# changelog

author: Michal Sekletar <msekleta@redhat.com> - 208-1
changelog:
  - rebase to systemd-208 (#1063332)
  - do not create symlink /etc/systemd/system/syslog.service (#1055421)


author: Michal Sekletar <msekleta@redhat.com> - 208-2
changelog:
  - require redhat-release package
  - call systemd-tmpfiles after package installation (#1059345)
  - move preset policy out of systemd package (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-7
changelog:
  - setup tty permissions and group for /dev/sclp_line0 (#1070310)
  - cdrom_id: use the old MMC fallback (#1038015)
  - mount: don't send out PropertiesChanged message if actually nothing got changed (#1069718)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-8
changelog:
  - rules: mark loop device as SYSTEMD_READY=0 if no file is attached (#1067422)
  - utmp: make sure we don't write the utmp reboot record twice on each boot (#1053600)
  - rework session shutdown logic (#1047614)
  - introduce new stop protocol for unit scopes (#1064976)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-9
changelog:
  - fixes crashes in logind and systemd (#1073994)
  - run fsck before mouting root in initramfs (#1056661)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11
changelog:
  - logind-session: save stopping flag (#1082692)
  - unit: add waiting jobs to run queue in unit_coldplug (#1083159)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-12
changelog:
  - units/serial-getty@.service: add [Install] section (#1083936)
  - units: order network-online.target after network.target (#1072431)
  - util: consider both fuse.glusterfs and glusterfs network file systems (#1080229)
  - core: make StopWhenUnneeded work in conjunction with units that fail during their start job (#986949)
  - cgroups-agent: down-grade log level (#1044386)
  - random-seed: raise POOL_SIZE_MIN constant to 1024 (#1066517)
  - delta: do not use unicode chars in C locale (#1088419)
  - core: print debug instead of error message (#1105608)
  - journald: always add syslog facility for messages coming from kmsg (#1113215)
  - fsck,fstab-generator: be lenient about missing fsck.<type> (#1098310)
  - rules/60-persistent-storage: add nvme pcie ssd scsi_id ENV (#1042990)
  - cgls: fix running with -M option (#1085455)
  - getty: Start getty on 3270 terminals available on Linux on System z (#1075729)
  - core: Added support for ERRNO NOTIFY_SOCKET  message parsing (#1106457)
  - socket: add SocketUser= and SocketGroup= for chown()ing sockets in the file system (#1111761)
  - tmpfiles: add --root option to operate on an alternate fs tree (#1111199)
  - units: make ExecStopPost action part of ExecStart (#1036276)
  - machine-id: only look into KVM uuid when we are not running in a container (#1123452)
  - util: reset signals when we fork off agents (#1134818)
  - udev: do not skip the execution of RUN when renaming a network device fails (#1102135)
  - man: mention System Administrator's Guide in systemctl manpage (#978948)
  - vconsole: also copy character maps (not just fonts) from vt1 to vt2, vt3, ... (#1002450)
  - localed: consider an unset model as a wildcard (#903776)
  - systemd-detect-virt: detect s390 virtualization (#1139149)
  - socket: introduce SELinuxContextFromNet option (#1113790)
  - sysctl: make --prefix allow all kinds of sysctl paths (#1138591)
  - man: mention localectl in locale.conf (#1049286)
  - rules: automatically online hot-added CPUs (#968811)
  - rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac' (#1054477)
  - bash-completion: add verb set-property (#1064487)
  - man: update journald rate limit defaults (#1145352)
  - core: don't try to connect to d-bus after switchroot (#1083300)
  - localed: check for partially matching converted keymaps (#1109145)
  - fileio: make parse_env_file() return number of parsed items (#1069420)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-13
changelog:
  - tmpfiles: minor modernizations (#1147524)
  - install: when looking for a unit file for enabling, search for templates only after traversing all search directories (#1147524)
  - install: remove unused variable (#1147524)
  - bootctl: typo fix in help message (#1147524)
  - logind: ignore failing close() on session-devices (#1147524)
  - sysfs-show.c: return negative error (#1147524)
  - core: only send SIGHUP when doing first kill, not when doing final sigkill (#1147524)
  - cgroup: make sure to properly send SIGCONT to all processes of a cgroup if that's requested (#1147524)
  - core: don't send duplicate SIGCONT when killing units (#1147524)
  - efi: fix Undefined reference efi_loader_get_boot_usec when EFI support is disabled (#1147524)
  - macro: better make IN_SET() macro use const arrays (#1147524)
  - macro: make sure we can use IN_SET() also with complex function calls as first argument (#1147524)
  - core: fix property changes in transient units (#1147524)
  - load-modules: properly return a failing error code if some module fails to load (#1147524)
  - core/unit: fix unit_add_target_dependencies() for units with no dependencies (#1147524)
  - man: there is no ExecStopPre= for service units (#1147524)
  - man: document that per-interface sysctl variables are applied as network interfaces show up (#1147524)
  - journal: downgrade vaccuum message to debug level (#1147524)
  - logs-show: fix corrupt output with empty messages (#1147524)
  - journalctl: refuse extra arguments with --verify and similar (#1147524)
  - journal: assume that next entry is after previous entry (#1147524)
  - journal: forget file after encountering an error (#1147524)
  - man: update link to LSB (#1147524)
  - man: systemd-bootchart - fix spacing in command (#1147524)
  - man: add missing comma (#1147524)
  - units: Do not unescape instance name in systemd-backlight@.service (#1147524)
  - manager: flush memory stream before using the buffer (#1147524)
  - man: multiple sleep modes are to be separated by whitespace, not commas (#1147524)
  - man: fix description of systemctl --after/--before (#1147524)
  - udev: properly detect reference to unexisting part of PROGRAM's result (#1147524)
  - gpt-auto-generator: don't return OOM on parentless devices (#1147524)
  - man: improve wording of systemctl's --after/--before (#1147524)
  - cgroup: it's not OK to invoke alloca() in loops (#1147524)
  - core: don't try to relabel mounts before we loaded the policy (#1147524)
  - systemctl: --kill-mode is long long gone, don't mention it in the man page (#1147524)
  - ask-password: when the user types a overly long password, beep and refuse (#1147524)
  - logind: don't print error if devices vanish during ACL-init (#1147524)
  - tty-ask-password-agent: return negative errno (#1147524)
  - journal: cleanup up error handling in update_catalog() (#1147524)
  - bash completion: fix __get_startable_units (#1147524)
  - core: check the right variable for failed open() (#1147524)
  - man: sd_journal_send does nothing when journald is not available (#1147524)
  - man: clarify that the ExecReload= command should be synchronous (#1147524)
  - conf-parser: never consider it an error if we cannot load a drop-in file because it is missing (#1147524)
  - socket: properly handle if our service vanished during runtime (#1147524)
  - Do not unescape unit names in [Install] section (#1147524)
  - util: ignore_file should not allow files ending with '~' (#1147524)
  - core: fix invalid free() in killall() (#1147524)
  - install: fix invalid free() in unit_file_mask() (#1147524)
  - unit-name: fix detection of unit templates/instances (#1147524)
  - journald: make MaxFileSec really default to 1month (#1147524)
  - bootchart: it's not OK to return -1 from a main program (#1147524)
  - journald: Fix off-by-one error in "Missed X kernel messages" warning (#1147524)
  - man: drop references to removed and obsolete 'systemctl load' command (#1147524)
  - units: fix BindsTo= logic when applied relative to services with Type=oneshot (#1147524)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-15
changelog:
  - core: do not segfault if /proc/swaps cannot be opened (#1151239)
  - man: we don't have 'Wanted' dependency (#1152487)
  - environment: append unit_id to error messages regarding EnvironmentFile (#1147691)
  - udevd: add --event-timeout commandline option (#1154778)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-16
changelog:
  - logind: use correct "who" enum values with KillUnit. (#1155502)
  - logind: always kill session when termination is requested (#1155502)
  - udev: net_id - correctly name netdevs based on dev_port when set (#1155996)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-17
changelog:
  - udev: net_id dev_port is base 10 (#1155996)
  - udev: Fix parsing of udev.event-timeout kernel parameter (#1154778)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 217-0.2
changelog:
  - spec fixes
  - core: introduce new Delegate=yes/no property controlling creation of cgroup subhierarchies


author: Lukáš Nykrýn <lnykryn@redhat.com> - 218-0.3
changelog:
  - rebase to 218
  - remove networkd tmpfiles snipets due to packaging issues
  - add resolved subpackage
  - backport some nspawn features from upstream


author: Lukas Nykryn <lnykryn@redhat.com> - 219-2
changelog:
  - udev: restore udevadm settle timeout (#1210981)
  - udev: settle should return immediately when timeout is 0 (#1210981)
  - udev: Fix ping timeout when settle timeout is 0 (#1210981)
  - detect-virt: use /proc/device-tree (#1207773)
  - ARM: detect-virt: detect Xen (#1207773)
  - ARM: detect-virt: detect QEMU/KVM (#1207773)
  - Persistent by_path links for ata devices (#1045498)
  - man: document forwarding to syslog better (#1177336)
  - man: fix typos in previous comimt (#1177336)
  - LSB: always add network-online.target to services with priority over 10 (#1189253)
  - rules: enable memory hotplug (#1105020)
  - rules: reload sysctl settings when the bridge module is loaded (#1182105)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-3
changelog:
  - console-getty.service: don't start when /dev/console is missing (#1222517)
  - resolved: Do not add .busname dependencies, when compiling without kdbus. (#1222517)
  - man: add journal-remote.conf(5) (#1222517)
  - mount: don't run quotaon only for network filesystems (#1222517)
  - mount: fix up wording in the comment (#1222517)
  - udev: net_id - fix copy-paste error (#1222517)
  - man: don't mention "journalctl /dev/sda" (#1222517)
  - units: move After=systemd-hwdb-update.service dependency from udev to udev-trigger (#1222517)
  - units: explicitly order systemd-user-sessions.service after nss-user-lookup.target (#1222517)
  - zsh-completion: update loginctl (#1222517)
  - zsh-completion: add missing -M completion for journalctl (#1222517)
  - zsh-completion: update hostnamectl (#1222517)
  - shell-completion: systemctl switch-root verb (#1222517)
  - core/automount: beef up error message (#1222517)
  - man: remove 'fs' from 'rootfsflags' (#1222517)
  - shared: fix memleak (#1222517)
  - udevd: fix synchronization with settle when handling inotify events (#1222517)
  - python-systemd: fix is_socket_inet to cope with ports (#1222517)
  - man: fix examples indentation in tmpfiles.d(5) (#1222517)
  - systemctl: avoid bumping NOFILE rlimit unless needed (#1222517)
  - exit-status: Fix "NOTINSSTALLED" typo (#1222517)
  - tmpfiles: there's no systemd-forbid-user-logins.service service (#1222517)
  - kmod-setup: load ip_tables kmod at boot (#1222517)
  - util: Fix assertion in split() on missing ' (#1222517)
  - units: set KillMode=mixed for our daemons that fork worker processes (#1222517)
  - unit: don't add automatic dependencies on device units if they aren't supported (#1222517)
  - update-done: ignore nanosecond file timestamp components, they are not reliable (#1222517)
  - sd-daemon: simplify sd_pid_notify_with_fds (#1222517)
  - fstab-generator: add x-systemd.requires and x-systemd.requires-mounts-for (#1164334)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-4
changelog:
  - core: Fix assertion with empty Exec*= paths (#1222517)
  - rules: load sg module (#1186462)
  - util: add shell_maybe_quote() call for preparing a string for shell cmdline inclusion (#1016680)
  - bus-util: be more verbose if dbus job fails (#1016680)
  - notify: fix badly backported help message (#1199644)
  - cryptsetup: craft a unique ID with the source device (#1226333)
  - systemctl: introduce --now for enable, disable and mask (#1233081)
  - udev: also create old sas paths (#957112)
  - journald: do not strip leading whitespace from messages (#1227396)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-5
changelog:
  - Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1199644)
  - bus-creds: always set SD_BUS_CREDS_PID when we set pid in the mask (#1230190)
  - sd-bus: do not use per-datagram auxiliary information (#1230190)
  - sd-bus: store selinux context at connection time (#1230190)
  - journald: simplify context handling (#1230190)
  - bash-completion: add verb set-property (#1235635)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-6
changelog:
  - sd-bus: don't inherit connection creds into message creds when we have a direct connection (#1230190)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-8
changelog:
  - sysv-generator test: Fix assertion (#1222517)
  - man: avoid line break in url (#1222517)
  - Add VARIANT as a standard value for /etc/os-release (#1222517)
  - Fix permissions on /run/systemd/nspawn/locks (#1222517)
  - generators: rename add_{root,usr}_mount to add_{sysroot,sysroot_usr}_mount (#1222517)
  - Generate systemd-fsck-root.service in the initramfs (#1222517)
  - units: fix typo in systemd-resolved.service (#1222517)
  - core: don't consider umask for SocketMode= (#1222517)
  - timedate: fix memory leak in timedated (#1222517)
  - coredump: make sure we vacuum by default (#1222517)
  - tmpfiles: don't fail if we cannot create a subvolume because a file system is read-only but a dir already exists anyway (#1222517)
  - resolved: fix crash when shutting down (#1222517)
  - resolved: allow DnsAnswer objects with no space for RRs (#1222517)
  - id128: add new sd_id128_is_null() call (#1222517)
  - journalctl: Improve boot ID lookup (#1222517)
  - test-hashmap: fix an assert (#1222517)
  - units: make sure systemd-nspawn@.slice instances are actually located in machine.slice (#1222517)
  - Revert "journald-audit: exit gracefully in the case we can't join audit multicast group" (#1222517)
  - journald: handle more gracefully when bind() fails on audit sockets (#1222517)
  - udev: link-config - fix corruption (#1222517)
  - udev/net_id: Only read the first 64 bytes of PCI config space (#1222517)
  - shared: generator - correct path to systemd-fsck (#1222517)
  - logind: Save the user’s state when a session enters SESSION_ACTIVE (#1222517)
  - small fix ru translation (#1222517)
  - kmod-setup: don't warn when ipv6 can't be loaded (#1222517)
  - Partially revert "ma-setup: simplify" (#1222517)
  - ima-setup: write policy one line at a time (#1222517)
  - ata_id: unbotch format specifier (#1222517)
  - install: explicitly return 0 on success (#1222517)
  - systemd.service.xml: document that systemd removes the PIDFile (#1222517)
  - core: handle --log-target=null when calling systemd-shutdown (#1222517)
  - man: ProtectHome= protects /root as well (#1222517)
  - timedatectl: trim non-local RTC warning to 80 chars wide (#1222517)
  - escape: fix exit code (#1222517)
  - man: information about available properties (#1222517)
  - journal: in persistent mode create /var/log/journal, with all parents. (#1222517)
  - sysv-generator: fix wrong "Overwriting existing symlink" warnings (#1222517)
  - mount: don't claim a device is gone from /proc/self/mountinfo before it is gone from *all* lines (#1222517)
  - mount: properly check for mounts currently in /proc/self/mountinfo (#1222517)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-9
changelog:
  - units: add [Install] section to tmp.mount
  - bus-util: add articles to explanation messages (#1016680)
  - bus-util: print correct warnings for units that fail but for which we have a NULL result only (#1016680)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-11
changelog:
  - journald-server: don't read audit events (#1252409)
  - everything: remove traces of --user (#1071363)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-12
changelog:
  - selinux: fix check for transient units (#1255129)
  - socket: fix setsockopt call. SOL_SOCKET changed to SOL_TCP. (#1135599)
  - selinux: fix missing SELinux unit access check (#1185120)
  - selinux: always use *_raw API from libselinux (#1256888)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-14
changelog:
  - Revert "sysctl.d: default to fq_codel, fight bufferbloat" (#1263158)
  - loginctl: print nontrivial properties in logictl show-* (#1260465)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-15
changelog:
  - login: fix label on /run/nologin (#1264073)
  - udev-rules: prandom character device node permissions (#1264112)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-16
changelog:
  - login: fix gcc warning, include missing header file (#1264073)
  - shutdown: make sure /run/nologin has correct label (#1264073)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-17
changelog:
  - sd-event: fix prepare priority queue comparison function (#1266479)
  - units: run ldconfig also when cache is unpopulated (#1265539)
  - selinux: fix regression of systemctl subcommands when absolute unit file paths are specified (#1185120)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19
changelog:
  - udev: make naming for virtio devices opt-in (#1269216)
  - tmpfiles.d: don't clean SAP sockets either (#1186044)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.2
changelog:
  - device: rework how we enter tentative state (#1283579)
  - core: Do not bind a mount unit to a device, if it was from mountinfo (#1283579)
  - logind: set RemoveIPC=no by default (#1284588)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.3
changelog:
  - sysv-generator: follow symlinks in /etc/rc.d/init.d (#1288005)
  - man: RemoveIPC is set to no on rhel (#1284588)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.7
changelog:
  - Revert "udev: fibre channel: fix NPIV support" (#1266934)
  - udev: path-id: fibre channel NPIV - use fc_vport's port_name (#1266934)
  - rules: set SYSTEMD_READY=0 on DM_UDEV_DISABLE_OTHER_RULES_FLAG=1 only with ADD event (#1312011)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.9
changelog:
  - journal: fix error handling when compressing journal objects (#1292447)
  - journal: irrelevant coding style fixes (#1292447)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.13
changelog:
  - core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (#1305608)
  - logind: process session/inhibitor fds at higher priority (#1305608)
  - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#1342173)
  - manager: Only invoke a single sigchld per unit within a cleanup cycle (#1342173)
  - manager: Fixing a debug printf formatting mistake (#1342173)
  - manager: don't skip sigchld handler for main and control pid for services (#3738) (#1342173)


