
    (BUG: qemu-kvm hang when use '-sandbox on'+'vnc'+'hda')
  - Resolves: bz#1098602
    (kvmclock: Ensure time in migration never goes backward (backport))
  - Resolves: bz#1130428
    (After migration of RHEL7.1 guest with "-vga qxl", GUI console is hang)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-78.el7
changelog:
  - kvm-slirp-udp-fix-NULL-pointer-dereference-because-of-un.patch [bz#1144820]
  - kvm-hw-pci-fix-error-flow-in-pci-multifunction-init.patch [bz#1049734]
  - kvm-rhel-Drop-machine-type-pc-q35-rhel7.0.0.patch [bz#1111107]
  - kvm-virtio-scsi-Plug-memory-leak-on-virtio_scsi_push_eve.patch [bz#1088822]
  - kvm-virtio-scsi-Report-error-if-num_queues-is-0-or-too-l.patch [bz#1089606]
  - kvm-virtio-scsi-Fix-memory-leak-when-realize-failed.patch [bz#1089606]
  - kvm-virtio-scsi-Fix-num_queue-input-validation.patch [bz#1089606]
  - kvm-Revert-linux-aio-use-event-notifiers.patch [bz#1104748]
  - kvm-specfile-Require-glusterfs-api-3.6.patch [bz#1155518]
  - Resolves: bz#1049734
    (PCI: QEMU crash on illegal operation: attaching a function to a non multi-function device)
  - Resolves: bz#1088822
    (hot-plug a virtio-scsi disk via 'blockdev-add' always cause QEMU quit)
  - Resolves: bz#1089606
    (QEMU will not reject invalid number of queues (num_queues = 0) specified for virtio-scsi)
  - Resolves: bz#1104748
    (48% reduction in IO performance for KVM guest, io=native)
  - Resolves: bz#1111107
    (Remove Q35 machine type from qemu-kvm)
  - Resolves: bz#1144820
    (CVE-2014-3640 qemu-kvm: qemu: slirp: NULL pointer deref in sosendto() [rhel-7.1])
  - Resolves: bz#1155518
    (qemu-kvm: undefined symbol: glfs_discard_async)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-79.el7
changelog:
  - kvm-libcacard-link-against-qemu-error.o-for-error_report.patch [bz#1088176]
  - kvm-error-Add-error_abort.patch [bz#1088176]
  - kvm-blockdev-Fail-blockdev-add-with-encrypted-images.patch [bz#1088176]
  - kvm-blockdev-Fix-NULL-pointer-dereference-in-blockdev-ad.patch [bz#1088176]
  - kvm-qemu-iotests-Test-a-few-blockdev-add-error-cases.patch [bz#1088176]
  - kvm-block-Add-errp-to-bdrv_new.patch [bz#1088176]
  - kvm-qemu-img-Avoid-duplicate-block-device-IDs.patch [bz#1088176]
  - kvm-block-Catch-duplicate-IDs-in-bdrv_new.patch [bz#1088176]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1138691]
  - kvm-qemu-img-Allow-cache-mode-specification-for-amend.patch [bz#1138691]
  - kvm-qemu-img-clarify-src_cache-option-documentation.patch [bz#1138691]
  - kvm-qemu-img-fix-rebase-src_cache-option-documentation.patch [bz#1138691]
  - kvm-qemu-img-fix-img_compare-flags-error-path.patch [bz#1138691]
  - kvm-ac97-register-reset-via-qom.patch [bz#1141667]
  - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_ha.patch [bz#1085232]
  - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on.patch [bz#1085232]
  - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232]
  - kvm-ide-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232]
  - kvm-ide-only-constrain-read-write-requests-to-drive-size.patch [bz#1085232]
  - Resolves: bz#1085232
    (Ilegal guest requests on block devices pause the VM)
  - Resolves: bz#1088176
    (QEMU fail to check whether duplicate ID for block device drive using 'blockdev-add' to hotplug)
  - Resolves: bz#1138691
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))
  - Resolves: bz#1141667
    (Qemu crashed if reboot guest after hot remove AC97 sound device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-80.el7
changelog:
  - kvm-dump-RHEL-specific-fix-for-CPUState-bug-introduced-b.patch [bz#1161563]
  - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1157798]
  - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1157798]
  - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1157798]
  - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1157798]
  - kvm-dump-add-API-to-write-vmcore.patch [bz#1157798]
  - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1157798]
  - kvm-dump-add-support-for-lzo-snappy.patch [bz#1157798]
  - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1157798]
  - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump-header.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1157798]
  - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1157798]
  - kvm-dump-add-API-to-write-dump-pages.patch [bz#1157798]
  - kvm-dump-Drop-qmp_dump_guest_memory-stub-and-build-for-a.patch [bz#1157798]
  - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1157798]
  - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1157798]
  - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1157798]
  - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1157798]
  - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1157798]
  - kvm-dump-simplify-write_start_flat_header.patch [bz#1157798]
  - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1157798]
  - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1157798]
  - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1157798]
  - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1157798]
  - kvm-dump-simplify-get_len_buf_out.patch [bz#1157798]
  - kvm-rename-parse_enum_option-to-qapi_enum_parse-and-make.patch [bz#1087724]
  - kvm-qapi-introduce-PreallocMode-and-new-PreallocModes-fu.patch [bz#1087724]
  - kvm-raw-posix-Add-falloc-and-full-preallocation-option.patch [bz#1087724]
  - kvm-qcow2-Add-falloc-and-full-preallocation-option.patch [bz#1087724]
  - kvm-vga-fix-invalid-read-after-free.patch [bz#1161890]
  - kvm-Use-qemu-kvm-in-documentation-instead-of-qemu-system.patch [bz#1140618]
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157645]
  - kvm-spice-call-qemu_spice_set_passwd-during-init.patch [bz#1138639]
  - kvm-block-raw-posix-Try-both-FIEMAP-and-SEEK_HOLE.patch [bz#1160237]
  - kvm-block-raw-posix-Fix-disk-corruption-in-try_fiemap.patch [bz#1160237]
  - kvm-block-raw-posix-use-seek_hole-ahead-of-fiemap.patch [bz#1160237]
  - kvm-raw-posix-Fix-raw_co_get_block_status-after-EOF.patch [bz#1160237]
  - kvm-raw-posix-raw_co_get_block_status-return-value.patch [bz#1160237]
  - kvm-raw-posix-SEEK_HOLE-suffices-get-rid-of-FIEMAP.patch [bz#1160237]
  - kvm-raw-posix-The-SEEK_HOLE-code-is-flawed-rewrite-it.patch [bz#1160237]
  - Resolves: bz#1087724
    ([Fujitsu 7.1 FEAT]: qemu-img should use fallocate() system call for "preallocation=full" option)
  - Resolves: bz#1138639
    (fail to login spice session with password + expire time)
  - Resolves: bz#1140618
    (Should replace "qemu-system-i386" by "/usr/libexec/qemu-kvm" in manpage of qemu-kvm for our official qemu-kvm build)
  - Resolves: bz#1157645
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-7.1])
  - Resolves: bz#1157798
    ([FEAT RHEL7.1]: qemu: Support compression for dump-guest-memory command)
  - Resolves: bz#1160237
    (qemu-img convert intermittently corrupts output images)
  - Resolves: bz#1161563
    (invalid QEMU NOTEs in vmcore that is dumped for multi-VCPU guests)
  - Resolves: bz#1161890
    ([abrt] qemu-kvm: pixman_image_get_data(): qemu-kvm killed by SIGSEGV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-81.el7
changelog:
  - kvm-migration-static-variables-will-not-be-reset-at-seco.patch [bz#1071776]
  - kvm-vfio-pci-Add-debug-config-options-to-disable-MSI-X-K.patch [bz#1098976]
  - kvm-vfio-correct-debug-macro-typo.patch [bz#1098976]
  - kvm-vfio-pci-Fix-MSI-X-debug-code.patch [bz#1098976]
  - kvm-vfio-pci-Fix-MSI-X-masking-performance.patch [bz#1098976]
  - kvm-vfio-Fix-MSI-X-vector-expansion.patch [bz#1098976]
  - kvm-vfio-Don-t-cache-MSIMessage.patch [bz#1098976]
  - Resolves: bz#1071776
    (Migration "expected downtime" does not refresh after reset to a new value)
  - Resolves: bz#1098976
    (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-82.el7
changelog:
  - kvm-hw-pci-fixed-error-flow-in-pci_qdev_init.patch [bz#1046007]
  - kvm-hw-pci-fixed-hotplug-crash-when-using-rombar-0-with-.patch [bz#1046007]
  - Resolves: bz#1046007
    (qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-83.el7
changelog:
  - kvm-xhci-add-sanity-checks-to-xhci_lookup_uport.patch [bz#1074219]
  - kvm-Revert-Build-ceph-rbd-only-for-rhev.patch [bz#1140742]
  - kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1140742]
  - kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1140742]
  - kvm-spec-Enable-rbd-driver-add-dependency.patch [bz#1140742]
  - Resolves: bz#1074219
    (qemu core dump when install a RHEL.7 guest(xhci) with migration)
  - Resolves: bz#1140742
    (Enable native support for Ceph)


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-84.el7
changelog:
  - kvm-qemu-iotests-Test-case-for-backing-file-deletion.patch [bz#1002493]
  - kvm-qemu-iotests-Add-sample-image-and-test-for-VMDK-vers.patch [bz#1134237]
  - kvm-vmdk-Check-VMFS-extent-line-field-number.patch [bz#1134237]
  - kvm-qemu-iotests-Introduce-_unsupported_imgopts.patch [bz#1002493]
  - kvm-qemu-iotests-Add-_unsupported_imgopts-for-vmdk-subfo.patch [bz#1002493]
  - kvm-vmdk-Fix-big-flat-extent-IO.patch [bz#1134241]
  - kvm-vmdk-Check-for-overhead-when-opening.patch [bz#1134251]
  - kvm-block-vmdk-add-basic-.bdrv_check-support.patch [bz#1134251]
  - kvm-qemu-iotest-Make-077-raw-only.patch [bz#1134237]
  - kvm-qemu-iotests-Don-t-run-005-on-vmdk-split-formats.patch [bz#1002493]
  - kvm-vmdk-extract-vmdk_read_desc.patch [bz#1134251]
  - kvm-vmdk-push-vmdk_read_desc-up-to-caller.patch [bz#1134251]
  - kvm-vmdk-do-not-try-opening-a-file-as-both-image-and-des.patch [bz#1134251]
  - kvm-vmdk-correctly-propagate-errors.patch [bz#1134251]
  - kvm-block-vmdk-do-not-report-file-offset-for-compressed-.patch [bz#1134251]
  - kvm-vmdk-Fix-d-and-lld-to-PRI-in-format-strings.patch [bz#1134251]
  - kvm-vmdk-Fix-x-to-PRIx32-in-format-strings-for-cid.patch [bz#1134251]
  - kvm-qemu-img-Convert-by-cluster-size-if-target-is-compre.patch [bz#1134283]
  - kvm-vmdk-Implement-.bdrv_write_compressed.patch [bz#1134283]
  - kvm-vmdk-Implement-.bdrv_get_info.patch [bz#1134283]
  - kvm-qemu-iotests-Test-converting-to-streamOptimized-from.patch [bz#1134283]
  - kvm-vmdk-Fix-local_err-in-vmdk_create.patch [bz#1134283]
  - kvm-fpu-softfloat-drop-INLINE-macro.patch [bz#1002493]
  - kvm-block-New-bdrv_nb_sectors.patch [bz#1002493]
  - kvm-vmdk-Optimize-cluster-allocation.patch [bz#1002493]
  - kvm-vmdk-Handle-failure-for-potentially-large-allocation.patch [bz#1002493]
  - kvm-vmdk-Use-bdrv_nb_sectors-where-sectors-not-bytes-are.patch [bz#1002493]
  - kvm-vmdk-fix-vmdk_parse_extents-extent_file-leaks.patch [bz#1002493]
  - kvm-vmdk-fix-buf-leak-in-vmdk_parse_extents.patch [bz#1002493]
  - kvm-vmdk-Fix-integer-overflow-in-offset-calculation.patch [bz#1002493]
  - kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163078]
  - Resolves: bz#1002493
    (qemu-img convert rate about 100k/second from qcow2/raw to vmdk format on nfs system file)
  - Resolves: bz#1134237
    (Opening malformed VMDK description file should fail)
  - Resolves: bz#1134241
    (QEMU fails to correctly read/write on VMDK with big flat extent)
  - Resolves: bz#1134251
    (Opening an obviously truncated VMDK image should fail)
  - Resolves: bz#1134283
    (qemu-img convert from ISO to streamOptimized fails)
  - Resolves: bz#1163078
    (CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-7.1])


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-85.el7
changelog:
  - kvm-block-delete-cow-block-driver.patch [bz#1175325]
  - Resolves: bz#1175325
    (Delete cow block driver)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7
changelog:
  - kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942]
  - kvm-cirrus-fix-blit-region-check.patch [bz#1169456]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456]
  - Resolves: bz#1169456
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-7.1])
  - Resolves: bz#1180942
    (qemu core dumped when unhotplug gpu card assigned to guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.1
changelog:
  - kvm-pc-add-rhel6.6.0-machine-type.patch [bz#1198958]
  - Resolves: bz#1198958
    (Add rhel-6.6.0 machine type to RHEL 7.1.z to support RHEL 6.6 to RHEL 7.1 live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.2
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219269]
  - Resolves: bz#1219269
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-7.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.3
changelog:
  - kvm-atomics-add-explicit-compiler-fence-in-__atomic-memo.patch [bz#1233643]
  - Resolves: bz#1233643
    ([abrt] qemu-kvm: bdrv_error_action(): qemu-kvm killed by SIGABRT)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.4
changelog:
  - kvm-ide-Check-array-bounds-before-writing-to-io_buffer-C.patch [bz#1243689]
  - kvm-ide-atapi-Fix-START-STOP-UNIT-command-completion.patch [bz#1243689]
  - kvm-ide-Clear-DRQ-after-handling-all-expected-accesses.patch [bz#1243689]
  - Resolves: bz#1243689
    (EMBARGOED CVE-2015-5154 qemu-kvm: qemu: ide: atapi: heap overflow during I/O buffer memory access [rhel-7.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.5
changelog:
  - kvm-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch [bz#1243726]
  - Resolves: bz#1243726
    (CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pit_ioport_read function [rhel-7.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.6
changelog:
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248764]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248764]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248764]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248764]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248764]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248764]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248764]
  - Resolves: bz#1248764
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-7.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-86.el7_1.7
changelog:
  - kvm-CVE-2015-1779-incrementally-decode-websocket-frames.patch [bz#1205050]
  - kvm-CVE-2015-1779-limit-size-of-HTTP-headers-from-websoc.patch [bz#1205050]
  - Resolves: bz#1205050
    (CVE-2015-1779 qemu-kvm: qemu: vnc: insufficient resource limiting in VNC websockets decoder [rhel-7.1.z])