author: Richard Jones <rjones@redhat.com> - 1.0.25-4
changelog:
  - New upstream version 1.0.25.
  - Enable debugging when running the tests.
  - Disable tests - don't work correctly in Koji.


author: Richard Jones <rjones@redhat.com> - 1.0.26-6
changelog:
  - Experimentally try to reenable ppc and ppc64 builds.
  - Note BZ numbers which are causing tests to fail.


author: Richard Jones <rjones@redhat.com> - 1.0.28-1
changelog:
  - New upstream version 1.0.28.  Nothing has visibly changed, but
    the source has been gettextized and we want to check that doesn't
    break anything.


author: Richard Jones <rjones@redhat.com> - 1.0.29-3
changelog:
  - New upstream version 1.0.29 (fixes RHBZ#502007 RHBZ#502018).
  - This should allow us to enable tests for i386 and x86-64.
  - Added test-bootbootboot.sh script which was missed from 1.0.29 tarball.
  - Pass kernel noapic flag to workaround RHBZ#502058.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.33-1
changelog:
  - New upstream version 1.0.33.
  - --with-java-home option is no longer required.
  - Upstream contains potential fixes for:
      501878 built-in commands like 'alloc' and 'help' don't autocomplete
      501883 javadoc messed up in libguestfs java documentation
      501885 Doesn't detect missing Java, --with-java-home=no should not be needed
      502533 Polish translation of libguestfs
      n/a    Allow more ext filesystem kmods (Charles Duffy)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.37-1
changelog:
  - New upstream version 1.0.37.
  - Fixes:
    . "mkdir-p" should not throw errors on preexisting directories (RHBZ#503133)
    . cramfs and squashfs modules should be available in libguestfs appliances
        (RHBZ#503135)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.39-1
changelog:
  - New upstream version 1.0.39.
  - Fixes:
    . libguestfs /dev is too sparse for kernel installation/upgrade (RHBZ#503169)
    . OCaml bindings build failure (RHBZ#502309)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.44-1
changelog:
  - New upstream version 1.0.44.
  - Try enabling tests on ppc & ppc64 since it looks like the bug(s?)
    in qemu which might have caused them to fail have been fixed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.47-2
changelog:
  - New upstream release 1.0.47.
  - Enable experimental supermin appliance build.
  - Fix path to appliance.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.48-1
changelog:
  - New upstream release 1.0.48.
  - Should fix all the brokenness from 1.0.47.
  - Requires febootstrap >= 2.3.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.49-5
changelog:
  - Remove workaround for RHBZ#507007, since bug is now fixed.
  - Pull in upstream patch to fix pclose checking
    (testing as possible fix for RHBZ#507066).
  - Pull in upstream patch to check waitpid return values
    (testing as possible fix for RHBZ#507066).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.57-1
changelog:
  - New upstream release 1.0.57.
  - New tool virt-df (obsoletes existing package with this name).
  - RHBZ#507066 may be fixed, so reenable tests.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.64-3
changelog:
  - RHBZ#513249 bug in qemu is now fixed, so try to rebuild and run tests.
  - However RHBZ#503236 still prevents us from testing on i386.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.65-1
changelog:
  - New upstream release 1.0.65.
  - Add Obsoletes for virt-df2 (RHBZ#514309).
  - Disable tests because of ongoing TCG problems with newest qemu in Rawhide.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.66-5
changelog:
  - Set network interface to ne2k_pci (workaround for RHBZ#516022).
  - Rerun autoconf because patch touches configure script.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.69-1
changelog:
  - New upstream release 1.0.69.
  - Reenable the tests (because RHBZ#516543 is supposed to be fixed).
  - New main loop code should fix RHBZ#501888, RHBZ#504418.
  - Add waitpid along guestfs_close path (fixes RHBZ#518747).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.72-1
changelog:
  - New upstream release 1.0.72.
  - New tools: virt-edit, virt-rescue.
  - Combine virt-cat, virt-df, virt-edit, virt-inspector and virt-rescue
    into a single package called libguestfs-tools.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.73-1
changelog:
  - New upstream release 1.0.73.
  - OCaml library now depends on xml-light.
  - Deal with installed documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.75-2
changelog:
  - New upstream release 1.0.75.
  - New library: libhivex.
  - New tools: virt-win-reg, hivexml, hivexget.
  - Don't require chntpw.
  - Add BR libxml2-devel, accidentally omitted before.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.77-1
changelog:
  - New upstream release 1.0.77.
  - Support for mounting guest in host using FUSE (guestmount command).
  - hivex*(1) man pages should be in main package, not -devel, since
    they are user commands.
  - libguestfs-tools: Fix "self-obsoletion" issue raised by rpmlint.
  - perl: Remove bogus script Sys/bindtests.pl.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.78-2
changelog:
  - New upstream release 1.0.78.
  - Many more filesystem types supported by this release - add them
    as dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.79-2
changelog:
  - New upstream release 1.0.79.
  - Adds FUSE test script and multiple fixes for FUSE (RHBZ#538069).
  - Fix virt-df in Xen (RHBZ#538041).
  - Improve speed of supermin appliance.
  - Disable FUSE-related tests because Koji doesn't currently allow them.
    fuse: device not found, try 'modprobe fuse' first


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.80-1
changelog:
  - New upstream release 1.0.80.
  - New Polish translations (RHBZ#502533).
  - Give a meaningful error if no usable kernels are found (RHBZ#539746).
  - New tool: virt-list-filesystems


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.80-11
changelog:
  - Remove gfs-utils (deprecated and removed from Fedora 13 by the
    upstream Cluster Suite developers).
  - Include patch to fix regression in qemu -serial stdio option.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.81-1
changelog:
  - New upstream version 1.0.81.
  - Remove two upstream patches.
  - virt-inspector: Make RPM application data more specific (RHBZ#552718).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.81-8
changelog:
  - Backport special handling of libgcc_s.so.
  - Backport unreadable files patch from RHEL 6 / upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.82-1
changelog:
  - New upstream version 1.0.82.  This includes the two patches
    we were carrying, so those are now removed.
  - This release fixes:
    RHBZ#559498 (Oriya translation).
    RHBZ#559480 (Punjabi translation).
    RHBZ#558593 (Should prevent corruption by multilib).
    RHBZ#559237 (Telugu translation).
    RHBZ#557655 (Use xstrtol/xstrtoll to parse integers in guestfish).
    RHBZ#557195 (Missing crc kernel modules for recent Linux).
  - In addition this contains numerous fixes to the hivex library
    for parsing Windows Registry files, making hivex* and virt-win-reg
    more robust.
  - New API call 'filesize'.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.82-6
changelog:
  - Backport a better fix for RHBZ557655 test from upstream.
  - Backport fix for unreadable yum.log from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.83-2
changelog:
  - New upstream release 1.0.83.
  - This release fixes:
    Add Marathi translations (RHBZ#561671).
    Polish translations (RHBZ#502533).
    Add Gujarti translations (Sweta Kothari) (RHBZ#560918).
    Update Oriya translations (thanks Manoj Kumar Giri) (RHBZ#559498).
    Set locale in C programs so l10n works (RHBZ#559962).
    Add Tamil translation (RHBZ#559877) (thanks to I.Felix)
    Update Punjabi translation (RHBZ#559480) (thanks Jaswinder Singh)
  - There are significant fixes to hive file handling.
  - Add hivexsh and manual page.
  - Remove two patches, now upstream.


author: Matthew Booth <mbooth@redhat.com> - 1.0.83-6
changelog:
  - Change buildnonet to buildnet
  - Allow buildnet, mirror, updates, virtio and runtests to be configured by user
    macros.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.83-7
changelog:
  - Disable tests.  These fail in Koji (on RHEL 5 kernel) because of a
    bug in preadv/pwritev emulation in glibc (RHBZ#563103).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.84-4
changelog:
  - Don't include generator.ml in rpm.  It's 400K and almost no one will need it.
  - Add comments to spec file about how repo building works.
  - Whitespace changes in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.84-6
changelog:
  - Fix quoting in supermin-split script (RHBZ#566511).
  - Don't include bogus './builddir' entries in supermin hostfiles
    (RHBZ#566512).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.85-1
changelog:
  - New upstream version 1.0.85.
  - Remove hivex, now a separate upstream project and package.
  - Remove supermin quoting patch, now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.86-1
changelog:
  - New upstream version 1.0.86.
  - libguestfs-supermin-helper rewritten in C (from shell), reduces
    appliance boot time by 2-3 seconds.
  - Fix parsing of integers in guestfish on 32 bit platforms (RHBZ#569757
    and RHBZ#567567).
  - Enhance virt-inspector output for Windows guests.
  - Add product_name field to virt-inspector output for all guests.
  - Weaken dependencies on libntfs-3g.so, don't include SONAME in dep.
  - Remove false dependency on libply (plymouth libraries).
  - Spanish translation (RHBZ#570181).
  - Fix bash regexp quoting bug.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.87-1
changelog:
  - New upstream version 1.0.87.
  - New tools: virt-resize and virt-list-partitions.
  - New APIs: guestfs_copy_size; APIs for querying the relationship between
    LVM objects.
  - Add vim to the virt-rescue appliance.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.88-1
changelog:
  - New upstream version 1.0.88.
  - Mainly small bugfixes.
  - Update Spanish translation of libguestfs (RHBZ#576876).
  - Use ext4 dev tools on RHEL 5 (RHBZ#576688).
  - Add support for minix filesystem (RHBZ#576689).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.88-7
changelog:
  - Backport of TERM=dumb patch from upstream.
  - Workaround failure caused by RHBZ#575734.
  - Workaround unknown failure of test_swapon_label_0.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.89-1
changelog:
  - New upstream version 1.0.89.
  - Improved version of virt-win-reg.
  - Many smaller bugfixes.
  - Requires hivex >= 1.2.1.
  - Remove TERM=dumb patch which is now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.1-1
changelog:
  - New upstream version 1.3.1.
  - For explanation of apparently large version jump, see:
    https://www.redhat.com/archives/libguestfs/2010-April/msg00057.html
  - New tool: virt-make-fs.
  - New API: guestfs_zero_device.
  - Fixes RHBZ#580246 (tar-in command hangs if uploading more than
    available space)
  - Fixes RHBZ#579664 (guestfish doesn't report error when there is not
    enough space for image allocation)
  - +BR perl-String-ShellQuote (for virt-make-fs).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.2-1
changelog:
  - New upstream version 1.3.2.
  - New APIs: checksum-device, part-del, part-get-bootable, part-get-mbr-id,
    part-set-mbr-id, vgscan, ntfsresize, txz-in, txz-out.
  - Enhanced/fixed virt-resize tool.
  - Enhanced virt-list-partitions tool.
  - Fixes: 580016, 580650, 579155, 580556.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - New virt-resize option --LV-expand.
  - New API: lvresize-free.
  - Fixes RHBZ#581501.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.12-1
changelog:
  - New upstream version 1.3.12.
  - febootstrap >= 2.7 is required at compile time and at runtime (at runtime
    because of the new febootstrap-supermin-helper).
  - Bugs fixed: 591155 591250 576879 591142 588651 507810 521674 559963 516096.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.12-3
changelog:
  - Backport supermin build fix from upstream.
  - Further changes required for new layout of supermin appliance.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.13-1
changelog:
  - New upstream version 1.3.13.
  - Add BUGS to documentation.
  - Force update of hivex dependency to 1.2.2 since it contains
    important registry import fixes.
  - Remove patch1, now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.20-1
changelog:
  - New upstream version 1.3.20.
  - Since upstream commit a043b6854a0c4 we don't need to run make install
    twice.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.3.21-4
changelog:
  - Explicitly depend on e2fsprogs.
  - Add patch to add e2fsprogs to the appliance.
  - Add patch to fix GFS kernel module problem.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.5.0-4
changelog:
  - New development branch 1.5.0.
  - Remove two upstream patches.
  - Work around permanently broken test-getlogin_r Gnulib test.


author: Richard Jones <rjones@redhat.com> - 1:1.5.4-1
changelog:
  - New upstream development version 1.5.4.
  - Now requires febootstrap >= 2.8 and qemu >= 0.12.
  - Re-enable tests because RHBZ#624854 is supposed to be fixed.
  - Upstream Source URL has changed.


author: Richard Jones <rjones@redhat.com> - 1:1.5.8-1
changelog:
  - New upstream version 1.5.8.
  - Add BR po4a for translations of man pages.
  - Add PHP bindings.
  - Remove partially-translated Japanese webpages.


author: Richard Jones <rjones@redhat.com> - 1:1.5.13-1
changelog:
  - New upstream version 1.5.13.
  - Removed the patch workaround for RHBZ#630583.  The same workaround
    is now upstream (the bug is not fixed).


author: Richard Jones <rjones@redhat.com> - 1:1.5.18-1
changelog:
  - New upstream development version 1.5.18.
  - Note that guestfish '-a' and '-d' options were broken in 1.5.17, so
    upgrading to this version is highly recommended.


author: Richard Jones <rjones@redhat.com> - 1:1.5.23-1
changelog:
  - Fix for libguestfs: missing disk format specifier when adding a disk
    (RHBZ#642934, CVE-2010-3851).


author: Richard Jones <rjones@redhat.com> - 1:1.5.25-1
changelog:
  - New upstream development version 1.5.25.
  - Rewritten virt-inspector.
  - Requires febootstrap >= 2.10.
  - New virt-inspector requires db_dump program.


author: Richard Jones <rjones@redhat.com> - 1:1.7.4-2
changelog:
  - New upstream development version 1.7.4.
  - ocaml-xml-light is no longer required.
  - Remove guestfs-actions.h and guestfs-structs.h.  Libguestfs now
    only exports a single <guestfs.h> header file.
  - Add patch to fix broken Perl test.
  - Remove workaround for RHBZ#563103.


author: Richard Jones <rjones@redhat.com> - 1:1.7.5-2
changelog:
  - New upstream development version 1.7.5.
  - Remove hand-installation of Ruby bindings.
  - Remove upstream patch.


author: Richard Jones <rjones@redhat.com> - 1:1.7.7-1
changelog:
  - New upstream development version 1.7.7.
  - Rename perl-libguestfs as perl-Sys-Guestfs (RHBZ#652587).


author: Richard Jones <rjones@redhat.com> - 1:1.7.8-1
changelog:
  - New upstream development version 1.7.8.
  - Add Obsoletes so perl-Sys-Guestfs overrides perl-libguestfs (RHBZ#652587).


author: Richard Jones <rjones@redhat.com> - 1:1.7.11-1
changelog:
  - New upstream development version 1.7.11.
  - Fix Source0 URL which had pointed to the 1.5 directory.
  - virt-inspector is not a dependency of guestmount.


author: Richard Jones <rjones@redhat.com> - 1:1.7.12-1
changelog:
  - New upstream development version 1.7.12.
  - New tool: virt-filesystems.  virt-list-filesystems and virt-list-partitions
    are deprecated, but still included in the package.


author: Richard Jones <rjones@redhat.com> - 1:1.7.13-3
changelog:
  - New upstream development version 1.7.13.
  - New manual pages containing example code.
  - Ship examples for C, OCaml, Ruby, Python.
  - Don't ship HTML versions of man pages.
  - Rebase no-fuse-test patch to latest version.


author: Richard Jones <rjones@redhat.com> - 1:1.7.15-2
changelog:
  - New upstream development version 1.7.15.
  - Split out new libguestfs-tools-c package from libguestfs-tools.
    . This is so that the -tools-c package can be pulled in by people
      wanting to avoid a dependency on Perl, while -tools pulls in everything
      as before.
    . The C tools currently are: cat, df, filesystems, fish, inspector, ls,
      mount, rescue.
    . guestfish still requires pod2text which requires perl.  This will be
      rectified in the next release.
    . libguestfs-tools no longer pulls in guestfish.
  - guestfish also depends on: less, man, vi
  - Add BR db4-utils (although since RPM needs it, it not really necessary).
  - Runtime requires on db4-utils should be on core lib, not tools package.
  - Change all "Requires: perl-Foo" to "Requires: perl(Foo)".


author: Richard Jones <rjones@redhat.com> - 1:1.7.16-1
changelog:
  - New upstream development version 1.7.16.
  - guestfish no longer requires pod2text, hence no longer requires perl.
  - Require febootstrap >= 2.11.


author: Richard Jones <rjones@redhat.com> - 1:1.7.19-1
changelog:
  - New upstream development version 1.7.19.
  - Appliance building in this version has been substantially rewritten
    and this requires febootstrap >= 3.0 to build.
  - createrepo no longer required.
  - Supermin appliance is the default.


author: Richard Jones <rjones@redhat.com> - 1:1.7.22-1
changelog:
  - New upstream version 1.7.22.
  - Depend on febootstrap 3.3 which fixes the checksum stability problem.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.2-1
changelog:
  - New upstream version 1.9.2.
  - New tools: virt-copy-in, virt-copy-out, virt-tar-in, virt-tar-out.
    These are just shell script wrappers around guestfish so they are
    included in the guestfish package.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.7-6
changelog:
  - Add temporary non-upstream patch to fix /etc/mtab.
    See: https://www.redhat.com/archives/libguestfs/2011-February/msg00006.html
  - Add fix for regressions/rhbz557655.sh so it works when tracing is enabled.
  - Add guestfs-perl(3) man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.7-7
changelog:
  - Rebuild against rpm-4.9.0-0.beta1.6.fc15 to fix OCaml deps.  See discussion:
    http://lists.fedoraproject.org/pipermail/devel/2011-February/148398.html


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.14-1
changelog:
  - New upstream version 1.9.14.
  - Include 'acl' as BR so virt-rescue gets getfacl and setfacl programs.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.15-1
changelog:
  - New upstream version 1.9.15.
  - Add BR libconfig-devel.
  - Add /etc/libguestfs-tools.conf (config file for guestfish, guestmount,
    virt-rescue; in future for other tools as well).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.9.18-2
changelog:
  - New upstream version 1.9.18.
  - Requires ocaml-pcre for new virt-resize.
  - Remove libguestfs-test-tool-helper program which is no longer used.
  - Include upstream fix for virt-resize build.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.0-1
changelog:
  - New upstream development branch 1.11.0.
  - New Source URL.
  - Remove patches which are now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.2-1
changelog:
  - New upstream version 1.11.2.
  - Fixes Python bindings when used in Python threads.
  - Remove upstream patch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.5-1
changelog:
  - New upstream version 1.11.5.
  - virt-edit has been rewritten in C, therefore this tool has been moved
    into the libguestfs-tools-c package.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.7-3
changelog:
  - New upstream version 1.11.7.
  - Depends on hivex >= 1.2.7.
  - Remove upstream patch.
  - Skip test of "zero" command (RHBZ#705499).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.9-7
changelog:
  - Build against new parted.
  - Disable tests on i686 because of RHBZ#710921.
  - Remove recipes/ doc directory.  This is no longer present because it
    was replaced by a guestfs-recipes(1) man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.10-1
changelog:
  - New upstream version 1.11.10.
  - Enable tests since fix for RHBZ#710921 is in Rawhide kernel package.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.10-3
changelog:
  - Temporarily stop setting CCFLAGS in perl subdirectory.
    See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628522


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.13-2
changelog:
  - Add libguestfs-live-service subpackage.  This can be installed in
    virtual machines in order to enable safe editing of files in running
    guests (eg. guestfish --live).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.13-3
changelog:
  - Further updates to libguestfs-live-service after feedback from
    Dan Berrange and Lennart Poettering.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.18-1
changelog:
  - New upstream version 1.11.18.
  - Force febootstrap >= 3.7 which contains a fix for latest Rawhide.
  - Use --enable-install-daemon to install guestfsd.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.11.20-1
changelog:
  - New upstream version 1.11.20.
  - Replace standard README file with one suited for Fedora.
  - Add guestfs-java(3) manpage to libguestfs-java-devel package.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.12.0-1
changelog:
  - New stable version 1.12.0 for Fedora 16.
  - Remove upstream patch.
  - Disable tests on i686 (because of RHBZ#723555).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.12.1-4
changelog:
  - New upstream stable branch version 1.12.1.
  - Remove 5 x upstream patches.
  - Add non-upstream patch to deal with broken qemu -machine option.
  - Add upstream patch to fix segfault in OCaml bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.2-3
changelog:
  - Switch Rawhide to use the new development branch (1.13).
  - New upstream version 1.13.2.
  - Remove upstream patch.
  - Ensure config.log is printed, even in the error case.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.3-4
changelog:
  - New upstream version 1.13.3.
  - 'test-getlogin_r.c:55: assertion failed' test must now be fixed in
    gnulib/tests directory instead of daemon/tests (the latter directory
    no longer exists).
  - Only run testsuite on x86_64 because of qemu bug.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.7-1
changelog:
  - New upstream version 1.13.7.
  - configure --with-extra version string contains Fedora release.
  - Build with make V=1 to display full compile commands.
  - Remove /usr/sbin PATH setting, not used for a very long time.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.12-4
changelog:
  - Don't require grub.  See RHBZ#737261.
  - Note this (hopefully temporarily) breaks guestfs_grub_install API.
  - Include upstream patch to add guestfs_grub_install into an optional group.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.15-1
changelog:
  - New upstream version 1.13.15.
  - Add lzop program to the appliance (for compress-out API).
  - Remove upstream patch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.15-2
changelog:
  - Rearrange description to make it clearer.
  - virt-resize was written in OCaml.  Move it to libguestfs-tools-c
    subpackage since it doesn't require Perl.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.19-1
changelog:
  - New upstream version 1.13.19.
  - New tool: virt-sysprep.
  - Remove the old guestfish and libguestfs-mount packages, and put these
    tools into libguestfs-tools.  This change is long overdue, but is also
    necessitated by the new virt-sysprep tool.  This new tool would pull
    in guestfish anyway, so having separate packages makes no sense.
  - Remove old obsoletes for virt-cat, virt-df, virt-df2 and virt-inspector,
    since those packages existed only in much older Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.21-2
changelog:
  - New upstream version 1.13.21.
  - Move virt-sysprep to libguestfs-tools, to avoid pulling in extra
    dependencies for RHEV-H.  This tool is not likely to be useful
    for RHEV-H in its current form anyway.
  - Change BR cryptsetup-luks -> cryptsetup since that package changed.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.21-4
changelog:
  - Add upstream patch to skip FUSE tests if there is no /dev/fuse.
    This allows us also to remove the Fedora-specific patch which
    disabled these tests before.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.22-2
changelog:
  - New upstream version 1.13.22.
  - Remove 3x upstream patches.
  - Renumber the two remaining non-upstream patches as patch0, patch1.
  - Rebase patch1.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.13.24-1
changelog:
  - New upstream version 1.13.24.
  - This version includes upstream workarounds for broken qemu, so both
    non-upstream patches have now been removed from Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.2-1
changelog:
  - New upstream version 1.15.2.
  - ocaml-pcre is no longer required for virt-resize.
  - xmlstarlet is no longer required for virt-sysprep.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.4-2
changelog:
  - New upstream version 1.15.4.
  - Remove patch which is now upstream.
  - libguestfs_jni.a is no longer built.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.9-2
changelog:
  - New upstream version 1.15.9.
  - Add upstream patch to fix Augeas library detection.
  - Appliance explicitly requires libxml2 (because Augeas >= 0.10 requires it),
    although it was implicitly included already.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.13-4
changelog:
  - New upstream version 1.15.13.
  - Fixes Security: Mitigate possible privilege escalation via SG_IO ioctl
    (CVE-2011-4127, RHBZ#757071).
  - Add three upstream patches to fix 'make check'.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.15-2
changelog:
  - New upstream version 1.15.15.
  - Updated gnulib fixes builds with gcc 4.7.
  - Rebuild for OCaml 3.12.1.
  - Add explicit BR perl-hivex, required for various Perl virt tools.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.15.19-1
changelog:
  - New upstream version 1.15.19.
  - +BR psmisc for the appliance.
  - Includes GObject bindings in libguestfs-gobject and
    libguestfs-gobject-devel subpackages.
  - Include upstream patches for PHP 5.4.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.0-1
changelog:
  - New upstream version 1.16.0.
  - Remove patches which are now upstream.
  - GObject: Move *.typelib file to base gobject package.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.2-2
changelog:
  - New upstream version 1.17.2.
  - Use libdb-utils instead of old db4-utils.
  - net-tools is no longer used; replaced by iproute (RHBZ#784647).
  - Try re-enabling tests on i686.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.3-2
changelog:
  - New upstream version 1.17.3.
  - Remove patch now upstream.
  - Add upstream patch to fix OCaml bytecode compilation.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.6-1
changelog:
  - +BR ruby-irb.
  - Make virtio unconditional.  It's been a very long time since disabling
    virtio was a good idea.
  - Disable some packages not available in RHEL 7.
  - New upstream version 1.17.6.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.11-2
changelog:
  - Require netpbm-progs, icoutils.  These are needed for icon generation
    during inspection, but were not being pulled in before.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.22-2
changelog:
  - Include all gobject header files.
  - Include gtk-doc, and depend on the gtk-doc package at runtime.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.17.38-3
changelog:
  - Remove explicit runtime deps for old virt-sysprep.
  - Add explicit runtime dep on fuse (RHBZ#767852, thanks Pádraig Brady).
  - Remove explicit versioned dep on glibc.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.2-3
changelog:
  - Remove obsolete list of bugs in make check rule.
  - Remove some obsolete test workarounds.
  - Disable i386 tests (because of RHBZ#825944).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.6-1
changelog:
  - New upstream version 1.19.6.
  - This version defaults to using virtio-scsi.
  - Requires qemu >= 1.0.
  - Requires febootstrap >= 3.15.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.28-3
changelog:
  - New upstream version 1.19.28.
  - Update libguestfs-find-requires to generate ordinary lib dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.29-2
changelog:
  - New upstream version 1.19.29.
  - Remove RELEASE NOTES from doc section, and add equivalent man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.33-3
changelog:
  - Fix Perl examples directory so we only include the examples.
  - Add Java examples to java-devel RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.36-1
changelog:
  - Switch to using libvirt as the backend for running the appliance.  See:
    https://www.redhat.com/archives/libguestfs/2012-August/msg00070.html
  - Use configure RPM macro instead of ./configure.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.40-3
changelog:
  - Add (non-upstream) patch to add the noapic flag on the kernel
    command line on i386 only.  This works around a bug in 32-bit qemu.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.44-2
changelog:
  - Enable sVirt (NB: requires libvirt >= 0.10.2-3, selinux-policy >= 3.11.1-23).
  - Add upstream patch to label the custom $TMPDIR used in test-launch-race.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.56-3
changelog:
  - Add upstream patch to disable virt-format test, and disable
    it because wipefs utility is broken.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.63-2
changelog:
  - Remove non-upstream patch designed to work around
    https://bugzilla.redhat.com/show_bug.cgi?id=857026
    to see if this has been fixed.
  - Re-enable tests on i686 to see if
    https://bugzilla.redhat.com/show_bug.cgi?id=870042
    has been fixed.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.19.63-3
changelog:
  - Re-add: Non-upstream patch to add the noapic flag on the kernel
    command line on i386 only.  This works around a bug in 32-bit qemu,
    https://bugzilla.redhat.com/show_bug.cgi?id=857026