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-86.el7_1.8
changelog:
  - kvm-qtest-ide-test-disable-flush-test.patch [bz#1273098]
  - Resolves: bz#1273098
    (qemu-kvm build failure race condition in tests/ide-test)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Lennart Poettering <lpoetter@redhat.com> - 0-0.7.20100629git4176e5
changelog:
  - New snapshot
  - Split off -units package where other packages can depend on without pulling in the whole of systemd


author: Lennart Poettering <lpoetter@redhat.com> - 8-3
changelog:
  - Reexecute after installation, take ownership of /var/run/user
  - https://bugzilla.redhat.com/show_bug.cgi?id=627457
  - https://bugzilla.redhat.com/show_bug.cgi?id=627634


author: Lennart Poettering <lpoetter@redhat.com> - 10-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=630401
  - https://bugzilla.redhat.com/show_bug.cgi?id=630225
  - https://bugzilla.redhat.com/show_bug.cgi?id=626966
  - https://bugzilla.redhat.com/show_bug.cgi?id=623456


author: Lennart Poettering <lpoetter@redhat.com> - 14-1
changelog:
  - Upstream update
  - Enable hwclock-load by default
  - Obsolete readahead
  - Enable /var/run and /var/lock on tmpfs


author: Lennart Poettering <lpoetter@redhat.com> - 24-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694079
  - https://bugzilla.redhat.com/show_bug.cgi?id=693289
  - https://bugzilla.redhat.com/show_bug.cgi?id=693274
  - https://bugzilla.redhat.com/show_bug.cgi?id=693161


author: Lennart Poettering <lpoetter@redhat.com> - 25-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694788
  - https://bugzilla.redhat.com/show_bug.cgi?id=694321
  - https://bugzilla.redhat.com/show_bug.cgi?id=690253
  - https://bugzilla.redhat.com/show_bug.cgi?id=688661
  - https://bugzilla.redhat.com/show_bug.cgi?id=682662
  - https://bugzilla.redhat.com/show_bug.cgi?id=678555
  - https://bugzilla.redhat.com/show_bug.cgi?id=628004


author: Lennart Poettering <lpoetter@redhat.com> - 26-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=699394
  - https://bugzilla.redhat.com/show_bug.cgi?id=698198
  - https://bugzilla.redhat.com/show_bug.cgi?id=698674
  - https://bugzilla.redhat.com/show_bug.cgi?id=699114
  - https://bugzilla.redhat.com/show_bug.cgi?id=699128


author: Lennart Poettering <lpoetter@redhat.com> - 26-2
changelog:
  - Bugfix release
  - https://bugzilla.redhat.com/show_bug.cgi?id=707507
  - https://bugzilla.redhat.com/show_bug.cgi?id=707483
  - https://bugzilla.redhat.com/show_bug.cgi?id=705427
  - https://bugzilla.redhat.com/show_bug.cgi?id=707577


author: Michal Schmidt <mschmidt@redhat.com> - 28-3
changelog:
  - Apply patches from current upstream
  - https://bugzilla.redhat.com/show_bug.cgi?id=709909
  - https://bugzilla.redhat.com/show_bug.cgi?id=710839
  - https://bugzilla.redhat.com/show_bug.cgi?id=711015


author: Michal Schmidt <mschmidt@redhat.com> - 28-4
changelog:
  - Apply patches from current upstream.
  - Fixes memory size detection on 32-bit with >4GB RAM (BZ712341)


author: Lennart Poettering <lpoetter@redhat.com> - 35-1
changelog:
  - New upstream release
  - Update post scripts
  - Resolves: #726683, #713384, #698198, #722803, #727315, #729997, #733706, #734611


author: Michal Schmidt <mschmidt@redhat.com> - 37-2
changelog:
  - A couple of fixes from upstream:
  - Fix a regression in bash-completion reported in Bodhi.
  - Fix a crash in isolating.
  - Resolves: #717325


author: Michal Schmidt <mschmidt@redhat.com> - 38-5
changelog:
  - Build against libgee06. Reenable gtk tools.
  - Delete unused patches.
  - Add easy building of git snapshots.
  - Remove legacy spec file elements.
  - Don't mention implicit BuildRequires.
  - Configure with --disable-static.
  - Merge -units into the main package.
  - Move section 3 manpages to -devel.
  - Fix unowned directory.
  - Run ldconfig in scriptlets.
  - Split systemd-analyze to a subpackage.


author: Lennart Poettering <lpoetter@redhat.com> - 42-1
changelog:
  - New upstream release
  - Save a bit of entropy during system installation (#789407)
  - Don't own /etc/os-release anymore, leave that to fedora-release


author: Dennis Gilmore <dennis@ausil.us> - 43-2
changelog:
  - don't conflict with fedora-release systemd never actually provided
  - /etc/os-release so there is no actual conflict


author: Dennis Gilmore <dennis@ausil.us> - 44-3
changelog:
  - apply patch from upstream so we can build systemd on arm and ppc
  - and likely the rest of the secondary arches


author: Michal Schmidt <mschmidt@redhat.com> - 44-4
changelog:
  - Add triggers from Bill Nottingham to correct the damage done by
    the obsoleted systemd-units's preun scriptlet (#807457).


author: Kay Sievers - 185-1
changelog:
  - New upstream release
    - udev selinux labeling fixes
    - new man pages
    - systemctl help <unit name>


author: Michal Schmidt <mschmidt@redhat.com> - 185-4.gita2368a3
changelog:
  - Update to current git snapshot
    - Add systemd-readahead-analyze
    - Drop upstream patch
  - Split systemd-libs
  - Drop duplicate doc files
  - Fixed License headers of subpackages


author: Lennart Poettering <lpoetter@redhat.com> - 188-1
changelog:
  - New upstream release
  - Enable gdm and avahi by default via the preset file
  - Convert /etc/sysconfig/desktop to display-manager.service symlink
  - Enable hardened build


author: Lennart Poettering <lpoetter@redhat.com> - 188-3
changelog:
  - Remount file systems MS_PRIVATE before switching roots
  - https://bugzilla.redhat.com/show_bug.cgi?id=847418


author: Ray Strode <rstrode@redhat.com> 188-4
changelog:
  - more scriptlet fixes
    (move dm migration logic to %posttrans so the service
     files it's looking for are available at the time
     the logic is run)


author: Lennart Poettering <lpoetter@redhat.com> - 189-3
changelog:
  - Update preset policy
  - Rename preset policy file from 99-default.preset to 90-default.preset so that people can order their own stuff after the Fedora default policy if they wish


author: Lennart Poettering <lpoetter@redhat.com> - 190-1
changelog:
  - New upstream release
  - Take possession of /etc/localtime, and remove /etc/sysconfig/clock
  - https://bugzilla.redhat.com/show_bug.cgi?id=858780
  - https://bugzilla.redhat.com/show_bug.cgi?id=858787
  - https://bugzilla.redhat.com/show_bug.cgi?id=858771
  - https://bugzilla.redhat.com/show_bug.cgi?id=858754
  - https://bugzilla.redhat.com/show_bug.cgi?id=858746
  - https://bugzilla.redhat.com/show_bug.cgi?id=858266
  - https://bugzilla.redhat.com/show_bug.cgi?id=858224
  - https://bugzilla.redhat.com/show_bug.cgi?id=857670
  - https://bugzilla.redhat.com/show_bug.cgi?id=856975
  - https://bugzilla.redhat.com/show_bug.cgi?id=855863
  - https://bugzilla.redhat.com/show_bug.cgi?id=851970
  - https://bugzilla.redhat.com/show_bug.cgi?id=851275
  - https://bugzilla.redhat.com/show_bug.cgi?id=851131
  - https://bugzilla.redhat.com/show_bug.cgi?id=847472
  - https://bugzilla.redhat.com/show_bug.cgi?id=847207
  - https://bugzilla.redhat.com/show_bug.cgi?id=846483
  - https://bugzilla.redhat.com/show_bug.cgi?id=846085
  - https://bugzilla.redhat.com/show_bug.cgi?id=845973
  - https://bugzilla.redhat.com/show_bug.cgi?id=845194
  - https://bugzilla.redhat.com/show_bug.cgi?id=845028
  - https://bugzilla.redhat.com/show_bug.cgi?id=844630
  - https://bugzilla.redhat.com/show_bug.cgi?id=839736
  - https://bugzilla.redhat.com/show_bug.cgi?id=835848
  - https://bugzilla.redhat.com/show_bug.cgi?id=831740
  - https://bugzilla.redhat.com/show_bug.cgi?id=823485
  - https://bugzilla.redhat.com/show_bug.cgi?id=821813
  - https://bugzilla.redhat.com/show_bug.cgi?id=807886
  - https://bugzilla.redhat.com/show_bug.cgi?id=802198
  - https://bugzilla.redhat.com/show_bug.cgi?id=767795
  - https://bugzilla.redhat.com/show_bug.cgi?id=767561
  - https://bugzilla.redhat.com/show_bug.cgi?id=752774
  - https://bugzilla.redhat.com/show_bug.cgi?id=732874
  - https://bugzilla.redhat.com/show_bug.cgi?id=858735


author: Lennart Poettering <lpoetter@redhat.com> - 194-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=859614
  - https://bugzilla.redhat.com/show_bug.cgi?id=859655


author: Lennart Poettering <lpoetter@redhat.com> - 195-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=831665
  - https://bugzilla.redhat.com/show_bug.cgi?id=847720
  - https://bugzilla.redhat.com/show_bug.cgi?id=858693
  - https://bugzilla.redhat.com/show_bug.cgi?id=863481
  - https://bugzilla.redhat.com/show_bug.cgi?id=864629
  - https://bugzilla.redhat.com/show_bug.cgi?id=864672
  - https://bugzilla.redhat.com/show_bug.cgi?id=864674
  - https://bugzilla.redhat.com/show_bug.cgi?id=865128
  - https://bugzilla.redhat.com/show_bug.cgi?id=866346
  - https://bugzilla.redhat.com/show_bug.cgi?id=867407
  - https://bugzilla.redhat.com/show_bug.cgi?id=868603


author: Michal Schmidt <mschmidt@redhat.com> - 195-4
changelog:
  - add dmraid-activation.service to the default preset
  - add yum protected.d fragment
  - https://bugzilla.redhat.com/show_bug.cgi?id=869619
  - https://bugzilla.redhat.com/show_bug.cgi?id=869717


author: Michal Schmidt <mschmidt@redhat.com> - 195-6
changelog:
  - Fix cyclical dep between systemd and systemd-libs.
  - Avoid broken build of test-journal-syslog.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873387
  - https://bugzilla.redhat.com/show_bug.cgi?id=872638


author: Michal Schmidt <mschmidt@redhat.com> - 195-7
changelog:
  - Revert udev killing cgroup patch for F18 Beta.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873576


author: Lennart Poettering <lpoetter@redhat.com> - 195-8
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=873459
  - https://bugzilla.redhat.com/show_bug.cgi?id=878093


author: Michal Schmidt <mschmidt@redhat.com> - 196-2
changelog:
  - added spice-vdagentd.service to presets (Lennart, #876237)
  - BR cryptsetup-devel instead of the legacy cryptsetup-luks-devel provide name
    (requested by Milan Brož).
  - verbose make to see the actual build flags


author: Michal Schmidt <mschmidt@redhat.com> - 196-3
changelog:
  - Disable hardening on s390(x) because PIE is broken there and produces
    text relocations with __thread (#868839).


author: Michal Schmidt <mschmidt@redhat.com> - 197-2
changelog:
  - Added qemu-guest-agent.service to presets (Lennart, #885406).
  - Add missing pygobject3-base to systemd-analyze deps (Lennart).
  - Do not require hwdata, it is all in the hwdb now (Kay).
  - Drop dependency on dbus-python.


author: Michal Schmidt <mschmidt@redhat.com> - 201-2
changelog:
  - Automatically discover whether to run autoreconf and add autotools and git
    BuildRequires based on the presence of patches to be applied.
  - Use find -delete.


author: Harald Hoyer <harald@redhat.com> 202-2
changelog:
  - nspawn create empty /etc/resolv.conf if necessary
  - python wrapper: add sd_journal_add_conjunction()
  - fix s390 booting
  - Resolves: rhbz#953217


author: Harald Hoyer <harald@redhat.com> 202-3
changelog:
  - fix ENOENT for getaddrinfo
  - Resolves: rhbz#954012 rhbz#956035
  - crypt-setup-generator: correctly check return of strdup
  - logind-dbus: initialize result variable
  - prevent library underlinking


author: Lennart Poettering <lpoetter@redhat.com> - 204-5
changelog:
  - Rename 90-display-manager.preset to 85-display-manager.preset so that it actually takes precedence over 90-default.preset's "disable *" line (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 206-3
changelog:
  - add dependency on kmod >= 14
  - remove /var/log/journal to make journal non-persistant (#989750)
  - add hypervkvpd.service to presets (#924321)


author: Harald Hoyer <harald@redhat.com> 206-4
changelog:
  - journal: handle multiline syslog messages
  - man: Fix copy&paste error
  - core: synchronously block when logging
  - journal: immediately sync to disk as soon as we receieve an EMERG/ALERT/CRIT message
  - initctl: use irreversible jobs when switching runlevels
  - udev: log error if chmod/chown of static dev nodes fails
  - udev: static_node - don't touch permissions uneccessarily
  - tmpfiles: support passing --prefix multiple times
  - tmpfiles: introduce --exclude-prefix
  - tmpfiles-setup: exclude /dev prefixes files
  - logind: update state file after generating the session fifo, not before
  - journalctl: use _COMM= match for scripts
  - man: systemd.unit: fix volatile path
  - man: link up scope+slice units from systemd.unit(5)
  - man: there is no session mode, only user mode
  - journal: fix hashmap leak in mmap-cache
  - systemd-delta: Only print colors when on a tty
  - systemd: fix segv in snapshot creation
  - udev: hwdb - try reading modalias for usb before falling back to the composed one
  - udevd: respect the log-level set in /etc/udev/udev.conf
  - fstab-generator: respect noauto/nofail when adding sysroot mount


author: Harald Hoyer <harald@redhat.com> 206-5
changelog:
  - obsolete upstart
  Resolves: rhbz#978014
  - obsolete hal
  Resolves: rhbz#975589
  - service: always unwatch PIDs before forgetting old ones
  Resolves: rhbz#995197
  - units: disable kmod-static-nodes.service in containers
  - use CAP_MKNOD ConditionCapability
  - fstab-generator: read rd.fstab=on/off switch correctly
  - backlight: add minimal tool to save/restore screen brightness
  - backlight: instead of syspath use sysname for identifying
  - sysctl: allow overwriting of values specified in "later"
  - systemd-python: fix initialization of _Reader objects
  - udevd: simplify sigterm check
  - libudev: fix hwdb validation to look for the *new* file
  - units: make fsck units remain after exit
  - udev: replace CAP_MKNOD by writable /sys condition
  - libudev-enumerate.c:udev_enumerate_get_list_entry() fixed
  - journal: fix parsing of facility in syslog messages


author: Harald Hoyer <harald@redhat.com> 206-8
changelog:
  - support "debug" kernel command line parameter
  - journald: fix fd leak in journal_file_empty
  - journald: fix vacuuming of archived journals
  - libudev: enumerate - do not try to match against an empty subsystem
  - cgtop: fixup the online help
  - libudev: fix memleak when enumerating childs


author: Lukas Nykryn <lnykryn@redhat.com> - 207-2
changelog:
  - Advertise hibernation only if there's enough free swap
  - swap: create .wants symlink to 'auto' swap devices
  - Verify validity of session name when received from outside
  - polkit: Avoid race condition in scraping /proc
  Resolves: rhbz#1005142


author: Lukas Nykryn <lnykryn@redhat.com> - 207-5
changelog:
  - create /etc/rc.d/rc.local (#968401)
  - cgroup: always enable memory.use_hierarchy= for all cgroups (#1011575)
  - remove user@.service (#1019738)
  - drop some out-of-date references to cgroup settings (#1000004)
  - explain NAME in systemctl man page (#978954)


author: Harald Hoyer <harald@redhat.com> 207-6
changelog:
  - changed systemd-journal-gateway login shell to /sbin/nologin
  - backported a lot of bugfixes
  - udev: path_id - fix by-path link generation for scm devices
  Resolves: rhbz#888707


author: Lukas Nykryn <lnykryn@redhat.com> - 207-9
changelog:
  - treat reload failure as failure (#1036848)
  - improve journal performance (#1029604)
  - backport bugfixes (#1043525)
  - fix handling of trailing whitespace in split_quoted (#984832)
  - localed: match converted keymaps before legacy (#903776)
  - improve the description of parameter X in tmpfiles.d page (#1029604)
  - obsolete ConsoleKit (#1039761)
  - make rc.local more backward comaptible (#1039465)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 207-12
changelog:
  - shell-completion: remove load and dump from systemctl (#1048066)
  - delta: ensure that d_type will be set on every fs (#1050795)
  - tmpfiles: don't allow label_fix to print ENOENT when we want to ignore it (#1044871)
  - udev/net_id: Introduce predictable network names for Linux on System z (#870859)
  - coredumpctl: in case of error free pattern after print (#1052786)