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.0-1
changelog:
  - New upstream version 1.20.0.
  - New source URL for this branch.
  - Reconcile upstream packagelist, BRs and Requires lists.
  - Requires newest SELinux policy so that SVirt works.
  - Fix patch 2.  Actually, remove and replace with a small script.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.0-2
changelog:
  - Use 'make check -k' so we get to see all test failures at once.
  - For RHEL 7:
    * Do not depend on perl(Expect) (only needed to test virt-rescue).
    * Depend on /usr/bin/qemu-img instead of qemu-img package, since the
      package name (but not the binary) is different in RHEL 7.
    * Add workaround for libvirt/KVM bug RHBZ#878406.
    * Do not depend on libvirt-daemon-qemu.
    * Do not depend on libldm (not yet in RHEL 7: RHBZ#887894).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.0-5
changelog:
  - Remove RHEL-conditionals, since I have branched spec file for RHEL 7.
  - Add BR gdisk.
  - Change to using git to manage patches.
  - Add copy-patches.sh script.
  - Disable libguestfs live (RHEL only).
  - "Fedora" -> "RHEL" in replacement README file.
  - "fedora" -> "rhel" in version extra field.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.1-4
changelog:
  - Go over all non-upstream patches from RHEL 6 and add appropriate ones
    to RHEL 7:
    * Emphasize libguestfs-winsupport.
    * Remove libguestfs-live ('unix' attach-method).
    * Exclude iptables.
    * Ignore /etc/release file if /etc/redhat-release file exists.
    resolves: rhbz#889536, rhbz#889537, rhbz#889538, rhbz#873219
  - Do not number patches.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.2-1
changelog:
  - New upstream version 1.20.2.
  - Synchronize list of tests to be skipped with local list.
  - Use openjdk instead of java (GCJ).
  - Add BRs: libcap.
  - Ship the gobject pkgconfig file.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.5-1
changelog:
  - New upstream version 1.20.5.
  - Remove ruby vendor patch.
  - Set INSTALLDIRS=vendor on both make and make install rules.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.5-2
changelog:
  - Remove deprecated programs virt-tar, virt-list-filesystems and
    virt-list-partitions from RHEL 7.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.5-4
changelog:
  - In RHEL 7, 'ruby(abi)' has been replaced by 'ruby(release)'
    and the version of the ruby ABI/release is now 2.0.0.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.21.33-1.el7
changelog:
  - New upstream version 1.21.33.
  - Rebuild for renamed Kerberos library.
    resolves: rhbz#957616
  - Skip gnulib tests which fail.
  - Skip NBD test since there is no NBD in RHEL.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.2-1
changelog:
  - New upstream version 1.22.2.
  - Do not need to remove guestfsd man page, since libguestfs no longer
    installs it.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.4-2
changelog:
  - New upstream stable version 1.22.4.
  - Move virt-sysprep to libguestfs-tools-c package
    resolves: rhbz#975573
  - Remove 9p APIs from RHEL
    resolves: rhbz#921710
  - Reenable swapon test
    resolves: rhbz#911674
  - Reenable file architecture test
    resolves: rhbz#911678
  - Fix mkfs blocksize option when using xfs
    resolves: rhbz#976250
  - Fix double-free when kernel link fails during launch
    resolves: rhbz#983691
  - Fix disk-format "JSON parse error" when target file does not exist
    resolves: rhbz#980338
  - Fix documentation for acl-set-file
    resolves: rhbz#985856
  - libguestfs-devel should depend on full ENVR of libguestfs-tools-c.
  - Require /usr/bin/vi instead of /bin/vi for UsrMove.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.5-2
changelog:
  - New upstream stable version 1.22.5.
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988862
  - Disable unsupported remote drives
    resolves: rhbz#962113
  - cap-get-file returns empty string instead of error if no capabilities
    resolves: rhbz#989356


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-4
changelog:
  - New upstream stable version 1.22.6.
    resolves: rhbz#995712, rhbz#998750, rhbz#998485
  - Backport set-UUID API and related
    resolves: rhbz#995176
  - Enable kvmclock
    resolves: rhbz#998109
  - Add upstream APIs guestfs_add_drive_scratch, guestfs_remount.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-5
changelog:
  - Various fixes to tar-out 'excludes'
    resolves: rhbz#1001875
  - Document use of glob + rsync-out
    resolves: rhbz#1001876
  - Document mke2fs blockscount
    resolves: rhbz#1002032
  - Fix virt-format MBR partition type byte, add --label option to
    virt-format and virt-make-fs, and allow labels to be set on DOS filesystems
    resolves: rhbz#1000428
  - Fix javadoc location to use _javadocdir macro.
  - Call ldconfig in java post and postun scripts.
  - Do not explicitly depend on perl-devel.
  - Compress the ChangeLog and *.xml files in devel package.
  - Create new subpackage gobject-doc for the huge HTML documentation.
  - Make javadoc, gobject-doc, bash-completion, man-pages-*, tools packages
    'noarch'.
  - Enable gzip-compressed appliance.
  - Note this requires supermin >= 4.1.4.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-8
changelog:
  - Backport 'cachemode' property of 'add_drive'
    resolves: rhbz#1003291
  - Improve error reporting from aug_init
    related: rhbz# 1003685


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-9
changelog:
  - Use 'host-passthrough' instead of 'host-model' (RHBZ#1011922)
  - Fix mount-loop failed to setup loop device: No such file or directory
    resolves: rhbz#1011907


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-10
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019503


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-11
changelog:
  - Further fixes for kvmclock
    resolves: rhbz#998109
  - Document that blockdev-setbsz is deprecated and should not be used
    resolves: rhbz#1016465


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-12
changelog:
  - Backport: "daemon: Fix xfs_info parser because of new format."
    which is required to fix libguestfs tests.
    related: rhbz#1019503


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-15
changelog:
  - Add libguestfs-tools.conf(5) man page
    resolves: rhbz#1019891
  - Drop PHP bindings
    resolves: rhbz#1020021
  - Disable Haskell & Erlang (in case someone has these dependencies
    installed and tries to rebuild the package).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-19
changelog:
  - Fix placement of *.py[co] files
    resolves: rhbz#1061155
  - Remove bogus license file from daemon
    resolves: rhbz#1061160
  - Prevent virt-sparsify from overwriting block or char devices
    resolves: rhbz#1056556
  - mount-local should give a clearer error if root is not mounted
    resolves: rhbz#1057492


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-21
changelog:
  - Fix segfault in guestfs_list_filesystems when presented with a
    corrupt btrfs filesystem
    resolves: rhbz#1064008


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.1
changelog:
  - Final rebase to stable libguestfs branch 1.28.
    resolves: rhbz#1021149
  - Drop dist tag for BuildRequires, so it builds on ppc64le.
    resolves: rhbz#1149640
  - Make sure we require the latest libvirt, so virt-v2v can access ESX.
  - Fix guestfish colour prompts when using white-on-black terminal
    resolves: rhbz#1144201
  - Disable libguestfs UML backend mode
    resolves: rhbz#1144197
  - Enable ppc64, ppc64le and aarch64.
    On ppc64 we currently have to disable build-time testing of qemu.
    resolves: rhbz#1125575
  - Remove unnecessary BR for libnl3 in RHEL < 7.1.
  - Integrate changes from Rawhide.
  - Add workaround for buggy libvirt 1.2.8.
  - Move virt-v2v into a separate subpackage and make it depend on qemu-kvm-rhev.
  - Add rhsrvany and RHEV Application Provisioning Tool to virt-v2v.
  - Change Fedora -> RHEL in description.
  - Disable some more protocol tests.
  - Enable tests.
  - Enable guestfish colour prompts.
  - Add new tool virt-log.
  - Enabling bash-completions subpackage means we need to BR bash-completion.
  - Package libguestfs 1.27/1.28 for RHEL 7.1.
  - Enable bash-completion.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.2
changelog:
  - v2v: Add support for ZIP and *.vmdk.gz to -i ova
    resolves: rhbz#1152998
  - virt-ls: Add a field for directory files when using --csv option
    resolves: rhbz#1151900
  - v2v: Mitigate hangs when run against a very slow VMware vCenter server
    resolves: rhbz#1153589
  - cat, diff: Avoid double slashes in paths
    resolves: rhbz#1151910


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.3
changelog:
  - v2v: Fix conversion from NBD sources
    resolves: rhbz#1153589
  - v2v: BR zip and unzip, and require unzip, for ZIP support in -i ova mode
    related: rhbz#1152998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.4
changelog:
  - v2v: Fix handling of relative paths in -i ova
    resolves: rhbz#1155121
  - v2v: disable uninstallation of VMware drivers on Linux for RHEL 7.1
    resolves: rhbz#1155610


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.5
changelog:
  - virt-sysprep & virt-customize: Fix password setting problems
    resolves: rhbz#1141626, rhbz#1147065
  - virt-inspector: document that -a option can take a URI
    resolves: rhbz#1156301
  - bash-completion: use symlinks instead of copying files
    resolves: rhbz#1156298


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.7
changelog:
  - guestfish: Fix tab completion of filenames on XFS and elsewhere
    resolves: rhbz#1153844
  - v2v: Ensure <features/> are set in output so ACPI etc works
    resolves: rhbz#1159258
  - v2v: Add --password-file parameter
    resolves: rhbz#1158526


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.8
changelog:
  - p2v: Explain in the man page why the virt-p2v ISO is used.
  - p2v: Ensure we are using virt-v2v >= 1.28.
  - v2v: Add bounds check to Xml.xpathobj_node function.
  - v2v: Ensure --bridge and --network args are documented correctly in --help
  - v2v: -i libvirt vcenter: Change 'esx:' to 'vcenter:' in errors/warnings.
  - v2v: Ignore small filesystems when checking for sufficient free space.
  - v2v: Document minimum free filesystem space requirements.
    related: rhbz#1021149
  - customize: firstboot: make sure to run Linux scripts only once
    resolves: rhbz#1160043
  - customize: firstboot: fix Linux log output
    resolves: rhbz#1160199


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.10
changelog:
  - v2v: -o glance: Fix metadata for disk type and NIC
    resolves: rhbz#1161575
  - check xfs label lengths
    resolves: rhbz#1162966


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.11
changelog:
  - Fix inspect-get-icon on RHEL 7 guests
    resolves: rhbz#1164619
  - Fix description of set-append (append) and get-append commands
    resolves: rhbz#1164732
  - Fix small typo in release notes.
    resolves: rhbz#1164697


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.13
changelog:
  - v2v: Fix device mapping of /boot/grub2/device.map
    resolves: rhbz#1165975
  - v2v: Fix 'no volume groups found' because of old LVM cache file
    resolves: rhbz#1164853


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.14
changelog:
  - p2v: Add Reboot button to the GUI
    resolves: rhbz#1165564
  - p2v: Fixes to 'Cancel Conversion' button
    resolves: rhbz#1165569
  - v2v: -i ova: Remove incorrect warning for disks with no parent controller
    resolves: rhbz#1167302
  - resize: Capture errors from ntfsresize
    resolves: rhbz#1166618


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.15
changelog:
  - v2v: Document Windows Group Policy problems causing 0x0000007B BSOD
    resolves: rhbz#1161333
  - v2v: Fix conversion of RHEL 3 guests
    resolves: rhbz#1171130
  - v2v: Fix conversion of RHEL 4 guests that use epoch
    resolves: rhbz#1170685
  - v2v: Favour non-debug kernels over debug kernels
    resolves: rhbz#1170073
  - p2v: Fix kickstart for virt-p2v
    resolves: rhbz#1168632
  - Fixed some documentation mistakes.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.18
changelog:
  - v2v: Copy graphics password from source to destination
    resolves: rhbz#1174123
  - p2v: Allow ports to be reused and specify source port number
    resolves: rhbz#1167774
  - p2v: Fix "Conversion was successful" dialog appearing on failure
    resolves: rhbz#1167601


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.22
changelog:
  - aarch64: Increase default appliance memory size.
  - Make gfs2-utils conditional on x86, as it will not be supported on ARM.
  - inspection: aarch64: Backport fix for inspection of EFI guests.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.24
changelog:
  - Open RHEL 7.2 branch.
  - Import brew-overrides.sh into dist-git.
  - copy-patches.sh: Relax arbitrary requirement to split patches into
    backports and RHEL 7 specific patches.
  - v2v: Add --vdsm-ovf-output option
    resolves: rhbz#1176598
  - v2v: Fix -o vdsm to work with multiple data domains
    resolves: rhbz#1176591
  - v2v: Support conversions of Windows >= 8
    resolves: rhbz#1190669
  - v2v: Document that vCenter >= 5.0 is required
    resolves: rhbz#1174200


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.25
changelog:
  - Enable rbd (Ceph) support.
  - rbd: Implement drive secrets
    resolves: rhbz#1159030
  - virt-resize: Fix 'no space left on device' when resizing extended partition
    resolves: rhbz#1172660
  - v2v: Update RHEV-APT to latest
    resolves: rhbz#1186850
  - v2v: Update rhsrvany.exe to latest
    resolves: rhbz#1187231
  - Drop dependency on selinux-policy
    resolves: rhbz#1196705
  - Depend on fuse
    resolves: rhbz#1201507
  - v2v: Allow configurable location for virtio drivers [1209225]
  - Various fixes for setting long labels
    resolves: rhbz#1164708
  - Fix mknod APIs not stripping permission bits from mode
    resolves: rhbz#1182463
  - Allow LIBGUESTFS_TRACE=0, LIBGUESTFS_DEBUG=true etc
    resolves: rhbz#1175196
  - Fix typo in description of ping-daemon API
    resolves: rhbz#1175676
  - Disable gfs2 subpackage on !x86-64 [1211333]


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.26
changelog:
  - v2v: Keep listen address for VNC
    resolves: rhbz#1174073
  - v2v: Preserve display port configuration when converting guests
  - v2v: Support conversion of guests with disk type volume
    resolves: rhbz#1146832
  - v2v: Initial support for gzipped ova imports.
    related: rhbz#1186800


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.28
changelog:
  - Remove 'ssh:' URLs from documentation
    resolves: rhbz#1212677
  - libguestfs-tools-c 'provides' guestfish
    (NB: will be removed in RHEL 8, use 'Requires: /usr/bin/guestfish' instead)
    resolves: rhbz#1212002
  - v2v: Fix: warning: unknown guest operating system: windows when converting
    to RHEV targets
    resolves: rhbz#1213324
  - v2v: Fix: warning: fstrim: fstrim: /sysroot/: FITRIM ioctl failed
    resolves: rhbz#1168144


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.33
changelog:
  - p2v: Add restrictions for vCPUs and memory in client
    resolves: rhbz#823758
  - v2v: Check if guest with same name already exists in libvirt
    resolves: rhbz#889082
  - p2v: Add Network Connection dialog
    resolves: rhbz#1167921
  - v2v: Fix list of operating system variants passed to RHEV
    resolves: rhbz#1219857, rhbz#1213324, rhbz#1213691
  - ppc64: Remove part of temporary workaround
    related: rhbz#1177910


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.35
changelog:
  - Further attempts to fix qemu-kvm dependency on aarch64, ppc64, ppc64le
    resolves: rhbz#1177910
  - v2v: Fix memory leak in earlier fix for bug 889082
    resolves: rhbz#889082


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.36
changelog:
  - p2v: Fix network in virt-p2v appliance
    resolves: rhbz#1222975
  - p2v: Display network card MAC and vendor in conversion dialog (855059).
  - p2v: More fixes to Add Network Connection dialog
    related: rhbz#1167921
  - virt-builder: Fix --selinux-relabel flag on cross-arch builds
    resolves: rhbz#1222993


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.37
changelog:
  - ppc64le: Rebuild with fixed OCaml compiler
    resolves: rhbz#1224676, rhbz#1224675
  - Fix virt-sparsify on qcow2 files when using qemu-kvm
    resolves: rhbz#1225467
  - Remove some perl dependencies which are no longer actually used.
  - Further attempts to fix qemu-kvm dependency on aarch64, ppc64le
    resolves: rhbz#1177910


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.38
changelog:
  - p2v: Set conversion status when conversion is cancelled
    resolves: rhbz#1226794
  - p2v: Fix kernel command line parsing
    resolves: rhbz#1229340
  - p2v: In command line mode, power off machine after conversion
    resolves: rhbz#1229385
  - Fix for rebased systemd in RHEL 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.39
changelog:
  - v2v: Depend on qemu-kvm instead of qemu-kvm-rhev (except on aarch64/power).
  - v2v: Don't fail if one of the input disks is blank
    resolves: rhbz#1232192
  - p2v: Fix parsing of p2v.memory parameter (1229262).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.40
changelog:
  - v2v: Disable support for Windows > 7.
    reverts: rhbz#1190669
  - v2v: Add support for getting drivers from virtio-win ISO
    resolves: rhbz#1234351


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.41
changelog:
  - v2v: Extend the timeout when converting from VMware
    resolves: rhbz#1146007
  - v2v: Fix memory safety when freeing libxml2 objects.
  - v2v: Add comment to OVF output if actual_size field is estimated.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.42
changelog:
  - v2v: Fix installation of virtio drivers in Windows 2008 and 2008 R2
    resolves: rhbz#1237869
    related: rhbz#1234351


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.44
changelog:
  - v2v: Fix error message when grub.conf is malformed
    resolves: rhbz#1239053
  - v2v: Various fixes to conversion of UEFI systems
    resolves: rhbz#1184690


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.46
changelog:
  - v2v: Refuse to convert Windows > 7
    reverts: rhbz#1190669
  - v2v: Depend directly on libguestfs-xfs
    resolves: rhbz#1240275
  - v2v: Inclusion of libguestfs-winsupport in RHEL 7.2
    resolves: rhbz#1240274, rhbz#1240276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use lib in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-30
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1192314 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-59
changelog:
  - Resolves: rhbz#1201840 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-60
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1201840 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0.1alpha
changelog:
  - Resolves: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Relax the libldb requirement
  - Resolves: rhbz#1221992 - sssd_be segfault at 0 ip sp error 6 in
                             libtevent.so.0.9.21
  - Resolves: rhbz#1221839 - SSSD group enumeration inconsistent due to
                             binary SIDs
  - Resolves: rhbz#1219285 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Resolves: rhbz#1217559 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1217350 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1217127 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1216285 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set
  - Resolves: rhbz#1214719 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1214718 - Overridde with --login fails trusted adusers
                             group membership resolution
  - Resolves: rhbz#1214716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1214337 - Overrides with --login work in second attempt
  - Resolves: rhbz#1212489 - Disable the cleanup task by default
  - Resolves: rhbz#1211830 - external users do not resolve with
                             "default_domain_suffix" set in IPA server sssd.conf
  - Resolves: rhbz#1210854 - Only set the selinux context if the context
                             differs from the local one
  - Resolves: rhbz#1209483 - When using id_provider=proxy with
                             auth_provider=ldap, it does not work as expected
  - Resolves: rhbz#1209374 - Man sssd-ad(5) lists Group Policy Management
                             Editor naming for some policies but not for all
  - Resolves: rhbz#1208507 - sysdb sudo search doesn't escape special characters
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface
  - Resolves: rhbz#1206566 - SSSD does not update Dynamic DNS records if
                             the IPA domain differs from machine hostname's
                             domain
  - Resolves: rhbz#1206189 - [bug] sssd always appends default_domain_suffix
                             when checking for host keys
  - Resolves: rhbz#1204203 - sssd crashes intermittently
  - Resolves: rhbz#1203945 - [FJ7.0 Bug]: getgrent returns error because
                             sss is written in nsswitch.conf as default
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only
  - Resolves: rhbz#1202245 - SSSD's HBAC processing is not permissive enough
                             with broken replication entries
  - Resolves: rhbz#1201271 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything
  - Resolves: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                             user logs in with password and token code from IPA
  - Resolves: rhbz#1199541 - Read and use the TTL value when resolving a
                             SRV query
  - Resolves: rhbz#1199533 - [RFE] Implement background refresh for users,
                             groups or other cache objects
  - Resolves: rhbz#1199445 - Does sssd-ad use the most suitable attribute
                             for group name?
  - Resolves: rhbz#1198477 - ccname_file_dummy is not unlinked on error
  - Resolves: rhbz#1187103 - [RFE] User's home directories are not taken
                             from AD when there is an IPA trust with AD
  - Resolves: rhbz#1185536 - In ipa-ad trust, with 'default_domain_suffix' set
                             to AD domain, IPA user are not able to log unless
                             use_fully_qualified_names is set
  - Resolves: rhbz#1175760 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires
  - Resolves: rhbz#1163806 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1205160 - Complain loudly if backend doesn't start due
                             to missing or invalid keytab


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 upstream
  - Related: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Resolves: rhbz#910187 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-3
changelog:
  - Add support for InfoPipe wildcard requests
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1206565 - [RFE] Add dualstack and multihomed support
  - Resolves: rhbz#1187146 - If v4 address exists, will not create nonexistant
                             v6 in ipa domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-8
changelog:
  - Remove OTP from PAM stack correctly
  - Related: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                            user logs in with password and token code from IPA
  - Handle sssd-owned keytabs when sssd runs as root
  - Related: rhbz#1205144 - RFE: Support one-way trusts for IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-9
changelog:
  - Fix memory cache integration tests
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-10
changelog:
  - Resolves: rhbz#1244949 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-11
changelog:
  - Remove binary blob from SC patches as patch(1) can't handle those
  - Related: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-12
changelog:
  - More memory cache related fixes
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-13
changelog:
  - Fix missing dependency of sssd-tools
  - Resolves: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                             named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-14
changelog:
  - Bump release number
  - Related: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                            named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-15
changelog:
  - Resolves: rhbz#1249015 - KDC proxy not working with SSSD krb5_use_kdcinfo
                             enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-16
changelog:
  - Fix race condition in invalidating the memory cache
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-19
changelog:
  - Resolves: rhbz#1202724 - [RFE] Add a way to lookup users based on CAC
                             identity certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-20
changelog:
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA
                            subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-22
changelog:
  - Resolves: rhbz#1244950 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-23
changelog:
  - Support import/export for local overrides
  - Support FQDNs for local overrides
  - Resolves: rhbz#1254184 - sss_override does not work correctly when
                             'use_fully_qualified_names = True'


author: Martin Kosek <mkosek@redhat.com> - 1.13.0-25
changelog:
  - Resolves: rhbz#1254189 - sss_override contains an extra parameter --debug
                             but is not listed in the man page or in
                             the arguments help


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-26
changelog:
  - Resolves: rhbz#1256398 - sssd cannot resolve user names containing
                             backslash with ldap provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-29
changelog:
  - Resolves: rhbz#1263587 - sss_override --name doesn't work with RFC2307
                             and ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-30
changelog:
  - Patches required for better handling of failover with one-way trusts
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA subdomain
                            code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-41
changelog:
  - Resolves: rhbz#1284814  - sssd: [sysdb_add_user] (0x0400): Error: 17
                             (File exists)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.2
changelog:
  - Resolves: rhbz#1311569 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.4
changelog:
  - Resolves: rhbz#1324442 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.5
changelog:
  - Resolves: rhbz#1336836 - IPA provider crashes if a netgroup from a
                             trusted domain is requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.6
changelog:
  - Resolves: rhbz#1337292 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.7
changelog:
  - Resolves: rhbz#1339207 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.8
changelog:
  - Resolves: rhbz#1339258 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.9
changelog:
  - Resolves: rhbz#1339509 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.11
changelog:
  - Resolves: rhbz#1353605 - sssd-libwbclient: wbcSidsToUnixIds should not
                             fail on lookup errors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.12
changelog:
  - Resolves: rhbz#1356433 - ldap_group_external_member is no set for the
                             IPA provider


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Tom Lane <tgl@redhat.com> 2:1.2.16-1
changelog:
  - Update to libpng 1.2.16
  Resolves: #211705, #216706, #227334
  - Separate libpng.a into a -static subpackage
  - Other minor packaging fixes per Fedora merge review
  Resolves: #226038


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #717509
  Resolves: #721307


author: Tom Lane <tgl@redhat.com> 2:1.5.6-1
changelog:
  - Update to new major release series 1.5.x; includes source-code-incompatible
    API changes and a soname version bump
  - Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 2:1.5.6-2
changelog:
  - Don't include libpng12.pc in the compat subpackage; instead just offer a
    phony Provides: for it in the devel subpackage


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for 
    longer PIDs
    Resolves: rhbz#1277538