author: Michal Sekletar <msekleta@redhat.com> - 208-1
changelog:
  - rebase to systemd-208 (#1063332)
  - do not create symlink /etc/systemd/system/syslog.service (#1055421)


author: Michal Sekletar <msekleta@redhat.com> - 208-2
changelog:
  - require redhat-release package
  - call systemd-tmpfiles after package installation (#1059345)
  - move preset policy out of systemd package (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-7
changelog:
  - setup tty permissions and group for /dev/sclp_line0 (#1070310)
  - cdrom_id: use the old MMC fallback (#1038015)
  - mount: don't send out PropertiesChanged message if actually nothing got changed (#1069718)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-8
changelog:
  - rules: mark loop device as SYSTEMD_READY=0 if no file is attached (#1067422)
  - utmp: make sure we don't write the utmp reboot record twice on each boot (#1053600)
  - rework session shutdown logic (#1047614)
  - introduce new stop protocol for unit scopes (#1064976)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-9
changelog:
  - fixes crashes in logind and systemd (#1073994)
  - run fsck before mouting root in initramfs (#1056661)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11
changelog:
  - logind-session: save stopping flag (#1082692)
  - unit: add waiting jobs to run queue in unit_coldplug (#1083159)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-12
changelog:
  - units/serial-getty@.service: add [Install] section (#1083936)
  - units: order network-online.target after network.target (#1072431)
  - util: consider both fuse.glusterfs and glusterfs network file systems (#1080229)
  - core: make StopWhenUnneeded work in conjunction with units that fail during their start job (#986949)
  - cgroups-agent: down-grade log level (#1044386)
  - random-seed: raise POOL_SIZE_MIN constant to 1024 (#1066517)
  - delta: do not use unicode chars in C locale (#1088419)
  - core: print debug instead of error message (#1105608)
  - journald: always add syslog facility for messages coming from kmsg (#1113215)
  - fsck,fstab-generator: be lenient about missing fsck.<type> (#1098310)
  - rules/60-persistent-storage: add nvme pcie ssd scsi_id ENV (#1042990)
  - cgls: fix running with -M option (#1085455)
  - getty: Start getty on 3270 terminals available on Linux on System z (#1075729)
  - core: Added support for ERRNO NOTIFY_SOCKET  message parsing (#1106457)
  - socket: add SocketUser= and SocketGroup= for chown()ing sockets in the file system (#1111761)
  - tmpfiles: add --root option to operate on an alternate fs tree (#1111199)
  - units: make ExecStopPost action part of ExecStart (#1036276)
  - machine-id: only look into KVM uuid when we are not running in a container (#1123452)
  - util: reset signals when we fork off agents (#1134818)
  - udev: do not skip the execution of RUN when renaming a network device fails (#1102135)
  - man: mention System Administrator's Guide in systemctl manpage (#978948)
  - vconsole: also copy character maps (not just fonts) from vt1 to vt2, vt3, ... (#1002450)
  - localed: consider an unset model as a wildcard (#903776)
  - systemd-detect-virt: detect s390 virtualization (#1139149)
  - socket: introduce SELinuxContextFromNet option (#1113790)
  - sysctl: make --prefix allow all kinds of sysctl paths (#1138591)
  - man: mention localectl in locale.conf (#1049286)
  - rules: automatically online hot-added CPUs (#968811)
  - rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac' (#1054477)
  - bash-completion: add verb set-property (#1064487)
  - man: update journald rate limit defaults (#1145352)
  - core: don't try to connect to d-bus after switchroot (#1083300)
  - localed: check for partially matching converted keymaps (#1109145)
  - fileio: make parse_env_file() return number of parsed items (#1069420)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-13
changelog:
  - tmpfiles: minor modernizations (#1147524)
  - install: when looking for a unit file for enabling, search for templates only after traversing all search directories (#1147524)
  - install: remove unused variable (#1147524)
  - bootctl: typo fix in help message (#1147524)
  - logind: ignore failing close() on session-devices (#1147524)
  - sysfs-show.c: return negative error (#1147524)
  - core: only send SIGHUP when doing first kill, not when doing final sigkill (#1147524)
  - cgroup: make sure to properly send SIGCONT to all processes of a cgroup if that's requested (#1147524)
  - core: don't send duplicate SIGCONT when killing units (#1147524)
  - efi: fix Undefined reference efi_loader_get_boot_usec when EFI support is disabled (#1147524)
  - macro: better make IN_SET() macro use const arrays (#1147524)
  - macro: make sure we can use IN_SET() also with complex function calls as first argument (#1147524)
  - core: fix property changes in transient units (#1147524)
  - load-modules: properly return a failing error code if some module fails to load (#1147524)
  - core/unit: fix unit_add_target_dependencies() for units with no dependencies (#1147524)
  - man: there is no ExecStopPre= for service units (#1147524)
  - man: document that per-interface sysctl variables are applied as network interfaces show up (#1147524)
  - journal: downgrade vaccuum message to debug level (#1147524)
  - logs-show: fix corrupt output with empty messages (#1147524)
  - journalctl: refuse extra arguments with --verify and similar (#1147524)
  - journal: assume that next entry is after previous entry (#1147524)
  - journal: forget file after encountering an error (#1147524)
  - man: update link to LSB (#1147524)
  - man: systemd-bootchart - fix spacing in command (#1147524)
  - man: add missing comma (#1147524)
  - units: Do not unescape instance name in systemd-backlight@.service (#1147524)
  - manager: flush memory stream before using the buffer (#1147524)
  - man: multiple sleep modes are to be separated by whitespace, not commas (#1147524)
  - man: fix description of systemctl --after/--before (#1147524)
  - udev: properly detect reference to unexisting part of PROGRAM's result (#1147524)
  - gpt-auto-generator: don't return OOM on parentless devices (#1147524)
  - man: improve wording of systemctl's --after/--before (#1147524)
  - cgroup: it's not OK to invoke alloca() in loops (#1147524)
  - core: don't try to relabel mounts before we loaded the policy (#1147524)
  - systemctl: --kill-mode is long long gone, don't mention it in the man page (#1147524)
  - ask-password: when the user types a overly long password, beep and refuse (#1147524)
  - logind: don't print error if devices vanish during ACL-init (#1147524)
  - tty-ask-password-agent: return negative errno (#1147524)
  - journal: cleanup up error handling in update_catalog() (#1147524)
  - bash completion: fix __get_startable_units (#1147524)
  - core: check the right variable for failed open() (#1147524)
  - man: sd_journal_send does nothing when journald is not available (#1147524)
  - man: clarify that the ExecReload= command should be synchronous (#1147524)
  - conf-parser: never consider it an error if we cannot load a drop-in file because it is missing (#1147524)
  - socket: properly handle if our service vanished during runtime (#1147524)
  - Do not unescape unit names in [Install] section (#1147524)
  - util: ignore_file should not allow files ending with '~' (#1147524)
  - core: fix invalid free() in killall() (#1147524)
  - install: fix invalid free() in unit_file_mask() (#1147524)
  - unit-name: fix detection of unit templates/instances (#1147524)
  - journald: make MaxFileSec really default to 1month (#1147524)
  - bootchart: it's not OK to return -1 from a main program (#1147524)
  - journald: Fix off-by-one error in "Missed X kernel messages" warning (#1147524)
  - man: drop references to removed and obsolete 'systemctl load' command (#1147524)
  - units: fix BindsTo= logic when applied relative to services with Type=oneshot (#1147524)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-15
changelog:
  - core: do not segfault if /proc/swaps cannot be opened (#1151239)
  - man: we don't have 'Wanted' dependency (#1152487)
  - environment: append unit_id to error messages regarding EnvironmentFile (#1147691)
  - udevd: add --event-timeout commandline option (#1154778)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-16
changelog:
  - logind: use correct "who" enum values with KillUnit. (#1155502)
  - logind: always kill session when termination is requested (#1155502)
  - udev: net_id - correctly name netdevs based on dev_port when set (#1155996)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-17
changelog:
  - udev: net_id dev_port is base 10 (#1155996)
  - udev: Fix parsing of udev.event-timeout kernel parameter (#1154778)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-20
changelog:
  - core: introduce new Delegate=yes/no property controlling creation of cgroup subhierarchies (#1139223)
  - core: don't migrate PIDs for units that may contain subcgroups, do this only for leaf units (#1139223)
  - mount: use libmount to enumerate /proc/self/mountinfo (#1161417)
  - mount: monitor for utab changes with inotify (#1161417)
  - mount: add remote-fs dependencies if needed after change (#1161417)
  - mount: check options as well as fstype for network mounts (#1161417)
  - rules: don't enable usb pm for Avocent devices (#1155370)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-20.1
changelog:
  - shared/install: avoid prematurely rejecting "missing" units (#1199981)
  - core: fix enabling units via their absolute paths (#1199981)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-20.4
changelog:
  - run: drop mistakenly committed test code (#1220272)
  - cgroup: downgrade log messages when we cannot write to cgroup trees that are mounted read-only (#1220298)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use lib in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-30
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1203365 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1203365 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.7
changelog:
  - Resolves: rhbz#1214286 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.8
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1214286 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.12
changelog:
  - Resolves: rhbz#1226801 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1226180 - Provide a way to disable the cleanup task


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.14
changelog:
  - Resolves: rhbz#1244761 - Relax the libldb requirements to unblock
                             RH Storage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.15
changelog:
  - Resolves: rhbz#1255442 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.16
changelog:
  - Resolves: rhbz#1255443 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.17
changelog:
  - Actually apply the patch for rhbz#1255442
  - Resolves: rhbz#1255442 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.18
changelog:
  - Resolves: rhbz#1268205 - SSSD intermittently fails to resolve external
                             IPA group membership.


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4.2
changelog:
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is accounted for (#1207666)


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - obsolete report in rawhide properly rhbz#723320
  - added button to add attachments
  - ignore backup files
  - improved support for interactive plugins
  - added description text for logger
  - added python bindings for interactive plugins
  - Resolves: #723320


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - enable bugzilla reporter for analyzer=libreport rhbz#725970
  - improved compatibility with anaconda


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-7
changelog:
  - added glob support to event xml files
  - changed handling of long text files
  - added a simple editor as a fallback when no editor is installed (i.e in anaconda) rhbz#728479
  - Resolves: #733448 #728479


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-9
changelog:
  - don't allow sending reports with bad rating rhbz#672023
  - don't allow reporting without duphash rhbz#739182
  - tell users to fill out reports in English rhbz#734037
  - fixed config for kerneloops reporter rhbz#731189
  - Resolves: #672023 #739182 #734037 #731189


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5.982-1
changelog:
  - re-fix rhbz#730887
  - re-fixed prgname (nice icons in gnome3) rhbz#741231
  - Resolves: #741231 #730887


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.7-1
changelog:
  - new version
  - added support for bodhi (preview)
  - dropped unused patches
  - reporter-bugzilla/rhts: add code to prevent duplicate reporting. Closes rhbz#727494 (dvlasenk@redhat.com)
  - wizard: search thru all items + tabbed details rhbz#748457 (jmoskovc@redhat.com)
  - wizard: add "I don't know what caused this problem" checkbox. Closes rhbz#712508 (dvlasenk@redhat.com)
  - reporter-bugzilla: add optional 'Product' parameter. Closes rhbz#665210 (dvlasenk@redhat.com)
  - rhbz#728190 - man pages contain suspicious version string (npajkovs@redhat.com)
  - reporter-print: expand leading ~/ if present. Closes rhbz#737991 (dvlasenk@redhat.com)
  - reporter-rhtsupport: ask rs/problems endpoint before creating new case. (working on rhbz#677052) (dvlasenk@redhat.com)
  - reporter-mailx: use Bugzilla's output format. Closes rhbz#717321. (dvlasenk@redhat.com)
  - report-newt: add option to display version (rhbz#741590) (mlichvar@redhat.com)
  - Resolves: #727494 #748457 #712508 #665210 rhbz#728190 #737991 #677052 #717321 #741590


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-1
changelog:
  - new version
  - added bodhi plugin rhbz#655783
  - one tab per file on details page rhbz#751833
  - search box search thru all data (should help with privacy) rhbz#748457
  - fixed close button position rhbz#741230
  - rise the attachment limit to 4kb rhbz#712602
  - fixed make check (rpath problem)
  - save chnages in editable lines rhbz#710100
  - ignore backup files rhbz#707959
  - added support for proxies rhbz#533652
  - Resolves: 753183 748457 737991 723219 712602 711986 692274 636000 631856 655783 741257 748457 741230 712602 753183 748457 741230 712602 710100 707959 533652


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-2
changelog:
  - fixed crash in bodhi plugin
  - re-upload better backtrace if available
  - fixed dupe finding for selinux
  - don't duplicate comments in bugzilla
  - fixed problem with empty release


author: Nikola Pajkovsky <npajkovs@redhat.com> 2.0.8-4
changelog:
  - 768647 - [abrt] libreport-plugin-bugzilla-2.0.8-3.fc16: libreport_xatou:
             Process /usr/bin/reporter-bugzilla was killed by signal 11 (SIGSEGV)


author: Jakub Filak <jfilak@redhat.com> 2.0.12-1
changelog:
  - new upstream release
  - trac#642: run the next event if the current one finished without errors
  - trac#641: don't allow event chain to continue, if user don't want to steal a directory
  - trac#640: report-gtk replaces 'Forward' button with 'Close' button on finished reporting
  - Fix bugs uncovered by Coverity. Closes rhbz#809416
  - Resolves: #809416


author: Jakub Filak <jfilak@redhat.com> 2.0.12-2
changelog:
  - report-gtk: fixed bug in automatic running of next event
  - don't try to delete dump dir which doesn't exist rhbz#799909
  - Resolves: #799909


author: Jakub Filak <jfilak@redhat.com> 2.0.12-3
changelog:
  - wizard: small changes to message texts and one function name
  - trac#623: dd_opendir() fails if time file doesn't contain valid time stamp
  - trac#660: report-cli asks for premission to send sensitive data
  - trac#660: report-gtk asks for permission to send sensitive data
  - trac#660: report-gtk: introduce generic ask_yes_no() function for options
  - trac#660: add support for sendining-sensitive-data event option
  - Do not check for analyzer == "Kerneloops" when appending "TAINTED" msg
  - fix leaks in list_possible_events()


author: Jakub Filak <jfilak@redhat.com> 2.0.12-4
changelog:
  - rhbz#846389: generate koops description according to rhbz std template
  - trac#556: skip not provided bz bug description template fields
  - report-gtk: don't log THANKYOU message
  - added internal_libreport.h into POTFILES.in rhbz#801255
  - updated po files
  - Resolves: #801255, #846389


author: Jakub Filak <jfilak@redhat.com> 2.0.12-5
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - show message from the server for known uReports
  - trac#678: reporter-bugzilla: do not attach empty files
  - Resolves: #741255


author: Jakub Filak <jfilak@redhat.com> 2.0.13-1
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - reporter-ureport: save backtrace hash to reported_to
  - trac#683: show the description file in bugzilla comment 0
  - trac#684: report-gtk saves only loaded files
  - reporter-ureport: allow sending attachments
  - event_config_dialog: make it resizable; tweak Uploader hint
  - add python binding for problem_data_send_to_abrt
  - reporter-ureport: attach bug ID from reported_to
  - reporter-ureport: make configurable only URL to a server
  - Resolves: #741255


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.14-1
changelog:
  - added error callback to get notification about download failure rhbz#786640
  - rhbz#767186: show a link to a page describing the ABRT configuration
  - spec: silence rpmdiff rhbz#857425
  - don't show the credential in logs rhbz#856960
  - rhbz#852165: warn if adding commands without any rule condition
  - rhbz#851855: process ureport server errors correctly
  - reporter-bugzilla: fix adding users to CC. (Partially?) closes rhbz#841338
  - Resolves: #786640, #767186, #857425, #856960, #852165, #851855, #841338


author: Jakub Filak <jfilak@redhat.com> 2.0.15-1
changelog:
  - remove unnecessary flag from words highlighting functions
  - report-gtk: rework forbidden words highlighting
  - add xmalloc_fopen_fgetline_fclose helper for reading one-line files
  - update GUI before highlighting of forbidden words
  - clear warnings after switching to a next page
  - tweak conditions in show next forbidden word functions
  - reporter-ureport: respect chrooted os_release
  - Fix typos.
  - rhbz#861679: report-gtk: immediately release dump directory lock
  - add a few helpers for reading files as one malloced block


author: Jakub Filak <jfilak@redhat.com> 2.0.16-1
changelog:
  - expand events from a chain and process expanded events separately
  - report-gtk: move selection of event to a right place
  - fix a crash while report-gtk startup (use the correct variable)
  - wizard: allow "non-reportable" reporting for experts; disallow it for non-experts
  - fix typo in function name, remove unnecessary forward declaratioins
  - wizard: fix a thinko in last commit (thanks Jakub)
  - wizard: check for NON_REPORTABLE file, stop if it exists.FILE
  - wizard: remove unnecessary if (1) {...} block. No code changes
  - don't update the selected event while processing it
  - check D-Bus err name without leaking nor crashing
  - ureport: always include offset
  - add Makefile target release-fix
  - Resolves: #864803, #864803, #863595


author: Jakub Filak <jfilak@redhat.com> 2.0.17-1
changelog:
  - update CWD after stealing of a dump directory
  - get product/version from system configuration
  - shorten bz summary if its length exceeds 255 chars
  - add full kerneloops to the uReport
  - reporter-bz: require bz version match when searching for dups. Closes rhbz#849833
  - reporter-bz: eliminate bugzilla_struct::b_product - use auto var instead
  - Move struct bugzilla_struct to its only user, reporter-bugzilla.c
  - reporter-bz: do not needlessly open dd if -f; assorted small fixes
  - added relro to reportclient.so and _pyreport.so rhbz#812283
  - bz reporter: include ROOTDIR, OS_RELEASE_IN_ROOTDIR, EXECUTABLE elements
  - Fix report-newt segfault
  - Resolves: #741647, #812283, #849833, #867118, #869032


author: Jakub Filak <jfilak@redhat.com> 2.0.18-1
changelog:
  - reporter-bz: tighten up checking that BZ server gave us its version; fix recently broken settings parsing
  - reporter-bz: make selinux-policy special case controllable from config file
  - reporter-bz: if we create a new bug but cross-version dup exists, add a note
  - reporter-bz: make rhbz_search_duphash static, use it more widely


author: Jakub Filak <jfilak@redhat.com> 2.0.19-1
changelog:
  - introduce a new formating feature for Bugzilla plugin
  - use gtk_show_uri() instead of own launcher
  - update kerneloops urls
  - don't force the minimal rating trac#854
  - add support for forwarding of report client requests
  - fix i18n in event client communication protocol
  - add event name to the error message - can't get secret item
  - switch all load_conf_file() calls to use skipKeysWithoutValue=false
  - hide the spinner when the event processing is finishes trac#852
  - add a method for loading of configuration of a single event
  - unlock secret collection only on meaningful demand
  - fix secret item look up for gnome-keyring


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.20-1
changelog:
  - New version 2.0.20
  - updated po files
  - add abrt-screencast to POTFILES.in
  - added screen casting support to the wizard
  - fix memory leaks in workflow code
  - report_problem_in_dir(): make LIBREPORT_DEL_DIR work
  - add Yes/No dialog saving answer
  - refactor: move ask_yes_no_save_result from wizard to libreport-gtk
  - added anaconda workflows rhbz#885690
  - report-python: export dd_delete_item too
  - report-python: export DD_OPEN_READONLY too
  - strtrimch: optimize it a bit
  - show only workflows applicable to actual problem directory
  - report-gtk: destroy global text cache only once
  - change rules for FILENAME_NOT_REPORTABLE to always include trailing period.
  - ask for BZ login/BZ pwd if Login attempt failed
  - ask for BZ login/BZ password if not provided by conf
  - remove new line from ask/ask_password responses
  - add ask_yes_no_yesforever() to Python client API
  - make client API independent on translation
  - run_event: use client functions for the communication callbacks
  - clean the workflow buttons when refreshing the event page
  - Fix a bug - inverted check for failed rename() call
  - wrap the not_reportable label .trac#908
  - don't show events without configuration in preferences .trac#881
  - - implemented saving/loading configuratio for workflows - related to trac#822
  - reporter-bz: add AVC's description added to BZ comment
  - add microseconds to dump dir name (problem ID)
  - teach reporter-bugzilla to read BZ ID from reported_to element
  - teach reporter-bugzilla to add reporter to CC
  - introduce a function deleting dd's element
  - introduce a function getting no. of Bytes of dd's element
  - make event config name immutable
  - fixed segv in the last commit
  - made struct workflow private related to trac#822
  - don't show the spinner if the problem is not reportable trac#852
  - made the config_item_info structure private
  - added workflows trac#822
  - added x,--expert cmdline option to enable expert mode
  - switch comment and event selector page
  - use get_ and set_ functions to access event_config_t
  - reporter-bz: don't return NULL on %non_existing_item% - use "" instead
  - refactoring the xml and conf loader code related to trac#822
  - reporter-bugzilla: add a --debug option
  - reporter-bz: fix a summary line formatting bug
  - let logging_callback and post_run_callback members be None
  - expose make_run_event_state_forwarding() in Python API
  - reporter-bz: change syntax of bugzilla_format_*.conf to require "text::", not "text:"
  - reporter-bz: add support for line continuation and simple text in bugzilla_format*.conf


author: Jakub Filak <jfilak@redhat.com> 2.1.0-1
changelog:
  - dd: unify error handling in save_binary_file()
  - dd_sanitize: don't sanitize symlinks
  - rpm: preserve old configuration for <F17 and <REHL7
  - configure: change defaults to be compliant with /var/tmp/abrt
  - configure: fix dump dir mode help string
  - dd: always sanitize mode of saved file
  - rhbz: replace obsolete methods by their substitutes
  - reporter-rhtsupport: improve error detection and logging
  - mailx: remove extra trailing newline in help text
  - spec: add requires section for pygobject3
  - reporter-rhtsupport: retain " Beta" suffix in version. Closes rhbz#896090
  - Fix bugs discoverent by Coverity
  - bz: swap 'bug id' arg with 'item name' arg in attach fn call
  - dd: move dir accessibility check from abrt to libreport
  - don't overwrite "type" rhbz#902828
  - move chown functionality from ABRT DBus to libreport
  - expose configure cmd options for dump dir mode and ownership
  - cli: guard against user ^Z-ing editor and being stuck
  - report-cli: don't close tty fd too early
  - report-cli: switch terminal's fg process group to editor's one; and back
  - dd: open symlinks on request
  - minor fix to the pkg-config file
  - reporter-rhtsupport: extract error message from Strata-Message: header
  - add build time condition for dump dir ownership schema
  - reporter-bz: post a comment to dup bug, if we found a dup. version 2.
  - report-cli: use Client API
  - report-cli: add event name prefix before question
  - run_event: default callbacks for logging and errors
  - make default dump dir mode configurable at build time
  - Stop reading text files one byte at a time
  - make dd_delete_item check that dd is locked
  - never follow symlinks rhbz#887866
  - Revert "reporter-bz: post a comment to dup bug, if we found a dup."
  - wizard: make radio-button text wrap
  - reporter-bz: post a comment to dup bug, if we found a dup.
  - added missing article
  - make the dependency on recordmydesktop soft - related to rhbz#891512
  - cli: use !ec_skip_review as indicator that the event is a reporter
  - Add and use "report-cli" event instead of removed "report-cli -r" option
  - cli: remove superfluous problem_data_free() call
  - uReport: add more explanatory message when upload fails
  - report-cli rework
  - don't require recordmydesktop on RHEL rhbz#891512
  - fixed the relro flags rhbz#812283
  - bugzilla_format_kernel.conf: Attach dmesg element. Closes rhbz#826058
  - bugzilla_format_kernel.conf: fix %summary
  - Make get_dirsize_find_largest_dir less talkative.
  - Minor fixes: robustify start_command(), fix style, fix English in msgs
  - Fix typo, remove c-format from a not c-formatted message
  - Resolves: #826058, #902828


author: Jakub Filak <jfilak@redhat.com> 2.1.1-1
changelog:
  - move 'reporter-mailx' from post-create event to notify(-dup) event
  - reporter-bugzilla: use base64 XMLRPC type for encoded data instead of string type
  - ureport: fix extra quoting when reporting error messages
  - Resolves: #908210


author: Jakub Filak <jfilak@redhat.com> 2.1.2-1
changelog:
  - always treat os-release as textual related to rhbz#922433
  - is_text_file(): bump allowable non-ASCII chars from 2% to 10%. Closes rhbz#922433
  - report-gtk: don't clear warnings after reporting is finished
  - report-gtk: show tabs only in verbose expert mode
  - report-gtk: prettify the workflow buttons rhbz#917694
  - report-gtk: add a button to report reporting failures
  - uReport: do not show URL twice in error output
  - uReport: detect missing type field at client side
  - uReport: add more explanatory message when upload fails
  - uReport: improve messages. Closes #579
  - workflows: a less confusing event name for reporting to Fedora infrastructure
  - workflows: correct an event name for reporting to Fedora in anaconda config
  - fixed workflow localization closes #137
  - run_event_state: expose children_count in python wrapper
  - add the proxy options to the addvanced section of event configurations
  - don't suid before running yum related to rhbz#759443
  - update translation
  - ss: stop reconnecting to the session bus
  - ss: destroy all timeout GSources attached to the main context
  - ss: add a timeout to the waiting for the Completed signal
  - dd: convert time at lock time
  - spawn_next_command: make process group creation optional
  - fork_execv_on_steroids: fix close/move order of fds, move getpwuid out of fork
  - problem API: generate UUID if is missing instead of DUPHASH
  - fix logic of 'Dont ask me again' dialogues (stop returning true for all options)
  - make [p]error_msg[_and_die] more fork-in-multithreaded-app safe
  - Make forking code paths more robust.
  - curl_debug: fix use of "%.*s" (need to pass an int, not size_t)
  - curl_debug: prettify debug output
  - Resolves: #871126, #885055, #890778, #901467, #916389, #917684, #917694, #919536, #922433, #923117


author: Jakub Filak <jfilak@redhat.com> 2.1.3-1
changelog:
  - rhbz: get id of duplicate from correct field
  - change the "exited with" message with something less technical closes #143
  - Integration with satyr
  - dump_dir_accessible_by_uid(): clear errno if error didn't occur
  - reporter-rhtsupport: improve logging
  - reporter-rhtsupport: upload file to BigFileURL if it is large
  - dd: document used errno values in dump_dir_accessible_by_uid()
  - add rhel package with appropriate workflow definitions
  - add workflow definitions for RHEL
  - improve is_text_file() to not treat valid Unicode as bad_chars
  - reporter-rhtsupport: fix double-free error
  - reporter-upload: move file upload function to lib/
  - reporter-upload: factor out HTTP PUT upload
  - reporter-rhtsupport: skip hints check if uploaded data is really large
  - reporter-rhtsupport: make -t[CASE_ID] work without FILEs. Closes #140
  - reporter-rhtsupport: factor out tarball creation
  - RHTS support: regularize order of functions and comments
  - fread_with_reporting: make progress indicator less noisy
  - report-gtk: update excluded elements check boxes before emergency analysis event
  - Resolves: #921941


author: Jakub Filak <jfilak@redhat.com> 2.1.4-1
changelog:
  - support /etc/os-release
  - added flag to not retry locking the incomplete problem dir
  - ureport: save solutions in not-reportable item
  - wizard: make value column click-sortable too
  - wizard: fix clickability of the item list column header
  - wizard: eliminate evd->error_msg member
  - wizard: remove a bunch of evd->foo members
  - debuginfo downloader should enable repos matching *debug* closes #138
  - Replace "THANKYOU" with EXIT_STOP_EVENT_RUN exit code (70)
  - debuginfo downloader: fix DebugInfoDownload::download() error paths.
  - report-gtk: handle user cancellation gracefully
  - logging: refine errors reporting
  - emit a message when searching bugzilla for duplicates closes #151
  - reporter-upload: create tarball with the name based on directory's name
  - reporter-rhtsupport: generate archive name from problem dir name
  - added report-cli event for anaconda should help with rhbz#950544
  - ss: skip option holding NULL values
  - spec: added new event for anaconda reporting rhbz#926916
  - distinguish the event configuration by problem type in the UI closes #149
  - report-gtk: show Next Step btn at workflow start
  - curl upload helper: upload data with "application/octet-stream" content type
  - reporter-rhtsupport: fix hint query to use correct URL


author: Jakub Filak <jfilak@redhat.com> 2.1.5-1
changelog:
  - make the uploader event available for all report types
  - ureport: add conversion from abrt vmcore type to ureport KERNELOOPS type
  - fixed relro flags rhbz#812283
  - rhbz: don't pass NULL in platform argument
  - add function getting information about dump dir for uid
  - anaconda: add proper configuration
  - rhbz: do not try to attach empty files
  - try to delete dump dirs using abrtd in the first step
  - workflow config: use scrollbars instead of enormous window size
  - Resolves: #971117, #958961


author: Jakub Filak <jfilak@redhat.com> 2.1.6-1
changelog:
  - add related packages version in emergency event
  - replace functions deprecated in Gtk-3.10 with their substitutes
  - fixed the bugzilla private group names rhbz#985881
  - workflows: add Anaconda work flow for RHEL
  - add missing manual pages for configuration files, binaries and scripts
  - added options to create private bz tickets rhbz#803772
  - skip the workflow selection if there is only 1 available closes #167
  - added missing workflows for Fedora rhbz#866027
  - spec: double up percent signs in chagelog entries
  - spec: make anaconda package description more generic
  - spec: install RHEL anaconda work flow
  - spec: added new workflow files rhbz#866027
  - spec: build only workflow subpkg relevant for host's OS
  - spec: install all manual pages
  - spec: install only documentation files
  - spec: drop unnecessary Obsoletes and Provides
  - spec: add manual pages to packages
  - spec: specify all config files
  - spec: replace btparser with satyr
  - move non-conf XML files from /etc/libreport/ to /usr/share/libreport/
  - Update satyr support, drop btparser compatibility
  - fixed typo in config file related #866027
  - resize the config window upon collapsing Advanced section
  - rhbz: test xmlrpc env for errors in abrt_xmlrpc_call_params()
  - rhbz: test rhbz_new_bug() return value for errors
  - wizard: show accurate messages
  - spec: add dependency on fros rhbz#958979
  - use fros instead of hard dependency on recordmydesktop rhbz#958979
  - Resolves: #965937, #973167


author: Jakub Filak <jfilak@redhat.com> 2.1.7-1
changelog:
  - Fix problem_item_format() to work properly after 2038 on x32. #691
  - Use proper json-c requirement in libreport-web.pc.
  - abrt-cli info: even -s 10 should show one-liners. #690
  - add checks for existing dumpdir items - closes #164
  - Create helper functions for sha1-hashing strings. #694
  - can now use custom repo filters for enabling repos, related abrt/abrt#688
  - add docstrings, remove global variable - related #171
  - fixed exception handling - closes #173
  - added checks for locked dump directory to dd_* functions, closes #133
  - fixed the symlinks handling in get_file_list abrt/abrt#686
  - make the build in the the build directory to not pollute the source tree
  - fixed debugInfoDownload so that it can process local repos - closes #48
  - Increase text size limit from 1Mb to 8 MB. rhbz#887570.
  - print warning when there is not engough free space for debuginfos, closes #170
  - autogen.sh: improve dependency parser
  - ignore directories without type element - rhbz#958968
  - abrt_xmlrpc: increase XML_SIZE_LIMIT to 4 mbytes. rhbz#961520.
  - ask user to create a private report if it contains sensitive data - rhbz#960549
  - updated translation rhbz#860555
  - updated transifex url
  - do not leak file rhbz#997871
  - in KDE session open URLs in kde-open
  - report-gtk: use wrapped text for warning labels
  - spec: remove abrt-screencast
  - remove obsoleted abrt-screencast
  - Fix create_symlink_lockfile() to not emit ENOENT when asked not to.
  - do not store potentially big data in /tmp
  - New public function create_symlink_lockfile()
  - Resolves: #958968, #981271


author: Jakub Filak <jfilak@redhat.com> 2.1.7-2
changelog:
  - Enable reporting to Red Hat Bugzilla for Anaconda bugs
  - Enable reporting to Red Hat Customer Portal for Anaconda bugs
  - Resolves: #1015554


author: Jakub Filak <jfilak@redhat.com> 2.1.7-4
changelog:
  - Use the RHEL-specific FAF URL by default
  - Load a config file from several directories
  - Resolves: #1031701


author: Jakub Filak <jfilak@redhat.com> 2.1.11-1
changelog:
  - Update translations
  - map_string_t: fix overflow detection in "to int conversion"
  - add type agnostic functions for map_string_t
  - %description spelling fix.
  - remove left over debug stmts from conf files fns
  - spec: remove RHEL files from non-RHEL builds
  - update titles of RHTS workflows
  - spec: add a package which ships Anaconda RHEL BZ WFS
  - add Anaconda Bugzilla reporting workflows for RHEL
  - spec: add a package which ships RHEL Bugzilla workflows
  - add Bugzilla reporting workflows for RHEL
  - remove file options not matching any setting
  - Resolves: #1015093, #1035352, #1035377, #1050152


author: Jakub Filak <jfilak@redhat.com> 2.1.11-2
changelog:
  - define D-Bus configuration interfaces
  - add Java Reporting workflows
  - remove Workflows tab in Preferences
  - Resolves: #1054713, #1055610, #1055633