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1198650 SELinux context string size limit
  - Resolves: rhbz#1198649 Add new option for BSI random requirement


author: Paul Wouters <pwouters@redhat.com> - 3.12-7
changelog:
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1211146 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-9
changelog:
  - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]
  - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]


author: Paul Wouters <pwouters@redhat.com> - 3.15-2
changelog:
  - Resolves: rhbz#1259208 CVE-2015-3240
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1270673 ipsec does not work properly on loopback


author: Chris Weyl <cweyl@alumni.drew.edu> 1.2.4-1
changelog:
  - update to 1.2.4
  - drop old patch0
  - be more aggressive about keeping .deps from intruding into -docs


author: Kamil Dudka <kdudka@redhat.com> 1.2.7-1
changelog:
  - update to 1.2.7 (#632916)
  - avoid multilib conflict on libssh2-docs
  - avoid build failure in mock with SELinux in the enforcing mode (#558964)


author: Paul Howarth <paul@city-fan.org> 1.3.0-3
changelog:
  - make docs package noarch where possible
  - example includes arch-specific bits, so move to devel package
  - use patch rather than scripted iconv to fix character encoding
  - don't make assumptions about SELinux context types used for the ssh server
    in the test suite
  - skip the ssh test if /dev/tty isn't present, as in some versions of mock
  - make the %files list more explicit
  - use tabs for indentation


author: Paul Howarth <paul@city-fan.org> 1.4.0-1
changelog:
  - update to 1.4.0
    - added libssh2_session_supported_algs()
    - added libssh2_session_banner_get()
    - added libssh2_sftp_get_channel()
    - libssh2.h: bump the default window size to 256K
    - sftp-seek: clear EOF flag
    - userauth: provide more informations if ssh pub key extraction fails
    - ssh2_exec: skip error outputs for EAGAIN
    - LIBSSH2_SFTP_PACKET_MAXLEN: increase to 80000
    - knownhost_check(): don't dereference ext if NULL is passed
    - knownhost_add: avoid dereferencing uninitialized memory on error path
    - OpenSSL EVP: fix threaded use of structs
    - _libssh2_channel_read: react on errors from receive_window_adjust
    - sftp_read: cap the read ahead maximum amount
    - _libssh2_channel_read: fix non-blocking window adjusting 
  - add upstream patch fixing undefined function reference in libgcrypt backend
  - BR: /usr/bin/man for test suite


author: Paul Howarth <paul@city-fan.org> 1.4.0-2
changelog:
  - fix libssh2 failing key re-exchange when write channel is saturated (#804156)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 1.4.0-3
changelog:
  - Don't try to use openssl's AES-CTR functions
    (http://www.libssh2.org/mail/libssh2-devel-archive-2012-03/0111.shtml)


author: Paul Howarth <paul@city-fan.org> 1.4.1-1
changelog:
  - Update to 1.4.1
    - Build error with gcrypt backend
    - Always do "forced" window updates to avoid corner case stalls
    - aes: the init function fails when OpenSSL has AES support
    - transport_send: finish in-progress key exchange before sending data
    - channel_write: acknowledge transport errors
    - examples/x11.c: make sure sizeof passed to read operation is correct
    - examples/x11.c: fix suspicious sizeof usage
    - sftp_packet_add: verify the packet before accepting it
    - SFTP: preserve the original error code more
    - sftp_packet_read: adjust window size as necessary
    - Use safer snprintf rather then sprintf in several places
    - Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    - sftp_write: cannot return acked data *and* EAGAIN
    - sftp_read: avoid data *and* EAGAIN
    - libssh2.h: add missing prototype for libssh2_session_banner_set()
  - Drop upstream patches now included in release tarball


author: Paul Howarth <paul@city-fan.org> 1.4.2-1
changelog:
  - Update to 1.4.2
    - Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    - userauth.c: fread() from public key file to correctly detect any errors
    - configure.ac: add option to disable build of the example applications
    - added 'Requires.private:' line to libssh2.pc
    - SFTP: filter off incoming "zombie" responses
    - gettimeofday: no need for a replacement under cygwin
    - SSH_MSG_CHANNEL_REQUEST: default to want_reply
    - win32/libssh2_config.h: remove hardcoded #define LIBSSH2_HAVE_ZLIB


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-3
changelog:
  - Fix basic functionality of libssh2 in FIPS mode
  - Skip SELinux-related quirks on recent distros to prevent a test-suite failure


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-4
changelog:
  - examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
  - Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.5-7
changelog:
  - Let rpmbuild strip binaries, make build more verbose.
  - Resolves rhbz#669477 - libtalloc 2.0.5-6 binaries not stripped,
  -                        empty -debuginfo
  - Original patch by Ville SkyttÃ¤ <ville.skytta@iki.fi>


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.9-1
changelog:
  - New upstream bugfix release
  - Adds a new tdbrestore utility
  - Convert to new WAF build-system
  - Add python bindings in new python-tdb subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.9-7
changelog:
  - Let rpmbuild strip binaries, make build more verbose.
  - Original patch by Ville SkyttÃ¤ <ville.skytta@iki.fi>


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-15
changelog:
  - New upstream release 1.2.10
  - Remove upstreamed patches
  - Provides functionality for the upcoming Samba 4 beta


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jiri Pirko <jpirko@redhat.com> - 1.9-1
changelog:
  - Rebase to 1.9
  - libteamdctl: remove false lib dependencies
  - teamdctl: use new port config get function
  - libteamdctl: introduce support for port config get
  - libteamdctl: cache reply strings into list
  - teamd: introduce PortConfigDump control method
  - teamd: make teamd_get_port_by_ifname ifname argument const
  - Minor improvements to style and language.
  - do not install example binaries
  - minor man page(s) correction(s) and lintianisation
  - teamdctl: print error message if ifindex cannot be obtained
  - fix cflags path in pc files
  Resolves: rhbz#1028138
  Resolves: rhbz#1013640
  Resolves: rhbz#1029186


author: Jiri Pirko <jpirko@redhat.com> - 1.9-3
changelog:
  - man teamdctl: Minor improvements to style and language [1055940]
  - man teamd.conf: Minor improvements to style and language [1055940]
  - fix comment typo in ifdown-Team scripts [1035173]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-8
changelog:
  - teamd: fixed couple comments [1067851]
  - teamd: update hwaddr when changing team's macaddr [1067851]
  - redhat: fix boolean types in example 2 [1067851]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-13
changelog:
  - teamdctl: add command for easy port presention checking [1081214]
  - initscripts: do not try to re-add port if it is already there [1081214]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-14
changelog:
  - teamd_link_watch: allow to send ARP probes if no source_host is specified [1078993]
  - bond2team: do not guess source_host option [1079059]
  - teamd_link_watch: specify "missed_max" option default value [1079059]
  - man: correct type of "*_host" options [1078993]


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.15-1
changelog:
  - New upstream release 0.9.15
  - Properly re-sets the nested.level flag in the ev.ctx when reinitializing
    after a fork()
  - Allow tevent_signal events to be freed during their handler


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.16-1
changelog:
  - New upstream release 0.9.16
  - Adds tevent_*_trace_*() and tevent_context_init_ops()
  - Move tevent.py to the arch-specific directory


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Apply a patch from upstream to fix tevent_poll's additional_flags
    on 32bit architectures
  - Resolves: rhbz#975490


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.18-3
changelog:
  - Make the dependency requirements arch-specific
  - Remove ancient, unused patches
  - Remove python variables that are not needed on modern systems


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Petr Hracek <phracek@redhat.com> - 4.0.3-15
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299920


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - disable the --cache-file passing to ltconfig; this breaks the older
    ltconfig scripts found around.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - explicitly disable per-arch libraries (#2210)
  - undo hard links and remove zero length file (#2689)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch to use mktemp to create the tempdir
  - use %configure after defining __libtoolize to /bin/true


author: Jens Petersen <petersen@redhat.com> 1.4.2-3
changelog:
  - test quoting patch should be on ltmain.in not ltmain.sh (#53276)
  - use file_magic for Linux ELF (#54887)
  - allow link against an archive when building a shared library (#54887)
  - include ltdl.m4 in manifest (#56671)


author: Jens Petersen <petersen@redhat.com> 1.4.2-5
changelog:
  - revert filemagic and archive-shared patches following cvs (#54887)
  - don't change "&& test" to "-a" in ltmain.in


author: Jens Petersen <petersen@redhat.com> 1.4.2-8
changelog:
  - add old patch from aoliva to fix relinking when installing into a buildroot
  - backport dup-deps fix from cvs stable branch


author: Jens Petersen <petersen@redhat.com> 1.4.2-11
changelog:
  - don't hardcode "configure.in" in libtoolize (#70864)
    [reported by bastiaan@webcriminals.com]
  - make check, but not on ia64


author: Jens Petersen <petersen@redhat.com> 1.4.3-1
changelog:
  - update to 1.4.3
  - remove obsolete patches (test-quote, dup-deps, libtoolize-configure.ac)
  - apply the multilib patch to just the original config files
  - update x86_64/s390 patch and just apply to original config files
  - use automake-1.4 in "make check" for demo-make.test to pass!
  - remove info dir file that is not installed
  - make autoreconf update missing


author: Jens Petersen <petersen@redhat.com> 1.4.3-2
changelog:
  - define SED in ltmain.sh for historic ltconfig files
  - define macro AUTOTOOLS to hold automake-1.4 and aclocal-1.4, and use it
  - leave old missing file for now
  - general spec file cleanup
    - don't copy install files to demo nor mess with installed ltdl files
    - don't need to run make in doc
    - force removal of info dir file
    - don't need to create install prefix dir
    - don't bother gzipping info files ourselves


author: Jens Petersen <petersen@redhat.com>
changelog:
  - add --without check build option to allow disabling of "make check"
  - exclude info dir file rather than removing


author: Jens Petersen <petersen@redhat.com> 1.4.3-3
changelog:
  - fix mktemp to work when running mktemp fails (#76602)
    [reported by (Oron Peled)]
  - remove info dir file, don't exclude it
  - fix typo in -libs description (#79619)
  - use buildroot instead of RPM_BUILD_ROOT


author: Florian La Roche <Florian.LaRoche@redhat.de> - 1.4.3-5
changelog:
  - add config.guess and config.sub, otherwise old versions of
    these files can creep into /usr/share/libtool/


author: Jens Petersen <petersen@redhat.com> - 1.5-1
changelog:
  - update to 1.5
  - no longer override config.{guess,sub} for rpmbuild %configure,
    redhat-rpm-config owns those now
  - update and rename libtool-1.4.2-s390_x86_64.patch to
    libtool-1.5-libtool.m4-x86_64.patch since s390 now included
  - buildrequire autoconf and automake, no longer automake14
  - skip make check on s390 temporarily
  - no longer skip demo-nopic.test on x86_64, s390 and s390x
  - from Owen Taylor
    - add libtool-1.4.2-expsym-linux.patch (#55607) [from James Henstridge]
    - add quoting in mktemp patch
    - add libtool-1.5-readonlysym.patch
    - add libtool-1.5-testfailure.patch workaround
    - no longer need libtool-1.4.2-relink-58664.patch


author: Jens Petersen <petersen@redhat.com> - 1.5-3
changelog:
  - don't use %configure since target options caused libtool to assume
    i386-redhat-linux-gcc instead of gcc for CC (reported by Joe Orton)
  - add libtool-1.5-relink-libdir-order-91110.patch to fix order of lib dirs
    searched when relinking (#91110) [patch from Joe Orton]


author: Jens Petersen <petersen@redhat.com> - 1.5-4
changelog:
  - remove the quotes around LD in AC_PROG_LD_GNU (#97608)
    [reported by twaugh]
  - use -nostdlib also when linking with g++ and non-GNU ld in
    _LT_AC_LANG_CXX_CONFIG [reported by fnasser, patch by aoliva]
  - use %configure with CC and CXX set


author: Jens Petersen <petersen@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2 bugfix release
  - update libtool-1.5-libtool.m4-x86_64.patch
  - nolonger need libtool-1.5-mktemp.patch, libtool-1.5-expsym-linux.patch,
    libtool-1.5-readonlysym.patch, libtool-1.5-relink-libdir-order-91110.patch,
    libtool-1.5-AC_PROG_LD_GNU-quote-v-97608.patch and libtool-1.5-nostdlib.patch


author: Jens Petersen <petersen@redhat.com> - 1.5.4-1
changelog:
  - 1.5.4 bugfix release
  - improve libtool-1.4.2-multilib.patch (Albert Chin) and only apply to
    libtool.m4
  - use bootstrap instead of autoreconf to update configuration
  - update libtool-1.4.3-ltmain-SED.patch to libtool-1.5.4-ltmain-SED.patch


author: Daniel Reed <djr@redhat.com> 1.5.10-1
changelog:
  - update to the 1.5.10 bugfix release
    - obsoletes libtool-1.4-nonneg.patch
    - obsoletes libtool-1.5-libtool.m4-x86_64.patch
    - obsoletes libtool-1.4.2-multilib.patch
    - obsoletes libtool-1.4.2-demo.patch
    - obsoletes libtool-1.5-testfailure.patch


author: Daniel Reed <djr@redhat.com> 1.5.12.multilib2-3.4.3
changelog:
  - update to the 1.5.12 bugfix release
    - Makes use of $datarootdir, which is necessary for Autoconf >= 2.60.
    - Correctly skip hppa, x86_64, and s390* in tests/demo-nopic.test.
    - Interpret `include' statements in toplevel ld.so.conf file.
    - While "parsing" /etc/ld.so.conf, skip comments.
  - add dependency on gcc version; /usr/bin/libtool hardcodes paths into gcc's internal directories
  - replace "libtool-libs" with "libtool-ltdl" and "libtool-ltdl-devel"


author: Florian La Roche <laroche@redhat.com>
changelog:
  - add version-release to the Provides: and fix our own
    Requires: line to the current naming scheme


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Karsten Hopp <karsten@redhat.com> 1.5.22-7
changelog:
  - update config.guess, config.sub with newer files from automake-1.10
  - skip over lines in /etc/ld.so.conf.d/* which don't look like absolute paths
    (p.e. files from kernel-xen). This avoids having unwanted relative paths in
    lib_search_path


author: Karsten Hopp <karsten@redhat.com> 1.5.22-11
changelog:
  - use ./configure so that config.{sub,guess} will not be replaced with ancient
    version of those files (#234778)


author: Karsten Hopp <karsten@redhat.com> 2.2.6b-1
changelog:
  - update to 2.2.6b, fixes CVE-2009-3736:
    libltdl may load and execute code from a library in the current directory