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - report-cli: use the Client API for communication to user
  - workflow_RHELvmcore: run analyze_VMcore too
  - Resolves: #1058845, #1059651


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-6
changelog:
  - turn off Bugzilla for Anaconda bugs in GA releases
  - Provide SYSLOG_FACILITY when logging through journal
  - KB article URL as a link to help for ABRT configuration
  - load the user list of ignored words
  - localization: properly handle locales with encoding suffix
  - event configuration: load default values from configuration directory
  - Resolves: #1029438, #1062135, #1063320, #1063339, #1063804, #1064261


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - send an ureport before creating a customer case
  - correct name of RH Customer Portal in Anaconda
  - fix suggestion text for screen casting programs
  - fix typos in error messages
  - translation updates
  - Resolves: #1064961, #1069111, #1069340


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - do not export empty configuration options as environment variables
  - translation updates
  - Resolves: #1062498, #1073610


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-12
changelog:
  - localization fixes
  - update man pages
  - provide workflows for logger, mailx, reportuploader
  - uploader: correct capitalization of the event name
  - rhtsupport: re-prompt for credentials
  - rhtsupport: submit ureport
  - uploader: allow secure password/credentials input for crash upload
  - make_description: user-friendly order and add reason to the list
  - make_description: add not_reportable to the list
  - python-report: parse release/version from os-release
  - ureport: Attach portal cases
  - ureport: Add authentication support when sending attachments
  - ureport: Add option to include hostname and machine id in uReport    2014-09-19
  - ureport: Add entitlement HTTP headers when using RHSM certificate authorization  2014-09-19
  - fix: huge debug log messages causing libreport to SEGV   2014-09-22
  - augeas: exclude bugzilla format configurations
  - bugzilla: add comment to closed bugs too
  - SELinux AVC: include 'package' in bugzilla bug reports
  - gui: close dialogues on Enter key
  - gui: fix: collapsing Advanced section in configuration doesn't change size of window
  - gui: allow users to reconfigure libreport and retry reporting
  - Resolves: #965963, #1087866, #1014788, #1104313, #1066486, #1067440, #1101240, #1139987, #1140044, #1067143, #1094203, #1142380, #1139922, #1139557, #1140224, #1087861, #1069917, #1066520, #1075452, #1067123, #1056101, #1084028, #1087866


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-13
changelog:
  - rhtsupport: attach contact email to uReport
  - rhtsupport: send ureport before creating description
  - ureport: fix a bug in the response parser
  - ureport: update the man page
  - uploader: accept empty string as password
  - Resolves: #1150388
  - Related: #1139987, #1066486


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-14
changelog:
  - ureport: don not fail with multiple entitlement certs
  - ureport: don not use uReport_URL in reporter-rhtsupport
  - Related: #1139987, #1140224


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212096, #1217499, #1218610, #1217484


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-23.el7.centos.0.1
changelog:
  - add reporter mantisbt plugin
  - add problem format api
  - set url to public faf server
  - add event for reporting AVCs
  - Resolves bugs.centos#8422


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1198650 SELinux context string size limit
  - Resolves: rhbz#1198649 Add new option for BSI random requirement


author: Paul Wouters <pwouters@redhat.com> - 3.12-7
changelog:
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1211146 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-9
changelog:
  - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]
  - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]


author: Paul Wouters <pwouters@redhat.com> - 3.15-2
changelog:
  - Resolves: rhbz#1259208 CVE-2015-3240
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1270673 ipsec does not work properly on loopback


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1014656 - Split out a samba-winbind-modules package.


author: - Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-4
changelog:
  - resolves: #1034048 - Fix group name substitution in template homedir.
  - resolves: #1018041 - Fix CVE-2013-4408.
  - related: #884169 - Fix several covscan warnings.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-9
changelog:
  - resolves: #1033122 - Fix dropbox regression.
  - resolves: #1040464 - Fix %G substituion for config parameters.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-12
changelog:
  - resolves: #1050886 - Fix full CPU utilization in winbindd.
  - resolves: #1051400 - Fix segfault in smbd.
  - resolves: #1051402 - Fix SMB2 server panic when a smb2 brlock times out.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-17
changelog:
  - resolves: #1067606 - Fix wbinfo with one-way trust.
  - resolves: #1069569 - Fix memory leak reading the printer list.


author: - Alexander Bokovoy <abokovoy@redhat.com> - 4.1.1-30
changelog:
  - resolves: #1083859  - Force KRB5CCNAME in Samba systemd units.
  - related: #1082598 - Fully enables systemd integration.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-34
changelog:
  - resolves: #1105505 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108845 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105574 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-37
changelog:
  - resolves: #1072352 - Make pidl a noarch subpackage.
  - resolves: #1133516 - Create a samba-test-libs package.
  - resolves: #1132873 - Add support to rebuild without clustering.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-2
changelog:
  - resolves: #1138554 - Fix consuming a lot of CPU when re-reading printcap info.
  - resolves: #1134323 - Fix running Samba on little endian Power8 (ppc64le).
  - resolves: #1113064 - Fix case sensitivity options with SMB2 protocols.
  - resolves: #1088924 - Fix applying ACL masks when setting ACLs.
  - resolves: #1135723 - Fix 'force user' regression.
  - resolves: #1117770 - Fix empty full_name field with samlogon.
  - resolves: #1101210 - Fix telling systemd that nmbd is waiting for interfaces.
  - resolves: #1127931 - Fix getgroups() with idmap_ad returning non-mapped groups.
  - resolves: #1144963 - Fix idmap_ad with SFU against trusted domains.
  - resolves: #1140568 - Fix a segfault in the smbclient echo command.
  - resolves: #1089940 - Improve service principal guessing in 'net ads'.
  - resolves: #955561 - Fix overwriting of SPNs in AD during 'net ads join'.
  - resolves: #955562 - Add precreated SPNS from AD during keytab initialization.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.12-3
changelog:
  - resolves: #878351 - Fix usage of AES keys by default.
  - resolves: #861366 - Fix KRB5 locator to use same KDC for joining and DNS update.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-9
changelog:
  - resolves: #1162552 - Fix net ads join segfault on big endian systems.
  - resolves: #1164203 - Fix net ads join segfault with existing keytab.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-11
changelog:
  - resolves: #1163748 - Fix smbclient -L fails against new Windows versions
                         over TCP.
  - resolves: #1167849 - Fix smbstatus --profile always returning EXIT_FAILURE.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-13
changelog:
  - resolves: #1172089 - Fix 'net rpc join' with schannel changes.
  - resolves: #1170883 - Fix 'net time system' segfault.


author: Andreas Schneider <asn@redhat.com> - 4.1.12-18
changelog:
  - resolves: #1179787 - Fix authentication against Kerberos domains.
  - resolves: #1181319 - Package pam_smbpass again.
  - resolves: #1184023 - Fix authentication with long 'netbios_name' set.
  - resolves: #1183546 - Fix 'net time' segfault.


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements


author: Adam Jackson <ajax@redhat.com> 0.7.6-2
changelog:
  - libvirt-0.7.6-add-needed.patch: Fix FTBFS from --no-add-needed
  - Add BuildRequires: xmlrpc-c-client for libxmlrpc_client.so


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support
  - async job handling
  - virtio channel
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - assorted bug fixes and lots of cleanups


author: Cole Robinson <crobinso@redhat.com> - 0.7.7-2.fc14
changelog:
  - Fix USB devices by product with security enabled (bz 574136)
  - Set kernel/initrd in security driver, fixes some URL installs (bz 566425)


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - Upstream release 0.8.0
  - Snapshotting support (QEmu/VBox/ESX)
  - Network filtering API
  - XenAPI driver
  - new APIs for domain events
  - Libvirt managed save API
  - timer subselection for domain clock
  - synchronous hooks
  - API to update guest CPU to host CPU
  - virDomainUpdateDeviceFlags new API
  - migrate max downtime API
  - volume wiping API
  - and many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-1
changelog:
  - Upstream release 0.8.1
  - Starts dnsmasq from libvirtd with --dhcp-hostsfile
  - Add virDomainGetBlockInfo API to query disk sizing
  - a lot of bug fixes and cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.8.2-1
changelog:
  - Upstream release 0.8.2
  - phyp: adding support for IVM
  - libvirt: introduce domainCreateWithFlags API
  - add 802.1Qbh and 802.1Qbg switches handling
  - Support for VirtualBox version 3.2
  - Init script for handling guests on shutdown/boot
  - qemu: live migration with non-shared storage for kvm


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.2-2
changelog:
  - CVE-2010-2237 ignoring defined main disk format when looking up disk backing stores
  - CVE-2010-2238 ignoring defined disk backing store format when recursing into disk
    image backing stores
  - CVE-2010-2239 not setting user defined backing store format when creating new image
  - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for
    obtaining privileged resources on the host


author: Daniel Veillard <veillard@redhat.com> - 0.8.5-1
changelog:
  - Enable JSON and netdev features in QEMU >= 0.13
  - framework for auditing integration
  - framework DTrace/SystemTap integration
  - Setting the number of vcpu at boot
  - Enable support for nested SVM
  - Virtio plan9fs filesystem QEMU
  - Memory parameter controls
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.7-1
changelog:
  - Preliminary support for VirtualBox 4.0
  - IPv6 support
  - Add VMware Workstation and Player driver driver
  - Add network disk support
  - Various improvements and bug fixes
  - from 0.8.6:
  - Add support for iSCSI target auto-discovery
  - QED: Basic support for QED images
  - remote console support
  - support for SPICE graphics
  - sysinfo and VMBIOS support
  - virsh qemu-monitor-command
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.8-1
changelog:
  - expose new API for sysinfo extraction
  - cgroup blkio weight support
  - smartcard device support
  - qemu: Support per-device boot ordering
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.0-1
changelog:
  - Support cputune cpu usage tuning
  - Add public APIs for storage volume upload/download
  - Add public API for setting migration speed on the fly
  - Add libxenlight driver
  - qemu: support migration to fd
  - libvirt: add virDomain{Get,Set}BlkioParameters
  - setmem: introduce a new libvirt API (virDomainSetMemoryFlags)
  - Expose event loop implementation as a public API
  - Dump the debug buffer to libvirtd.log on fatal signal
  - Audit support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.1-1
changelog:
  - support various persistent domain updates
  - improvements on memory APIs
  - Add virDomainEventRebootNew
  - various improvements to libxl driver
  - Spice: support audio, images and stream compression
  - Various improvements and bug fixes


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.1-3
changelog:
  - Add upstream patches:
      0001-json-Avoid-passing-large-positive-64-bit-integers-to.patch
      0001-qemudDomainMemoryPeek-change-ownership-selinux-label.patch
      0002-remote-remove-bogus-virDomainFree.patch
    so that users can try out virt-dmesg.
  - Change /var/cache mode to 0711.


author: Daniel Veillard <veillard@redhat.com> - 0.9.2-1
changelog:
  - Framework for lock manager plugins
  - API for network config change transactions
  - flags for setting memory parameters
  - virDomainGetState public API
  - qemu: allow blkstat/blkinfo calls during migration
  - Introduce migration v3 API
  - Defining the Screenshot public API
  - public API for NMI injection
  - Various improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.2-2
changelog:
  - add rule to require netcf-0.1.8 during build so that new transactional
    network change APIs are included.
  - document that CVE-2011-2178 has been fixed (by virtue of rebase
    to 0.9.2 - see https://bugzilla.redhat.com/show_bug.cgi?id=709777)


author: Daniel Veillard <veillard@redhat.com> - 0.9.3-1
changelog:
  - new API virDomainGetVcpupinInfo
  - Add TXT record support for virtual DNS service
  - Support reboots with the QEMU driver
  - New API virDomainGetControlInfo API
  - New API virNodeGetMemoryStats
  - New API virNodeGetCPUTime
  - New API for send-key
  - New API virDomainPinVcpuFlags
  - support multifunction PCI device
  - lxc: various improvements
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.4-1
changelog:
  - network bandwidth QoS control
  - Add new API virDomainBlockPull*
  - save: new API to manipulate save file images
  - CPU bandwidth limits support
  - allow to send NMI and key event to guests
  - new API virDomainUndefineFlags
  - Implement code to attach to external QEMU instances
  - bios: Add support for SGA
  - various missing python binding
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.5-1
changelog:
  - many snapshot improvements (Eric Blake)
  - latency: Define new public API and structure (Osier Yang)
  - USB2 and various USB improvements (Marc-André Lureau)
  - storage: Add fs pool formatting (Osier Yang)
  - Add public API for getting migration speed (Jim Fehlig)
  - Add basic driver for Microsoft Hyper-V (Matthias Bolte)
  - many improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.6-2
changelog:
  - Make PCI multifunction support more manual - Bug 742836
  - F15 build still uses cgconfig - Bug 738725


author: Daniel Veillard <veillard@redhat.com> - 0.9.8-1
changelog:
  - Add support for QEMU 1.0
  - Add preliminary PPC cpu driver
  - Add new API virDomain{Set, Get}BlockIoTune
  - block_resize: Define the new API
  - Add a public API to invoke suspend/resume on the host
  - various improvements for LXC containers
  - Define keepalive protocol and add virConnectIsAlive API
  - Add support for STP and VLAN filtering
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.9-1
changelog:
  - Add API virDomain{S,G}etInterfaceParameters
  - Add API virDomain{G, S}etNumaParameters
  - Add support for ppc64 qemu
  - Support Xen domctl v8
  - many improvements and bug fixes


author: Cole Robinson <crobinso@redhat.com> - 0.9.11.3-1
changelog:
  - Rebased to version 0.9.11.3
  - Abide URI username when connecting to hypervisor (bz 811397)
  - Fix managed USB mode (bz 814866)
  - Fix crash connecting to ESX host (bz 811891)


author: Daniel Veillard <veillard@redhat.com> - 0.9.12-1
changelog:
  - qemu: allow snapshotting of sheepdog and rbd disks
  - blockjob: add new APIs
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.13-1
changelog:
  - S390: support for s390(x)
  - snapshot: implement new APIs for esx and vbox
  - snapshot: new query APIs and many improvements
  - virsh: Allow users to reedit rejected XML
  - nwfilter: add DHCP snooping
  - Enable driver modules in libvirt RPM
  - Default to enable driver modules for libvirtd
  - storage backend: Add RBD (RADOS Block Device) support
  - sVirt support for LXC domains inprovement
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.10.0-1
changelog:
  - upstream release of 0.10.0
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - driver for parallels hypervisor
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Cole Robinson <crobinso@redhat.com> - 0.10.1-3
changelog:
  - Fix libvirtd segfault with old netcf-libs (bz 853381)
  - Drop unneeded dnsmasq --filterwin2k
  - Fix unwanted connection closing, needed for boxes


author: Daniel Veillard <veillard@redhat.com> - 0.10.2-1
changelog:
  - Upstream release 0.10.2
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - parallels: add support of containers to the driver
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Richard W.M. Jones <rjones@redhat.com> - 0.10.2-3
changelog:
  - Re-add Use-qemu-system-i386-as-binary-instead-of-qemu.patch
    NB: This patch is Fedora-specific and not upstream.
  - Add upstream patches: don't duplicate environment variables (RHBZ#859596).


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.1-1
changelog:
  - Rebased to version 0.10.2.1
  - Fix lvm volume creation when alloc=0 (bz #866481)
  - Clarify virsh send-keys man page example (bz #860004)
  - Fix occasional deadlock via virDomainDestroy (bz #859009)
  - Fix LXC deadlock from ctrl-c (bz #848119)
  - Fix occasional selinux denials with macvtap (bz #798605)
  - Fix multilib conflict with systemtap files (bz #831425)
  - Don't trigger keytab warning in system logs (bz #745203)
  - Fix qemu domxml-2-native NIC model out (bz #636832)
  - Fix error message if not enough space for lvm vol (bz #609104)


author: Jiri Denemark <jdenemar@redhat.com> - 1.0.5-2
changelog:
  - virInitctlRequest: Don't hardcode 384 bytes size
  - network: Fix network driver startup for qemu:///session
  - virInitctlRequest: Unbreak make syntax check
  - virInitctlRequest: Unbreak make syntax check
  - build: Always include sanitytest in tarball
  - qemu: Fix stupid typos in VFIO cgroup setup/teardown
  - build: Always include libvirt_lxc.syms in tarball
  - build: Clean up stray files found by 'make distcheck'
  - spec: Proper soft static allocation of qemu uid
  - Fix F_DUPFD_CLOEXEC operation args
  - build: Fix mingw build of virprocess.c
  - Fix potential use of undefined variable in remote dispatch code
  - build: Avoid non-portable cast of pthread_t
  - Fix release of resources with lockd plugin
  - Fixup rpcgen code on kFreeBSD too
  - Make detect_scsi_host_caps a function on all architectures
  - qemu: Allocate network connections sooner during domain startup
  - tests: Files named '.*-invalid.xml' should fail validation
  - conf: Don't crash on a tpm device with no backends
  - Don't mention disk controllers in generic controller errors
  - iscsi: Don't leak portal string when starting a pool
  - util: Fix virFileOpenAs return value and resulting error logs