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-9
changelog:
  - fix fedora-review warnings: s/RPM_BUILD_ROOT/buildroot/, remove trailing
    white-spaces, move libltdl.so to ltdl sub-package, remove unnecessary BR
  - remove unnecessary newlines
  - fix the BuildRequire ~> Require only (#79467 related)
  - fix weird build circumstances (don't call ./bootstrap, don't call autoconf
    manually, do not touch configure script)
  - remove 'tee' invocation for copying testsuite output (the file
    'test-suite.log' is good enough)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-10
changelog:
  - temporarily disable the 'gcj' tests (#869578) -- this is just to (1) allow
    build under f18+ and RHEL-7.0 and (2) don't through out upstream testsuite.
    Added patch must be removed once the 'ecj' utility is fixed
  - libtool-ltdl shouldn't own /usr/share/libtool/ directory
  - move the .so file without version back to devel package (sorry for that)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements


author: Adam Jackson <ajax@redhat.com> 0.7.6-2
changelog:
  - libvirt-0.7.6-add-needed.patch: Fix FTBFS from --no-add-needed
  - Add BuildRequires: xmlrpc-c-client for libxmlrpc_client.so


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support
  - async job handling
  - virtio channel
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - assorted bug fixes and lots of cleanups


author: Cole Robinson <crobinso@redhat.com> - 0.7.7-2.fc14
changelog:
  - Fix USB devices by product with security enabled (bz 574136)
  - Set kernel/initrd in security driver, fixes some URL installs (bz 566425)


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - Upstream release 0.8.0
  - Snapshotting support (QEmu/VBox/ESX)
  - Network filtering API
  - XenAPI driver
  - new APIs for domain events
  - Libvirt managed save API
  - timer subselection for domain clock
  - synchronous hooks
  - API to update guest CPU to host CPU
  - virDomainUpdateDeviceFlags new API
  - migrate max downtime API
  - volume wiping API
  - and many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-1
changelog:
  - Upstream release 0.8.1
  - Starts dnsmasq from libvirtd with --dhcp-hostsfile
  - Add virDomainGetBlockInfo API to query disk sizing
  - a lot of bug fixes and cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.8.2-1
changelog:
  - Upstream release 0.8.2
  - phyp: adding support for IVM
  - libvirt: introduce domainCreateWithFlags API
  - add 802.1Qbh and 802.1Qbg switches handling
  - Support for VirtualBox version 3.2
  - Init script for handling guests on shutdown/boot
  - qemu: live migration with non-shared storage for kvm


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.2-2
changelog:
  - CVE-2010-2237 ignoring defined main disk format when looking up disk backing stores
  - CVE-2010-2238 ignoring defined disk backing store format when recursing into disk
    image backing stores
  - CVE-2010-2239 not setting user defined backing store format when creating new image
  - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for
    obtaining privileged resources on the host


author: Daniel Veillard <veillard@redhat.com> - 0.8.5-1
changelog:
  - Enable JSON and netdev features in QEMU >= 0.13
  - framework for auditing integration
  - framework DTrace/SystemTap integration
  - Setting the number of vcpu at boot
  - Enable support for nested SVM
  - Virtio plan9fs filesystem QEMU
  - Memory parameter controls
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.7-1
changelog:
  - Preliminary support for VirtualBox 4.0
  - IPv6 support
  - Add VMware Workstation and Player driver driver
  - Add network disk support
  - Various improvements and bug fixes
  - from 0.8.6:
  - Add support for iSCSI target auto-discovery
  - QED: Basic support for QED images
  - remote console support
  - support for SPICE graphics
  - sysinfo and VMBIOS support
  - virsh qemu-monitor-command
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.8-1
changelog:
  - expose new API for sysinfo extraction
  - cgroup blkio weight support
  - smartcard device support
  - qemu: Support per-device boot ordering
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.0-1
changelog:
  - Support cputune cpu usage tuning
  - Add public APIs for storage volume upload/download
  - Add public API for setting migration speed on the fly
  - Add libxenlight driver
  - qemu: support migration to fd
  - libvirt: add virDomain{Get,Set}BlkioParameters
  - setmem: introduce a new libvirt API (virDomainSetMemoryFlags)
  - Expose event loop implementation as a public API
  - Dump the debug buffer to libvirtd.log on fatal signal
  - Audit support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.1-1
changelog:
  - support various persistent domain updates
  - improvements on memory APIs
  - Add virDomainEventRebootNew
  - various improvements to libxl driver
  - Spice: support audio, images and stream compression
  - Various improvements and bug fixes


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.1-3
changelog:
  - Add upstream patches:
      0001-json-Avoid-passing-large-positive-64-bit-integers-to.patch
      0001-qemudDomainMemoryPeek-change-ownership-selinux-label.patch
      0002-remote-remove-bogus-virDomainFree.patch
    so that users can try out virt-dmesg.
  - Change /var/cache mode to 0711.


author: Daniel Veillard <veillard@redhat.com> - 0.9.2-1
changelog:
  - Framework for lock manager plugins
  - API for network config change transactions
  - flags for setting memory parameters
  - virDomainGetState public API
  - qemu: allow blkstat/blkinfo calls during migration
  - Introduce migration v3 API
  - Defining the Screenshot public API
  - public API for NMI injection
  - Various improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.2-2
changelog:
  - add rule to require netcf-0.1.8 during build so that new transactional
    network change APIs are included.
  - document that CVE-2011-2178 has been fixed (by virtue of rebase
    to 0.9.2 - see https://bugzilla.redhat.com/show_bug.cgi?id=709777)


author: Daniel Veillard <veillard@redhat.com> - 0.9.3-1
changelog:
  - new API virDomainGetVcpupinInfo
  - Add TXT record support for virtual DNS service
  - Support reboots with the QEMU driver
  - New API virDomainGetControlInfo API
  - New API virNodeGetMemoryStats
  - New API virNodeGetCPUTime
  - New API for send-key
  - New API virDomainPinVcpuFlags
  - support multifunction PCI device
  - lxc: various improvements
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.4-1
changelog:
  - network bandwidth QoS control
  - Add new API virDomainBlockPull*
  - save: new API to manipulate save file images
  - CPU bandwidth limits support
  - allow to send NMI and key event to guests
  - new API virDomainUndefineFlags
  - Implement code to attach to external QEMU instances
  - bios: Add support for SGA
  - various missing python binding
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.5-1
changelog:
  - many snapshot improvements (Eric Blake)
  - latency: Define new public API and structure (Osier Yang)
  - USB2 and various USB improvements (Marc-André Lureau)
  - storage: Add fs pool formatting (Osier Yang)
  - Add public API for getting migration speed (Jim Fehlig)
  - Add basic driver for Microsoft Hyper-V (Matthias Bolte)
  - many improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.6-2
changelog:
  - Make PCI multifunction support more manual - Bug 742836
  - F15 build still uses cgconfig - Bug 738725


author: Daniel Veillard <veillard@redhat.com> - 0.9.8-1
changelog:
  - Add support for QEMU 1.0
  - Add preliminary PPC cpu driver
  - Add new API virDomain{Set, Get}BlockIoTune
  - block_resize: Define the new API
  - Add a public API to invoke suspend/resume on the host
  - various improvements for LXC containers
  - Define keepalive protocol and add virConnectIsAlive API
  - Add support for STP and VLAN filtering
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.9-1
changelog:
  - Add API virDomain{S,G}etInterfaceParameters
  - Add API virDomain{G, S}etNumaParameters
  - Add support for ppc64 qemu
  - Support Xen domctl v8
  - many improvements and bug fixes


author: Cole Robinson <crobinso@redhat.com> - 0.9.11.3-1
changelog:
  - Rebased to version 0.9.11.3
  - Abide URI username when connecting to hypervisor (bz 811397)
  - Fix managed USB mode (bz 814866)
  - Fix crash connecting to ESX host (bz 811891)


author: Daniel Veillard <veillard@redhat.com> - 0.9.12-1
changelog:
  - qemu: allow snapshotting of sheepdog and rbd disks
  - blockjob: add new APIs
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.13-1
changelog:
  - S390: support for s390(x)
  - snapshot: implement new APIs for esx and vbox
  - snapshot: new query APIs and many improvements
  - virsh: Allow users to reedit rejected XML
  - nwfilter: add DHCP snooping
  - Enable driver modules in libvirt RPM
  - Default to enable driver modules for libvirtd
  - storage backend: Add RBD (RADOS Block Device) support
  - sVirt support for LXC domains inprovement
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.10.0-1
changelog:
  - upstream release of 0.10.0
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - driver for parallels hypervisor
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Cole Robinson <crobinso@redhat.com> - 0.10.1-3
changelog:
  - Fix libvirtd segfault with old netcf-libs (bz 853381)
  - Drop unneeded dnsmasq --filterwin2k
  - Fix unwanted connection closing, needed for boxes


author: Daniel Veillard <veillard@redhat.com> - 0.10.2-1
changelog:
  - Upstream release 0.10.2
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - parallels: add support of containers to the driver
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Richard W.M. Jones <rjones@redhat.com> - 0.10.2-3
changelog:
  - Re-add Use-qemu-system-i386-as-binary-instead-of-qemu.patch
    NB: This patch is Fedora-specific and not upstream.
  - Add upstream patches: don't duplicate environment variables (RHBZ#859596).


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.1-1
changelog:
  - Rebased to version 0.10.2.1
  - Fix lvm volume creation when alloc=0 (bz #866481)
  - Clarify virsh send-keys man page example (bz #860004)
  - Fix occasional deadlock via virDomainDestroy (bz #859009)
  - Fix LXC deadlock from ctrl-c (bz #848119)
  - Fix occasional selinux denials with macvtap (bz #798605)
  - Fix multilib conflict with systemtap files (bz #831425)
  - Don't trigger keytab warning in system logs (bz #745203)
  - Fix qemu domxml-2-native NIC model out (bz #636832)
  - Fix error message if not enough space for lvm vol (bz #609104)


author: Jiri Denemark <jdenemar@redhat.com> - 1.0.5-2
changelog:
  - virInitctlRequest: Don't hardcode 384 bytes size
  - network: Fix network driver startup for qemu:///session
  - virInitctlRequest: Unbreak make syntax check
  - virInitctlRequest: Unbreak make syntax check
  - build: Always include sanitytest in tarball
  - qemu: Fix stupid typos in VFIO cgroup setup/teardown
  - build: Always include libvirt_lxc.syms in tarball
  - build: Clean up stray files found by 'make distcheck'
  - spec: Proper soft static allocation of qemu uid
  - Fix F_DUPFD_CLOEXEC operation args
  - build: Fix mingw build of virprocess.c
  - Fix potential use of undefined variable in remote dispatch code
  - build: Avoid non-portable cast of pthread_t
  - Fix release of resources with lockd plugin
  - Fixup rpcgen code on kFreeBSD too
  - Make detect_scsi_host_caps a function on all architectures
  - qemu: Allocate network connections sooner during domain startup
  - tests: Files named '.*-invalid.xml' should fail validation
  - conf: Don't crash on a tpm device with no backends
  - Don't mention disk controllers in generic controller errors
  - iscsi: Don't leak portal string when starting a pool
  - util: Fix virFileOpenAs return value and resulting error logs