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.0-2
changelog:
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - Fix crash when multiple event callbacks were registered (CVE-2013-2230)
  - Paused domain should remain paused after migration (rhbz#981139)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-2
changelog:
  - spec: Change --enable-werror handling to match upstream
  - Delete obsolete / unused python test files (rhbz#884103)
  - Remove reference to python/tests from RPM %doc (rhbz#884103)
  - spec: Explicitly claim ownership of channel subdir (rhbz#884103)
  - Add APIs for formatting systemd slice/scope names (rhbz#980929)
  - Add support for systemd cgroup mount (rhbz#980929)
  - Cope with races while killing processes (rhbz#980929)
  - Enable support for systemd-machined in cgroups creation (rhbz#980929)
  - Ensure LXC/QEMU APIs set the filename for errors (rhbz#991348)
  - Avoid crash if NULL is passed for filename/funcname in logging (rhbz#991348)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-3
changelog:
  - RPC: Don't accept client if it would overcommit max_clients (rhbz#981729)
  - Introduce max_queued_clients (rhbz#981729)
  - conf: Add default USB controller in qemu post-parse callback (rhbz#819968)
  - qemu: Rename some functions in qemu_command.c (rhbz#819968)
  - qemu: Eliminate almost-duplicate code in qemu_command.c (rhbz#819968)
  - qemu: Enable auto-allocate of all PCI addresses (rhbz#819968)
  - qemu: Add pcie-root controller (rhbz#819968)
  - qemu: Add dmi-to-pci-bridge controller (rhbz#819968)
  - qemu: Fix handling of default/implicit devices for q35 (rhbz#819968)
  - qemu: Properly set/use device alias for pci controllers (rhbz#819968)
  - qemu: Enable using implicit sata controller in q35 machines (rhbz#819968)
  - qemu: Improve error reporting during PCI address validation (rhbz#819968)
  - qemu: Refactor qemuDomainCheckDiskPresence for only disk presence check (rhbz#910171)
  - qemu: Add helper functions for diskchain checking (rhbz#910171)
  - qemu: Check presence of each disk and its backing file as well (rhbz#910171)
  - conf: Add startupPolicy attribute for harddisk (rhbz#910171)
  - qemu: Support to drop disk with 'optional' startupPolicy (rhbz#910171)
  - Split TLS test into two separate tests (rhbz#994158)
  - Avoid re-generating certs every time (rhbz#994158)
  - Change data passed into TLS test cases (rhbz#994158)
  - Fix validation of CA certificate chains (rhbz#994158)
  - Fix parallel runs of TLS test suites (rhbz#994158)
  - tests: Fix parallel runs of TLS test suites (rhbz#994158)
  - Add a man page for virtlockd daemon (rhbz#991494)
  - Add an example config file for virtlockd (rhbz#991494)
  - Properly handle -h / -V for --help/--version aliases in virtlockd/libvirtd (rhbz#991494)
  - Make check for /dev/loop device names stricter to avoid /dev/loop-control (rhbz#924815)
  - Ensure securityfs is mounted readonly in container (rhbz#872642)
  - Add info about access control checks into API reference (rhbz#700443)
  - Record the where the auto-generated data comes from (rhbz#700443)
  - Add documentation for access control system (rhbz#700443)
  - virsh-domain: Flip logic in cmdSetvcpus (rhbz#996552)
  - Honour root prefix in lxcContainerMountFSBlockAuto (rhbz#924815)
  - util: Add virGetUserDirectoryByUID (rhbz#988491)
  - Introduce a virt-login-shell binary (rhbz#988491)
  - build: Fix compilation of virt-login-shell.c (rhbz#988491)
  - Fix double-free and broken logic in virt-login-shell (rhbz#988491)
  - Address missed feedback from review of virt-login-shell (rhbz#988491)
  - Ensure that /dev exists in the container root filesystem (rhbz#924815)
  - remote: Fix a segfault in remoteDomainCreateWithFlags (rhbz#994855)
  - build: Avoid -lgcrypt with newer gnutls (rhbz#951637)
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#994158)
  - build: Fix missing max_queued_clients in augeas test file for libvirtd.conf (rhbz#981729)
  - virsh-domain: Fix memleak in cmdCPUBaseline (rhbz#997798)
  - Fix typo in domain name in polkit acl example (rhbz#700443)
  - Update polkit examples to use 'lookup' method (rhbz#700443)
  - Add bounds checking on virDomainMigrate*Params RPC calls (CVE-2013-4292) (rhbz#1002667)
  - Add bounds checking on virDomainGetJobStats RPC call (rhbz#1002667)
  - Add bounds checking on virDomain{SnapshotListAllChildren, ListAllSnapshots} RPC calls (rhbz#1002667)
  - Add bounds checking on virConnectListAllDomains RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllStoragePools RPC call (rhbz#1002667)
  - Add bounds checking on virStoragePoolListAllVolumes RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNetworks RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllInterfaces RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNodeDevices RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNWFilters RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllSecrets RPC call (rhbz#1002667)
  - Prohibit unbounded arrays in XDR protocols (rhbz#1002667)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997906)
  - virbitmaptest: Fix function header formatting (rhbz#997906)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997906)
  - virsh-domain: Fix memleak in cmdUndefine with storage (rhbz#999057)
  - virsh: Modify vshStringToArray to duplicate the elements too (rhbz#999057)
  - virsh: Don't leak list of volumes when undefining domain with storage (rhbz#999057)
  - Fix URI connect precedence (rhbz#999323)
  - tests: Add URI precedence checking (rhbz#999323)
  - Don't free NULL network in cmdNetworkUpdate (rhbz#1001094)
  - virsh: Fix debugging (rhbz#1001628)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1002669)
  - Set security label on FD for virDomainOpenGraphics (rhbz#999925)
  - virsh: Free the caps list properly if one of them is invalid (rhbz#1001957)
  - virsh: Free the formatting string when listing pool details (rhbz#1001957)
  - virsh-pool.c: Don't jump over variable declaration (rhbz#1001957)
  - virsh: Free the list from ListAll APIs even for 0 items (rhbz#1001957)
  - virsh: Free messages after logging them to a file (rhbz#1001957)
  - Reverse logic allowing partial DHCP host XML (rhbz#1001078)
  - virsh: Print cephx and iscsi usage (rhbz#1000155)
  - qemu_conf: Fix broken logic for adding passthrough iscsi lun (rhbz#1000159)
  - Report secret usage error message similarly (rhbz#1000168)
  - docs: Update the formatdomain disk examples (rhbz#1000169)
  - docs: Update formatsecrets to include more examples of each type (rhbz#1000169)
  - docs: Update iSCSI storage pool example (rhbz#1000169)
  - docs: Reformat <disk> attribute description in formatdomain (rhbz#1000169)
  - qemuBuildNicDevStr: Add mq=on for multiqueue networking (rhbz#651941)
  - migration: Do not restore labels on failed migration (rhbz#822052)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1001143)
  - docs: Discourage users to set hard_limit (rhbz#1001143)
  - docs: Clean 09adfdc62de2b up (rhbz#1001143)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1001143)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)
  - qemuDomainAttachHostPciDevice: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-4
changelog:
  - Don't crash in qemuBuildDeviceAddressStr (rhbz#1003526)
  - Fix leaks in python bindings (rhbz#1003828)
  - Process virtlockd.conf instead of libvirtd.conf (rhbz#1003685)
  - test_virtlockd.aug.in: Use the correct file (rhbz#1003685)
  - qemu: Make domain renaming work during migration (rhbz#999352)
  - qemu: Handle huge number of queues correctly (rhbz#651941)
  - conf: Remove the actual hostdev when removing a network (rhbz#1003537)
  - conf: Don't deref NULL actual network in virDomainNetGetActualHostdev() (rhbz#1003537)
  - python: Fix a PyList usage mistake (rhbz#1002558)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004364)
  - Always specify qcow2 compat level on qemu-img command line (rhbz#997977)
  - selinux: Distinguish failure to label from request to avoid label (rhbz#924153)
  - selinux: Enhance test to cover nfs label failure (rhbz#924153)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-5
changelog:
  - Pass AM_LDFLAGS to driver modules too (rhbz#1006299)
  - virsh domjobinfo: Do not return 1 if job is NONE (rhbz#1006864)
  - Fix polkit permission names for storage pools, vols & node devices (rhbz#700443)
  - Fix naming of permission for detecting storage pools (rhbz#700443)
  - security: Provide supplemental groups even when parsing label (CVE-2013-4291) (rhbz#1006513)
  - virFileNBDDeviceAssociate: Avoid use of uninitialized variable (CVE-2013-4297)
  - Rename "struct interface_driver" to virNetcfDriverState (rhbz#983026)
  - netcf driver: Use a single netcf handle for all connections (rhbz#983026)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006722)
  - Add test for the nodemask double free crash (rhbz#1006722)
  - qemu: Fix checking of guest ABI compatibility when reverting snapshots (rhbz#1006886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-6
changelog:
  - Also store user & group ID values in virIdentity (rhbz#1006272)
  - Ensure system identity includes process start time (rhbz#1006272)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)
  - Free slicename in virSystemdCreateMachine (rhbz#1008619)
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1008340)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1008340)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1008340)
  - qemu: Avoid dangling job in qemuDomainSetBlockIoTune (rhbz#700443)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-7
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - LXC: Don't mount securityfs when user namespace enabled (rhbz#872648)
  - Move array of mounts out of lxcContainerMountBasicFS (rhbz#872648)
  - Ensure root filesystem is recursively mounted readonly (rhbz#872648)
  - qemu: Fix seamless SPICE migration (rhbz#1010861)
  - qemu: Use "ide" as device name for implicit SATA controller on Q35 (rhbz#1008903)
  - qemu: Only parse basename when determining emulator properties (rhbz#1010617)
  - qemu: Recognize -machine accel=kvm when parsing native (rhbz#1010617)
  - qemu: Don't leave shutdown inhibited on attach failure (rhbz#1010617)
  - qemu: Don't leak vm on failure (rhbz#1010617)
  - Fix typo in identity code which is pre-requisite for CVE-2013-4311 (rhbz#1006272)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-8
changelog:
  - conf: Don't crash on invalid chardev source definition of RNGs and other (rhbz#1012196)
  - rpc: Increase bound limit for virDomainGetJobStats (rhbz#1012818)
  - qemu: Free all driver data in qemuStateCleanup (rhbz#1011330)
  - qemu: Don't leak reference to virQEMUDriverConfigPtr (rhbz#1011330)
  - qemu: Eliminate redundant if clauses in qemuCollectPCIAddress (rhbz#1003983)
  - qemu: Allow some PCI devices to be attached to PCIe slots (rhbz#1003983)
  - qemu: Replace multiple strcmps with a switch on an enum (rhbz#1003983)
  - qemu: Support ich9-intel-hda audio device (rhbz#1003983)
  - qemu: Turn if into switch in qemuDomainValidateDevicePCISlotsQ35 (rhbz#1003983)
  - qemu: Prefer to put a Q35 machine's dmi-to-pci-bridge at 00:1E.0 (rhbz#1003983)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-9
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014503)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014503)
  - qemu: Check actual netdev type rather than config netdev type during init (rhbz#1012824)
  - Fix crash in libvirtd when events are registered & ACLs active (CVE-2013-4399) (rhbz#1011429)
  - Remove virConnectPtr arg from virNWFilterDefParse* (rhbz#1015108)
  - Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (rhbz#1015108)
  - Remove use of virConnectPtr from all remaining nwfilter code (rhbz#1015108)
  - Don't set netdev offline in container cleanup (rhbz#1014604)
  - Avoid reporting an error if veth device is already deleted (rhbz#1014604)
  - Avoid deleting NULL veth device name (rhbz#1014604)
  - Retry veth device creation on failure (rhbz#1014604)
  - Use 'vnet' as prefix for veth devices (rhbz#1014604)
  - Free cmd in virNetDevVethDelete (rhbz#1014604)
  - Free cmd in virNetDevVethCreate (rhbz#1014604)
  - LXC: Fix handling of RAM filesystem size units (rhbz#1015689)
  - build: Add lxc testcase to dist list (rhbz#1015689)
  - tests: Work with older dbus (rhbz#1018730)
  - virdbus: Add virDBusHasSystemBus() (rhbz#1018730)
  - virsystemd: Don't fail to start VM if DBus isn't available or compiled in (rhbz#1018730)
  - DBus: Introduce virDBusIsServiceEnabled (rhbz#1018730)
  - Change way we fake dbus method calls (rhbz#1018730)
  - Fix virsystemdtest for previous commit (rhbz#1018730)
  - LXC: Workaround machined uncleaned data with containers running systemd. (rhbz#1018730)
  - Allow use of a private dbus bus connection (rhbz#998365)
  - Add a method for closing the dbus system bus connection (rhbz#998365)
  - Make LXC controller use a private dbus connection & close it (rhbz#998365)
  - Fix flaw in detecting log format (rhbz#927072)
  - Fix exit status of lxc controller (rhbz#927072)
  - Improve error reporting with LXC controller (rhbz#927072)
  - nwfilter: Don't fail to start if DBus isn't available (rhbz#927072)
  - Don't ignore all dbus connection errors (rhbz#927072)
  - LXC: Check the existence of dir before resolving symlinks (rhbz#927072)
  - Ensure lxcContainerMain reports errors on stderr (rhbz#927072)
  - Ensure lxcContainerResolveSymlinks reports errors (rhbz#927072)
  - Improve log filtering in virLXCProcessReadLogOutputData (rhbz#927072)
  - Initialize threading & error layer in LXC controller (rhbz#1018725)
  - qemu_migration: Avoid crashing if domain dies too quickly (rhbz#1018267)
  - Convert uuid to a string before printing it (rhbz#1019023)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-10
changelog:
  - qemu_process: Make qemuProcessReadLog() more versatile and reusable (rhbz#1001738)
  - qemu: monitor: Add infrastructure to access VM logs for better err msgs (rhbz#1001738)
  - qemu: monitor: Produce better errors on monitor hangup (rhbz#1001738)
  - qemu: Wire up better early error reporting (rhbz#1001738)
  - qemu: process: Silence coverity warning when rewinding log file (rhbz#1001738)
  - qemu: hostdev: Refactor PCI passhrough handling (rhbz#1001738)
  - qemu: hostdev: Fix function spacing and header formatting (rhbz#1001738)
  - qemu: hostdev: Add checks if PCI passthrough is available in the host (rhbz#1001738)
  - qemu: Prefer VFIO for PCI device passthrough (rhbz#1001738)
  - qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (rhbz#1001738)
  - Fix max stream packet size for old clients (rhbz#950416)
  - Adjust legacy max payload size to account for header information (rhbz#950416)
  - rpc: Correct the wrong payload size checking (rhbz#950416)
  - qemu: Simplify calling qemuDomainHostdevNetConfigRestore (rhbz#1005682)
  - qemu: Move qemuDomainRemoveNetDevice to avoid forward reference (rhbz#1005682)
  - qemu: Fix removal of <interface type='hostdev'> (rhbz#1005682)
  - remote: Fix regression in event deregistration (rhbz#1020376)
  - qemu: managedsave: Add support for compressing managed save images (rhbz#1017227)
  - qemu: snapshot: Add support for compressing external snapshot memory (rhbz#1017227)
  - Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#1015215)
  - qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - qemu_conf: Introduce "migration_address" (rhbz#1015215)
  - qemu: Include listenAddress in debug prints (rhbz#1015215)
  - docs: Expand description of host-model CPU mode (rhbz#1014682)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1019237)
  - qemu: Make migration port range configurable (rhbz#1019237)
  - qemu: Fix augeas support for migration ports (rhbz#1019237)
  - Fix perms for virConnectDomainXML{To, From}Native (CVE-2013-4401)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-11
changelog:
  - Add helpers for getting env vars in a setuid environment (rhbz#1015247)
  - Only allow 'stderr' log output when running setuid (CVE-2013-4400)
  - Close all non-stdio FDs in virt-login-shell (CVE-2013-4400)
  - Don't link virt-login-shell against libvirt.so (CVE-2013-4400)
  - build: Fix linking virt-login-shell (rhbz#1015247)
  - build: Fix build of virt-login-shell on systems with older gnutls (rhbz#1015247)
  - Set a sane $PATH for virt-login-shell (rhbz#1015247)
  - spec: Fix rpm build when lxc disabled (rhbz#1015247)
  - Move virt-login-shell into libvirt-login-shell sub-RPM (rhbz#1015247)
  - Make virCommand env handling robust in setuid env (rhbz#1015247)
  - Remove all direct use of getenv (rhbz#1015247)
  - Block all use of getenv with syntax-check (rhbz#1015247)
  - Only allow the UNIX transport in remote driver when setuid (rhbz#1015247)
  - Don't allow remote driver daemon autostart when running setuid (rhbz#1015247)
  - Add stub getegid impl for platforms lacking it (rhbz#1015247)
  - Remove (nearly) all use of getuid()/getgid() (rhbz#1015247)
  - Block all use of libvirt.so in setuid programs (rhbz#1015247)
  - spec: Clean up distribution of ChangeLog (and others) (rhbz#1024393)
  - Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (rhbz#1024393)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-12
changelog:
  - virpci: Don't error on unbinded devices (rhbz#1019387)
  - network: Fix connections count in case of allocate failure (rhbz#1020135)
  - qemu: Clean up migration ports when migration cancelled (rhbz#1019237)
  - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (rhbz#1022393)
  - Allow root directory in filesystem source dir schema (rhbz#1028107)
  - Use a port from the migration range for NBD as well (rhbz#1025699)
  - qemu: Avoid double free of VM (rhbz#1018267)
  - util: Use size_t instead of unsigned int for num_virtual_functions (rhbz#1025397)
  - pci: Properly handle out-of-order SRIOV virtual functions (rhbz#1025397)
  - conf: Do better job when comparing features ABI compatibility (rhbz#1008989)
  - schema: Rename option 'hypervtristate' to 'featurestate' (rhbz#1008989)
  - conf: Mark user provided strings in error messages when parsing XML (rhbz#1008989)
  - cpu: Add support for loading and storing CPU data (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86Data as virCPUx86Data (rhbz#1008989)
  - cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (rhbz#1008989)
  - Ensure 'arch' is always set in cpuArchNodeData (rhbz#1008989)
  - cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (rhbz#1008989)
  - cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (rhbz#1008989)
  - cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (rhbz#1008989)
  - cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (rhbz#1008989)
  - cpu: x86: Use whitespace to clarify context and use consistent labels (rhbz#1008989)
  - cpu: x86: Clean up error messages in x86VendorLoad() (rhbz#1008989)
  - cpu: Export few x86-specific APIs (rhbz#1008989)
  - cpu: x86: Parse the CPU feature map only once (rhbz#1008989)
  - cpu_x86: Refactor storage of CPUID data to add support for KVM features (rhbz#1008989)
  - qemu: Add monitor APIs to fetch CPUID data from QEMU (rhbz#1008989)
  - cpu: x86: Add internal CPUID features support and KVM feature bits (rhbz#1008989)
  - conf: Refactor storing and usage of feature flags (rhbz#1008989)
  - qemu: Add support for paravirtual spinlocks in the guest (rhbz#1008989)
  - qemu: process: Validate specific CPUID flags of a guest (rhbz#1008989)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-13
changelog:
  - virsh-domain: Mark --live and --config mutually exclusive in vcpucount (rhbz#1024245)
  - virSecurityLabelDefParseXML: Don't parse label on model='none' (rhbz#1028962)
  - qemuMonitorIO: Don't use @mon after it's unrefed (rhbz#1018267)
  - qemu: Allow hotplug of multiple SCSI devices (rhbz#1031062)
  - qemu: Call qemuSetupHostdevCGroup later during hotplug (rhbz#1025108)
  - virscsi: Hostdev SCSI AdapterId retrieval fix (rhbz#1031079)
  - storage: Returns earlier if source adapter of the scsi pool is a HBA (rhbz#1027680)
  - spec: Restrict virt-login-shell usage (rhbz#1033614)
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - Don't start a nested job in qemuMigrationPrepareAny (rhbz#1018267)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-14
changelog:
  - nodedev: Resolve Relax-NG validity error (rhbz#1035792)
  - test-lib: Make case skipping possible (rhbz#1034380)
  - tests: Don't test user config file if ran as root (rhbz#1034380)
  - Improve cgroups docs to cover systemd integration (rhbz#1004340)
  - Fix busy wait loop in LXC container I/O handling (rhbz#1032705)
  - tests: Guarantee abs_srcdir in all C tests (rhbz#1035403)
  - Introduce standard methods for sorting strings with qsort (rhbz#1035403)
  - Add virFileIsMountPoint function (rhbz#1035403)
  - Pull lxcContainerGetSubtree out into shared virfile module (rhbz#1035403)
  - Fix bug in identifying sub-mounts (rhbz#1035403)
  - LXC: Ensure security context is set when mounting images (rhbz#923903)
  - Ensure to zero out the virDomainBlockJobInfo arg (rhbz#1028846)
  - qemu: Default to vfio for nodedev-detach (rhbz#1035188)
  - daemon: Run virStateCleanup conditionally (rhbz#1033061)
  - qemu: Add "-boot strict" to commandline whenever possible (rhbz#1037593)
  - tests: Add forgotten boot-strict test files (rhbz#1037593)
  - conf: Fix XML formatting of RNG device info (rhbz#1035118)
  - qemu: Improve error when setting invalid count of vcpus via agent (rhbz#1035108)
  - Add qxl ram size to ABI stability check (rhbz#1035123)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-15
changelog:
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - qemu: hotplug: Only label hostdev after checking device conflicts (rhbz#1025108)
  - qemu: hotplug: Fix double free on USB collision (rhbz#1025108)
  - qemu: hotplug: Fix adding USB devices to the driver list (rhbz#1025108)
  - docs: Enhance memoryBacking/locked documentation (rhbz#1035954)
  - util: Fix two virCompareLimitUlong bugs (rhbz#1024272)
  - cgroups: Redefine what "unlimited" means wrt memory limits (rhbz#1024272)
  - qemu: Report VIR_DOMAIN_MEMORY_PARAM_UNLIMITED properly (rhbz#1024272)
  - qemu: Fix minor inconsistency in error message (rhbz#1024272)
  - conf: Don't format memtune with unlimited values (rhbz#1024272)
  - qemu_process: Read errors from child (rhbz#1035955)
  - network: Properly update iptables rules during net-update (rhbz#1035336)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1039991)
  - screenshot: Implement multiple screen support (rhbz#1026966)
  - Switch to private redhat namespace for QMP I/O error reason (rhbz#1026966)
  - Support virtio disk hotplug in JSON mode (rhbz#1026966)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-16
changelog:
  - qemu: Check for reboot-timeout on monitor (rhbz#1042690)
  - virsh: Fix return value error of cpu-stats (rhbz#1043388)
  - tools: Fix virsh connect man page (rhbz#1043260)
  - conf: Introduce generic ISA address (rhbz#996520)
  - conf: Add support for panic device (rhbz#996520)
  - qemu: Add support for -device pvpanic (rhbz#996520)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1043864)
  - virsh: man: Mention that volumes need to be in storage pool for undefine (rhbz#1044445)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-18
changelog:
  - qemu: Ask for -enable-fips when FIPS is required (rhbz#1035474)
  - qemu: Properly set MaxMemLock when hotplugging with VFIO (rhbz#1035490)
  - qemu: Avoid duplicate security label restore on hostdev attach failure (rhbz#1035490)
  - qemu: Re-add hostdev interfaces to hostdev array on libvirtd restart (rhbz#1045002)
  - domain: Don't try to interpret <driver> as virtio config for hostdev interfaces (rhbz#1046337)
  - virBitmapParse: Fix behavior in case of error and fix up callers (rhbz#1047234)
  - qemu: Fix live pinning to memory node on NUMA system (rhbz#1047234)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1047234)
  - qemu: Range check numa memory placement mode (rhbz#1047234)
  - virkeycode: Allow ANSI_A (rhbz#1044806)
  - Fix argument order of qemuMigrationPerformJob(). (rhbz#1049338)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1048643)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - PanicCheckABIStability: Need to check for existence (rhbz#996520)
  - virsh: Improve usability of '--print-xml' flag for attach-disk command (rhbz#1049529)
  - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1049529)
  - virsh: Use inactive definition when removing disk from config (rhbz#1049529)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-19
changelog:
  - CVE-2013-6436: Fix crash in lxcDomainGetMemoryParameters (rhbz#1049137)
  - Fix crash in lxcDomainSetMemoryParameters (rhbz#1052062)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)
  - qemu: Change the default unix monitor timeout (rhbz#892273)
  - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (rhbz#996543)
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1054785)
  - virt-login-shell: Fix regressions in behavior (rhbz#1015247)
  - pci: Make reattach work for unbound devices (rhbz#1046919)
  - pci: Fix failure paths in detach (rhbz#1046919)
  - qemu: Don't detach devices if passthrough doesn't work (rhbz#1046919)
  - Fix migration with QEMU 1.6 (rhbz#1053405)
  - build: More workarounds for if_bridge.h (rhbz#1042937)
  - build: Fix build with latest rawhide kernel headers (rhbz#1042937)
  - aarch64: Disable -fstack-protector. (rhbz#1042937)
  - AArch64: Parse cputopology from /proc/cpuinfo. (rhbz#1042937)
  - virDomainEventCallbackListFree: Don't leak @list->callbacks (rhbz#1047964)
  - Fix memory leak in virObjectEventCallbackListRemoveID() (rhbz#1047964)
  - event: Filter global events by domain:getattr ACL (CVE-2014-0028)
  - Doc: Improve the document for nodesuspend (rhbz#1045089)
  - Doc: Add "note" for node-memory-tune (rhbz#1045089)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-21
changelog:
  - util: Correct the NUMA node range checking (rhbz#1045958)
  - storage: Add document for possible problem on volume detection (rhbz#726797)
  - storage: Fix autostart of pool with "fc_host" type adapter (rhbz#726797)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-22
changelog:
  - Add a read/write lock implementation (rhbz#1034807)
  - Push nwfilter update locking up to top level (rhbz#1034807)
  - utils: Introduce functions for kernel module manipulation (rhbz#1045124)
  - virCommand: Introduce virCommandSetDryRun (rhbz#1045124)
  - tests: Add test for new virkmod functions (rhbz#1045124)
  - Honor blacklist for modprobe command (rhbz#1045124)
  - qemu: Be sure we're using the updated value of backend during hotplug (rhbz#1056360)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#1061099)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1061099)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1061099)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-23
changelog:
  - Generate a valid imagelabel even for type 'none' (rhbz#1061657)
  - qemu: keep pre-migration domain state after failed migration (rhbz#1057407)
  - schema: Fix guest timer specification schema according to the docs (rhbz#1056205)
  - conf: Enforce supported options for certain timers (rhbz#1056205)
  - qemu: hyperv: Add support for timer enlightenments (rhbz#1056205)
  - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (rhbz#1062665)
  - util: Add "shareable" field for virSCSIDevice struct (rhbz#957292)
  - util: Fix the indention (rhbz#957292)
  - qemu: Don't fail if the SCSI host device is shareable between domains (rhbz#957292)
  - util: Add one argument for several scsi utils (rhbz#957292)
  - tests: Add tests for scsi utils (rhbz#957292)
  - qemu: Fix the error message for scsi host device's shareable checking (rhbz#957292)
  - util: Accept test data path for scsi device's sg_path (rhbz#957292)
  - tests: Modify the scsi util tests (rhbz#957292)
  - event: move event filtering to daemon (regression fix) (rhbz#1047964)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-24
changelog:
  - Block info query: Add check for transient domain (rhbz#1065531)
  - Fix minor typos in messages and docs (rhbz#1045643)
  - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (rhbz#1045643)
  - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (rhbz#1045643)
  - maint: fix comment typos (rhbz#1045643)
  - storage: avoid short reads while chasing backing chain (rhbz#1045643)
  - Don't block use of USB with containers (rhbz#1045643)
  - Fix path used for USB device attach with LXC (rhbz#1045643)
  - Record hotplugged USB device in LXC live guest config (rhbz#1045643)
  - Fix reset of cgroup when detaching USB device from LXC guests (rhbz#1045643)
  - Disks are always block devices, never character devices (rhbz#1045643)
  - Move check for cgroup devices ACL upfront in LXC hotplug (rhbz#1045643)
  - Add virFileMakeParentPath helper function (rhbz#1045643)
  - Add helper for running code in separate namespaces (rhbz#1045643)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (CVE-2013-6456)
  - Ignore additional fields in iscsiadm output (rhbz#1067173)
  - qemuBuildNicDevStr: Set vectors= on Multiqueue (rhbz#1066209)
  - Don't depend on syslog.service (rhbz#1032695)
  - libvirt-guests: Run only after libvirtd (rhbz#1032695)
  - virSystemdCreateMachine: Set dependencies for slices (rhbz#1032695)
  - libvirt-guests: Wait for libvirtd to initialize (rhbz#1032695)
  - virNetServerRun: Notify systemd that we're accepting clients (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-25
changelog:
  - maint: fix comma style issues: conf (rhbz#1032370)
  - Allow <source> for type=block to have no dev (rhbz#1032370)
  - Allow LUN type disks to have no source (rhbz#1032370)
  - virsh-volume: Unify strigification of volume type (rhbz#1032370)
  - conf: Refactor virDomainDiskSourcePoolDefParse (rhbz#1032370)
  - conf: Split out code to parse the source of a disk definition (rhbz#1032370)
  - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (rhbz#1032370)
  - conf: Refactor virDomainDiskSourceDefParse (rhbz#1032370)
  - storage: fix RNG validation of gluster via netfs (rhbz#1032370)
  - maint: fix comment typos. (rhbz#1032370)
  - storage: use valid XML for awkward volume names (rhbz#1032370)
  - build: Don't fail on '&lt; ' or '&gt; ' with old xmllint (rhbz#1032370)
  - storage: allow interleave in volume XML (rhbz#1032370)
  - storage: expose volume meta-type in XML (rhbz#1032370)
  - storage: initial support for linking with libgfapi (rhbz#1032370)
  - storage: document existing pools (rhbz#1032370)
  - storage: document gluster pool (rhbz#1032370)
  - storage: implement rudimentary glusterfs pool refresh (rhbz#1032370)
  - storage: add network-dir as new storage volume type (rhbz#1032370)
  - storage: improve directory support in gluster pool (rhbz#1032370)
  - storage: improve allocation stats reported on gluster files (rhbz#1032370)
  - storage: improve handling of symlinks in gluster (rhbz#1032370)
  - storage: probe qcow2 volumes in gluster pool (rhbz#1032370)
  - storage: fix typo in previous patch (rhbz#1032370)
  - conf: Export virStorageVolType enum helper functions (rhbz#1032370)
  - test: Implement fake storage pool driver in qemuxml2argv test (rhbz#1032370)
  - storage: reduce number of stat calls (rhbz#1032370)
  - storage: use simpler 'char *' (rhbz#1032370)
  - storage: refactor backing chain division of labor (rhbz#1032370)
  - storage: always probe type with buffer (rhbz#1032370)
  - storage: don't read storage volumes in nonblock mode (rhbz#1032370)
  - storage: skip selinux cleanup when fd not available (rhbz#1032370)
  - storage: use correct type for array count (rhbz#1032370)
  - storage: allow interleave in pool XML (rhbz#1032370)
  - qemuxml2argv: Add test to verify correct usage of disk type="volume" (rhbz#1032370)
  - qemuxml2argv: Add test for disk type='volume' with iSCSI pools (rhbz#1032370)
  - tests: Fix comment for fake storage pool driver (rhbz#1032370)
  - conf: Support disk source formatting without needing a virDomainDiskDefPtr (rhbz#1032370)
  - conf: Clean up virDomainDiskSourceDefFormatInternal (rhbz#1032370)
  - conf: Split out seclabel formating code for disk source (rhbz#1032370)
  - conf: Export disk source formatter and parser (rhbz#1032370)
  - snapshot: conf: Use common parsing and formatting functions for source (rhbz#1032370)
  - snapshot: conf: Fix NULL dereference when <driver> element is empty (rhbz#1032370)
  - conf: Add functions to copy and free network disk source definitions (rhbz#1032370)
  - qemu: snapshot: Detect internal snapshots also for sheepdog and RBD (rhbz#1032370)
  - conf: Add helper do clear disk source authentication struct (rhbz#1032370)
  - qemu: snapshot: Touch up error message (rhbz#1032370)
  - qemu: snapshot: Add functions similar to disk source pool translation (rhbz#1032370)
  - qemu: Refactor qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: Split out formatting of network disk source URI (rhbz#1032370)
  - qemu: Simplify call pattern of qemuBuildDriveURIString (rhbz#1032370)
  - qemu: Use qemuBuildNetworkDriveURI to handle http/ftp and friends (rhbz#1032370)
  - qemu: Migrate sheepdog source generation into common function (rhbz#1032370)
  - qemu: Split out NBD command generation (rhbz#1032370)
  - qemu: Unify formatting of RBD sources (rhbz#1032370)
  - qemu: Refactor disk source string formatting (rhbz#1032370)
  - qemu: Clear old translated pool source (rhbz#1032370)
  - qemu: snapshots: Declare supported and unsupported snapshot configs (rhbz#1032370)
  - domainsnapshotxml2xmltest: Clean up labels and use bool instead of int (rhbz#1032370)
  - domainsnapshotxml2xmltest: Allow for better testing of snapshots (rhbz#1032370)
  - domainsnapshotxml2xml: Move files with conflicting names (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add existing files as new tests (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add test case for empty driver element (rhbz#1032370)
  - qemu: Fix indentation in qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: snapshot: Fix incorrect disk type for auto-generated disks (rhbz#1032370)
  - storage: fix omitted slash in gluster volume URI (rhbz#1032370)
  - virsh: domain: Fix undefine with storage of 'volume' disks (rhbz#1032370)
  - snapshot: schema: Split out snapshot disk driver definition (rhbz#1032370)
  - storage: Add gluster pool filter and fix virsh pool listing (rhbz#1032370)
  - storage: fix bogus target in gluster volume xml (rhbz#1032370)
  - storage: Improve error message when a storage backend is missing (rhbz#1032370)
  - storage: Break long lines and clean up spaces in storage backend header (rhbz#1032370)
  - storage: Support deletion of volumes on gluster pools (rhbz#1032370)
  - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (rhbz#1032370)
  - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (rhbz#1034993)
  - qemu: Avoid crash in qemuDiskGetActualType (rhbz#1032370)
  - snapshot: Add support for specifying snapshot disk backing type (rhbz#1032370)
  - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (rhbz#1032370)
  - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (rhbz#1032370)
  - storage: Add file storage APIs in the default storage driver (rhbz#1032370)
  - storage: add file functions for local and block files (rhbz#1032370)
  - storage: Add storage file backends for gluster (rhbz#1032370)
  - qemu: Switch snapshot deletion to the new API functions (rhbz#1032370)
  - qemu: snapshot: Use new APIs to detect presence of existing storage files (rhbz#1032370)
  - qemu: snapshot: Add support for external active snapshots on gluster (rhbz#1032370)
  - storage: Fix build with older compilers afeter gluster snapshot series (rhbz#1032370)
  - storage: gluster: Don't leak private data when storage file init fails (rhbz#1032370)
  - spec: Use correct versions of libgfapi in RHEL builds (rhbz#1032370)
  - spec: Fix braces around macros (rhbz#1032370)
  - build: use --with-systemd-daemon as configure option (rhbz#1032695)
  - spec: require device-mapper-devel for storage-disk (rhbz#1032695)
  - spec: make systemd_daemon usage configurable (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-26
changelog:
  - virNetDevVethCreate: Serialize callers (rhbz#1014604)
  - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (rhbz#1071888)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-27
changelog:
  - spec: Let translations be properly updated (rhbz#1030368)
  - Update translation to supported languages (rhbz#1030368)
  - Add a mutex to serialize updates to firewall (rhbz#1074003)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-28
changelog:
  - qemu: Forbid "sgio" support for SCSI generic host device (rhbz#957292)
  - qemu: monitor: Fix invalid parentheses (rhbz#1075973)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1076503)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29
changelog:
  - nwfilter: Increase buffer size for libpcap (rhbz#1078347)
  - nwfilter: Display pcap's error message when pcap setup fails (rhbz#1078347)
  - nwfilter: Fix double free of pointer (rhbz#1071181)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.7-1
changelog:
  - Rebased to libvirt-1.2.7 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#823535, rhbz#872628, rhbz#874418, rhbz#878394, rhbz#880483
      rhbz#921094, rhbz#963817, rhbz#964177, rhbz#967493, rhbz#967494
      rhbz#972964, rhbz#983350, rhbz#985782, rhbz#985980, rhbz#990319
      rhbz#990418, rhbz#991290, rhbz#992980, rhbz#994731, rhbz#995377
      rhbz#997627, rhbz#997802, rhbz#1006700, rhbz#1007698, rhbz#1007759
      rhbz#1010885, rhbz#1022874, rhbz#1023366, rhbz#1025407, rhbz#1027076
      rhbz#1029266, rhbz#1029732, rhbz#1032363, rhbz#1033020, rhbz#1033398
      rhbz#1033704, rhbz#1035128, rhbz#1046192, rhbz#1049038, rhbz#1052114
      rhbz#1056902, rhbz#1062142, rhbz#1063837, rhbz#1066280, rhbz#1066894
      rhbz#1067338, rhbz#1069552, rhbz#1069784, rhbz#1070680, rhbz#1072141
      rhbz#1072677, rhbz#1073368, rhbz#1073506, rhbz#1074086, rhbz#1075290
      rhbz#1075299, rhbz#1076957, rhbz#1076959, rhbz#1076960, rhbz#1076962
      rhbz#1077009, rhbz#1077572, rhbz#1078590, rhbz#1079162, rhbz#1079173
      rhbz#1080859, rhbz#1081881, rhbz#1081932, rhbz#1082124, rhbz#1083345
      rhbz#1084360, rhbz#1085706, rhbz#1085769, rhbz#1086121, rhbz#1086331
      rhbz#1086704, rhbz#1087104, rhbz#1087671, rhbz#1088293, rhbz#1088667
      rhbz#1088787, rhbz#1088864, rhbz#1089179, rhbz#1089378, rhbz#1091132
      rhbz#1091866, rhbz#1092038, rhbz#1092253, rhbz#1093127, rhbz#1095035
      rhbz#1097028, rhbz#1097503, rhbz#1097677, rhbz#1097968, rhbz#1098659
      rhbz#1099978, rhbz#1100086, rhbz#1100769, rhbz#1101059, rhbz#1101510
      rhbz#1101987, rhbz#1101999, rhbz#1102426, rhbz#1102457, rhbz#1102611
      rhbz#1104992, rhbz#1104993, rhbz#1105939, rhbz#1108593, rhbz#1110198
      rhbz#1110212, rhbz#1110673, rhbz#1111044, rhbz#1112939, rhbz#1113332
      rhbz#1113668, rhbz#1113751, rhbz#1113868, rhbz#1118710, rhbz#1119206
      rhbz#1119387, rhbz#1119592, rhbz#1120474, rhbz#1122255, rhbz#1122973
  - spec: Enable qemu driver for RHEL-7 on ppc64 (rhbz#1120474)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-1
changelog:
  - Rebased to libvirt-1.2.8 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#927369, rhbz#957293, rhbz#999926, rhbz#1021703, rhbz#1043735
      rhbz#1047818, rhbz#1062142, rhbz#1064770, rhbz#1072653, rhbz#1078126
      rhbz#1095636, rhbz#1103245, rhbz#1119215, rhbz#1121837, rhbz#1121955
      rhbz#1122455, rhbz#1126329, rhbz#1126721, rhbz#1126909, rhbz#1128097
      rhbz#1128751, rhbz#1129207, rhbz#1129372, rhbz#1129998, rhbz#1130089
      rhbz#1130379, rhbz#1131306, rhbz#1131445, rhbz#1131788, rhbz#1131811
      rhbz#1131819, rhbz#1131876, rhbz#1132301, rhbz#1132305, rhbz#1132347


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-2
changelog:
  - remote: Fix memory leak on error path when deserializing bulk stats (rhbz#1136350)
  - spec: Fix preun script for daemon (rhbz#1136736)
  - security: fix DH key generation when FIPS mode is on (rhbz#1128497)
  - tests: force FIPS testing mode with new enough GNU TLS versions (rhbz#1128497)
  - Don't include non-migratable features in host-model (rhbz#1138221)
  - qemu: Rename DEFAULT_JOB_MASK to QEMU_DEFAULT_JOB_MASK (rhbz#1134154)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1134154)
  - qemu: snapshot: Acquire job earlier on snapshot revert/delete (rhbz#1134154)
  - qemu: snapshot: Fix snapshot function header formatting and spacing (rhbz#1134154)
  - qemu: snapshot: Simplify error paths (rhbz#1134154)
  - qemu: Propagate QEMU errors during incoming migrations (rhbz#1090093)
  - Refactor job statistics (rhbz#1063724)
  - qemu: Avoid incrementing jobs_queued if virTimeMillisNow fails (rhbz#1063724)
  - Add support for fetching statistics of completed jobs (rhbz#1063724)
  - qemu: Silence coverity on optional migration stats (rhbz#1063724)
  - virsh: Add support for completed job stats (rhbz#1063724)
  - qemu: Transfer migration statistics to destination (rhbz#1063724)
  - qemu: Recompute downtime and total time when migration completes (rhbz#1063724)
  - qemu: Transfer recomputed stats back to source (rhbz#1063724)
  - conf: Extend <loader/> and introduce <nvram/> (rhbz#1112257)
  - qemu: Implement extended loader and nvram (rhbz#1112257)
  - qemu: Automatically create NVRAM store (rhbz#1112257)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-3
changelog:
  - virsh: Move --completed from resume to domjobinfo (rhbz#1063724)
  - qemu_driver: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - virfile: Resolve Coverity DEADCODE (rhbz#1141209)
  - lxc: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - xen: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - virsh: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - daemon: Resolve Coverity RESOURCE_LEAK (rhbz#1141209)
  - domain_conf: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - storage_conf: Fix libvirtd crash when defining scsi storage pool (rhbz#1141943)
  - qemu: time: Report errors if agent command fails (rhbz#1142294)
  - util: storage: Copy driver type when initializing chain element (rhbz#1140984)
  - docs, conf, schema: add support for shared memory mapping (rhbz#1133144)
  - qemu: add support for shared memory mapping (rhbz#1133144)
  - rpc: reformat the flow to make a bit more sense (rhbz#927369)
  - remove redundant pidfile path constructions (rhbz#927369)
  - util: fix potential leak in error codepath (rhbz#927369)
  - util: get rid of unnecessary umask() call (rhbz#927369)
  - rpc: make daemon spawning a bit more intelligent (rhbz#927369)
  - conf: add backend element to interfaces (rhbz#1139362)
  - Wire up the interface backend options (rhbz#1139362)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - qemu: fix crash with shared disks (rhbz#1142722)
  - nvram: Fix permissions (rhbz#1026772)
  - libvirt.spec: Fix permission even for libvirt-driver-qemu (rhbz#1026772)
  - virDomainUndefineFlags: Allow NVRAM unlinking (rhbz#1026772)
  - formatdomain: Update <loader/> example to match the rest (rhbz#1026772)
  - domaincaps: Expose UEFI capability (rhbz#1026772)
  - qemu_capabilities: Change virQEMUCapsFillDomainCaps signature (rhbz#1026772)
  - domaincaps: Expose UEFI binary path, if it exists (rhbz#1026772)
  - domaincapstest: Run cleanly on systems missing OVMF firmware (rhbz#1026772)
  - conf: Disallow nonexistent NUMA nodes for hugepages (rhbz#1135396)
  - qemu: Honor hugepages for UMA domains (rhbz#1135396)
  - RHEL: Fix maxvcpus output (rhbz#1092363)
  - virsh: Add iothread to 'attach-disk' (rhbz#1101574)
  - qemu: Issue query-iothreads and to get list of active IOThreads (rhbz#1101574)
  - vircgroup: Introduce virCgroupNewIOThread (rhbz#1101574)
  - qemu_domain: Add niothreadpids and iothreadpids (rhbz#1101574)
  - qemu_cgroup: Introduce cgroup functions for IOThreads (rhbz#1101574)
  - qemu: Allow pinning specific IOThreads to a CPU (rhbz#1101574)
  - domain_conf: Add iothreadpin to cputune (rhbz#1101574)
  - vircgroup: Fix broken builds without cgroups (rhbz#1101574)
  - cputune: allow interleaved xml (rhbz#1101574)
  - qemu: Fix iothreads issue (rhbz#1101574)
  - qemu_cgroup: Adjust spacing around incrementor (rhbz#1101574)
  - qemu: Fix call in qemuDomainSetNumaParamsLive for virCgroupNewIOThread (rhbz#1101574)
  - qemu: Need to check for capability before query (rhbz#1101574)
  - qemu: Don't fail startup/attach for IOThreads if no JSON (rhbz#1101574)
  - Fixes for domains with no iothreads (rhbz#1101574)