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.0-2
changelog:
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - Fix crash when multiple event callbacks were registered (CVE-2013-2230)
  - Paused domain should remain paused after migration (rhbz#981139)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-2
changelog:
  - spec: Change --enable-werror handling to match upstream
  - Delete obsolete / unused python test files (rhbz#884103)
  - Remove reference to python/tests from RPM %doc (rhbz#884103)
  - spec: Explicitly claim ownership of channel subdir (rhbz#884103)
  - Add APIs for formatting systemd slice/scope names (rhbz#980929)
  - Add support for systemd cgroup mount (rhbz#980929)
  - Cope with races while killing processes (rhbz#980929)
  - Enable support for systemd-machined in cgroups creation (rhbz#980929)
  - Ensure LXC/QEMU APIs set the filename for errors (rhbz#991348)
  - Avoid crash if NULL is passed for filename/funcname in logging (rhbz#991348)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-3
changelog:
  - RPC: Don't accept client if it would overcommit max_clients (rhbz#981729)
  - Introduce max_queued_clients (rhbz#981729)
  - conf: Add default USB controller in qemu post-parse callback (rhbz#819968)
  - qemu: Rename some functions in qemu_command.c (rhbz#819968)
  - qemu: Eliminate almost-duplicate code in qemu_command.c (rhbz#819968)
  - qemu: Enable auto-allocate of all PCI addresses (rhbz#819968)
  - qemu: Add pcie-root controller (rhbz#819968)
  - qemu: Add dmi-to-pci-bridge controller (rhbz#819968)
  - qemu: Fix handling of default/implicit devices for q35 (rhbz#819968)
  - qemu: Properly set/use device alias for pci controllers (rhbz#819968)
  - qemu: Enable using implicit sata controller in q35 machines (rhbz#819968)
  - qemu: Improve error reporting during PCI address validation (rhbz#819968)
  - qemu: Refactor qemuDomainCheckDiskPresence for only disk presence check (rhbz#910171)
  - qemu: Add helper functions for diskchain checking (rhbz#910171)
  - qemu: Check presence of each disk and its backing file as well (rhbz#910171)
  - conf: Add startupPolicy attribute for harddisk (rhbz#910171)
  - qemu: Support to drop disk with 'optional' startupPolicy (rhbz#910171)
  - Split TLS test into two separate tests (rhbz#994158)
  - Avoid re-generating certs every time (rhbz#994158)
  - Change data passed into TLS test cases (rhbz#994158)
  - Fix validation of CA certificate chains (rhbz#994158)
  - Fix parallel runs of TLS test suites (rhbz#994158)
  - tests: Fix parallel runs of TLS test suites (rhbz#994158)
  - Add a man page for virtlockd daemon (rhbz#991494)
  - Add an example config file for virtlockd (rhbz#991494)
  - Properly handle -h / -V for --help/--version aliases in virtlockd/libvirtd (rhbz#991494)
  - Make check for /dev/loop device names stricter to avoid /dev/loop-control (rhbz#924815)
  - Ensure securityfs is mounted readonly in container (rhbz#872642)
  - Add info about access control checks into API reference (rhbz#700443)
  - Record the where the auto-generated data comes from (rhbz#700443)
  - Add documentation for access control system (rhbz#700443)
  - virsh-domain: Flip logic in cmdSetvcpus (rhbz#996552)
  - Honour root prefix in lxcContainerMountFSBlockAuto (rhbz#924815)
  - util: Add virGetUserDirectoryByUID (rhbz#988491)
  - Introduce a virt-login-shell binary (rhbz#988491)
  - build: Fix compilation of virt-login-shell.c (rhbz#988491)
  - Fix double-free and broken logic in virt-login-shell (rhbz#988491)
  - Address missed feedback from review of virt-login-shell (rhbz#988491)
  - Ensure that /dev exists in the container root filesystem (rhbz#924815)
  - remote: Fix a segfault in remoteDomainCreateWithFlags (rhbz#994855)
  - build: Avoid -lgcrypt with newer gnutls (rhbz#951637)
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#994158)
  - build: Fix missing max_queued_clients in augeas test file for libvirtd.conf (rhbz#981729)
  - virsh-domain: Fix memleak in cmdCPUBaseline (rhbz#997798)
  - Fix typo in domain name in polkit acl example (rhbz#700443)
  - Update polkit examples to use 'lookup' method (rhbz#700443)
  - Add bounds checking on virDomainMigrate*Params RPC calls (CVE-2013-4292) (rhbz#1002667)
  - Add bounds checking on virDomainGetJobStats RPC call (rhbz#1002667)
  - Add bounds checking on virDomain{SnapshotListAllChildren, ListAllSnapshots} RPC calls (rhbz#1002667)
  - Add bounds checking on virConnectListAllDomains RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllStoragePools RPC call (rhbz#1002667)
  - Add bounds checking on virStoragePoolListAllVolumes RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNetworks RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllInterfaces RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNodeDevices RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNWFilters RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllSecrets RPC call (rhbz#1002667)
  - Prohibit unbounded arrays in XDR protocols (rhbz#1002667)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997906)
  - virbitmaptest: Fix function header formatting (rhbz#997906)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997906)
  - virsh-domain: Fix memleak in cmdUndefine with storage (rhbz#999057)
  - virsh: Modify vshStringToArray to duplicate the elements too (rhbz#999057)
  - virsh: Don't leak list of volumes when undefining domain with storage (rhbz#999057)
  - Fix URI connect precedence (rhbz#999323)
  - tests: Add URI precedence checking (rhbz#999323)
  - Don't free NULL network in cmdNetworkUpdate (rhbz#1001094)
  - virsh: Fix debugging (rhbz#1001628)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1002669)
  - Set security label on FD for virDomainOpenGraphics (rhbz#999925)
  - virsh: Free the caps list properly if one of them is invalid (rhbz#1001957)
  - virsh: Free the formatting string when listing pool details (rhbz#1001957)
  - virsh-pool.c: Don't jump over variable declaration (rhbz#1001957)
  - virsh: Free the list from ListAll APIs even for 0 items (rhbz#1001957)
  - virsh: Free messages after logging them to a file (rhbz#1001957)
  - Reverse logic allowing partial DHCP host XML (rhbz#1001078)
  - virsh: Print cephx and iscsi usage (rhbz#1000155)
  - qemu_conf: Fix broken logic for adding passthrough iscsi lun (rhbz#1000159)
  - Report secret usage error message similarly (rhbz#1000168)
  - docs: Update the formatdomain disk examples (rhbz#1000169)
  - docs: Update formatsecrets to include more examples of each type (rhbz#1000169)
  - docs: Update iSCSI storage pool example (rhbz#1000169)
  - docs: Reformat <disk> attribute description in formatdomain (rhbz#1000169)
  - qemuBuildNicDevStr: Add mq=on for multiqueue networking (rhbz#651941)
  - migration: Do not restore labels on failed migration (rhbz#822052)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1001143)
  - docs: Discourage users to set hard_limit (rhbz#1001143)
  - docs: Clean 09adfdc62de2b up (rhbz#1001143)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1001143)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)
  - qemuDomainAttachHostPciDevice: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-4
changelog:
  - Don't crash in qemuBuildDeviceAddressStr (rhbz#1003526)
  - Fix leaks in python bindings (rhbz#1003828)
  - Process virtlockd.conf instead of libvirtd.conf (rhbz#1003685)
  - test_virtlockd.aug.in: Use the correct file (rhbz#1003685)
  - qemu: Make domain renaming work during migration (rhbz#999352)
  - qemu: Handle huge number of queues correctly (rhbz#651941)
  - conf: Remove the actual hostdev when removing a network (rhbz#1003537)
  - conf: Don't deref NULL actual network in virDomainNetGetActualHostdev() (rhbz#1003537)
  - python: Fix a PyList usage mistake (rhbz#1002558)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004364)
  - Always specify qcow2 compat level on qemu-img command line (rhbz#997977)
  - selinux: Distinguish failure to label from request to avoid label (rhbz#924153)
  - selinux: Enhance test to cover nfs label failure (rhbz#924153)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-5
changelog:
  - Pass AM_LDFLAGS to driver modules too (rhbz#1006299)
  - virsh domjobinfo: Do not return 1 if job is NONE (rhbz#1006864)
  - Fix polkit permission names for storage pools, vols & node devices (rhbz#700443)
  - Fix naming of permission for detecting storage pools (rhbz#700443)
  - security: Provide supplemental groups even when parsing label (CVE-2013-4291) (rhbz#1006513)
  - virFileNBDDeviceAssociate: Avoid use of uninitialized variable (CVE-2013-4297)
  - Rename "struct interface_driver" to virNetcfDriverState (rhbz#983026)
  - netcf driver: Use a single netcf handle for all connections (rhbz#983026)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006722)
  - Add test for the nodemask double free crash (rhbz#1006722)
  - qemu: Fix checking of guest ABI compatibility when reverting snapshots (rhbz#1006886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-6
changelog:
  - Also store user & group ID values in virIdentity (rhbz#1006272)
  - Ensure system identity includes process start time (rhbz#1006272)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)
  - Free slicename in virSystemdCreateMachine (rhbz#1008619)
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1008340)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1008340)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1008340)
  - qemu: Avoid dangling job in qemuDomainSetBlockIoTune (rhbz#700443)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-7
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - LXC: Don't mount securityfs when user namespace enabled (rhbz#872648)
  - Move array of mounts out of lxcContainerMountBasicFS (rhbz#872648)
  - Ensure root filesystem is recursively mounted readonly (rhbz#872648)
  - qemu: Fix seamless SPICE migration (rhbz#1010861)
  - qemu: Use "ide" as device name for implicit SATA controller on Q35 (rhbz#1008903)
  - qemu: Only parse basename when determining emulator properties (rhbz#1010617)
  - qemu: Recognize -machine accel=kvm when parsing native (rhbz#1010617)
  - qemu: Don't leave shutdown inhibited on attach failure (rhbz#1010617)
  - qemu: Don't leak vm on failure (rhbz#1010617)
  - Fix typo in identity code which is pre-requisite for CVE-2013-4311 (rhbz#1006272)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-8
changelog:
  - conf: Don't crash on invalid chardev source definition of RNGs and other (rhbz#1012196)
  - rpc: Increase bound limit for virDomainGetJobStats (rhbz#1012818)
  - qemu: Free all driver data in qemuStateCleanup (rhbz#1011330)
  - qemu: Don't leak reference to virQEMUDriverConfigPtr (rhbz#1011330)
  - qemu: Eliminate redundant if clauses in qemuCollectPCIAddress (rhbz#1003983)
  - qemu: Allow some PCI devices to be attached to PCIe slots (rhbz#1003983)
  - qemu: Replace multiple strcmps with a switch on an enum (rhbz#1003983)
  - qemu: Support ich9-intel-hda audio device (rhbz#1003983)
  - qemu: Turn if into switch in qemuDomainValidateDevicePCISlotsQ35 (rhbz#1003983)
  - qemu: Prefer to put a Q35 machine's dmi-to-pci-bridge at 00:1E.0 (rhbz#1003983)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-9
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014503)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014503)
  - qemu: Check actual netdev type rather than config netdev type during init (rhbz#1012824)
  - Fix crash in libvirtd when events are registered & ACLs active (CVE-2013-4399) (rhbz#1011429)
  - Remove virConnectPtr arg from virNWFilterDefParse* (rhbz#1015108)
  - Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (rhbz#1015108)
  - Remove use of virConnectPtr from all remaining nwfilter code (rhbz#1015108)
  - Don't set netdev offline in container cleanup (rhbz#1014604)
  - Avoid reporting an error if veth device is already deleted (rhbz#1014604)
  - Avoid deleting NULL veth device name (rhbz#1014604)
  - Retry veth device creation on failure (rhbz#1014604)
  - Use 'vnet' as prefix for veth devices (rhbz#1014604)
  - Free cmd in virNetDevVethDelete (rhbz#1014604)
  - Free cmd in virNetDevVethCreate (rhbz#1014604)
  - LXC: Fix handling of RAM filesystem size units (rhbz#1015689)
  - build: Add lxc testcase to dist list (rhbz#1015689)
  - tests: Work with older dbus (rhbz#1018730)
  - virdbus: Add virDBusHasSystemBus() (rhbz#1018730)
  - virsystemd: Don't fail to start VM if DBus isn't available or compiled in (rhbz#1018730)
  - DBus: Introduce virDBusIsServiceEnabled (rhbz#1018730)
  - Change way we fake dbus method calls (rhbz#1018730)
  - Fix virsystemdtest for previous commit (rhbz#1018730)
  - LXC: Workaround machined uncleaned data with containers running systemd. (rhbz#1018730)
  - Allow use of a private dbus bus connection (rhbz#998365)
  - Add a method for closing the dbus system bus connection (rhbz#998365)
  - Make LXC controller use a private dbus connection & close it (rhbz#998365)
  - Fix flaw in detecting log format (rhbz#927072)
  - Fix exit status of lxc controller (rhbz#927072)
  - Improve error reporting with LXC controller (rhbz#927072)
  - nwfilter: Don't fail to start if DBus isn't available (rhbz#927072)
  - Don't ignore all dbus connection errors (rhbz#927072)
  - LXC: Check the existence of dir before resolving symlinks (rhbz#927072)
  - Ensure lxcContainerMain reports errors on stderr (rhbz#927072)
  - Ensure lxcContainerResolveSymlinks reports errors (rhbz#927072)
  - Improve log filtering in virLXCProcessReadLogOutputData (rhbz#927072)
  - Initialize threading & error layer in LXC controller (rhbz#1018725)
  - qemu_migration: Avoid crashing if domain dies too quickly (rhbz#1018267)
  - Convert uuid to a string before printing it (rhbz#1019023)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-10
changelog:
  - qemu_process: Make qemuProcessReadLog() more versatile and reusable (rhbz#1001738)
  - qemu: monitor: Add infrastructure to access VM logs for better err msgs (rhbz#1001738)
  - qemu: monitor: Produce better errors on monitor hangup (rhbz#1001738)
  - qemu: Wire up better early error reporting (rhbz#1001738)
  - qemu: process: Silence coverity warning when rewinding log file (rhbz#1001738)
  - qemu: hostdev: Refactor PCI passhrough handling (rhbz#1001738)
  - qemu: hostdev: Fix function spacing and header formatting (rhbz#1001738)
  - qemu: hostdev: Add checks if PCI passthrough is available in the host (rhbz#1001738)
  - qemu: Prefer VFIO for PCI device passthrough (rhbz#1001738)
  - qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (rhbz#1001738)
  - Fix max stream packet size for old clients (rhbz#950416)
  - Adjust legacy max payload size to account for header information (rhbz#950416)
  - rpc: Correct the wrong payload size checking (rhbz#950416)
  - qemu: Simplify calling qemuDomainHostdevNetConfigRestore (rhbz#1005682)
  - qemu: Move qemuDomainRemoveNetDevice to avoid forward reference (rhbz#1005682)
  - qemu: Fix removal of <interface type='hostdev'> (rhbz#1005682)
  - remote: Fix regression in event deregistration (rhbz#1020376)
  - qemu: managedsave: Add support for compressing managed save images (rhbz#1017227)
  - qemu: snapshot: Add support for compressing external snapshot memory (rhbz#1017227)
  - Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#1015215)
  - qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - qemu_conf: Introduce "migration_address" (rhbz#1015215)
  - qemu: Include listenAddress in debug prints (rhbz#1015215)
  - docs: Expand description of host-model CPU mode (rhbz#1014682)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1019237)
  - qemu: Make migration port range configurable (rhbz#1019237)
  - qemu: Fix augeas support for migration ports (rhbz#1019237)
  - Fix perms for virConnectDomainXML{To, From}Native (CVE-2013-4401)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-11
changelog:
  - Add helpers for getting env vars in a setuid environment (rhbz#1015247)
  - Only allow 'stderr' log output when running setuid (CVE-2013-4400)
  - Close all non-stdio FDs in virt-login-shell (CVE-2013-4400)
  - Don't link virt-login-shell against libvirt.so (CVE-2013-4400)
  - build: Fix linking virt-login-shell (rhbz#1015247)
  - build: Fix build of virt-login-shell on systems with older gnutls (rhbz#1015247)
  - Set a sane $PATH for virt-login-shell (rhbz#1015247)
  - spec: Fix rpm build when lxc disabled (rhbz#1015247)
  - Move virt-login-shell into libvirt-login-shell sub-RPM (rhbz#1015247)
  - Make virCommand env handling robust in setuid env (rhbz#1015247)
  - Remove all direct use of getenv (rhbz#1015247)
  - Block all use of getenv with syntax-check (rhbz#1015247)
  - Only allow the UNIX transport in remote driver when setuid (rhbz#1015247)
  - Don't allow remote driver daemon autostart when running setuid (rhbz#1015247)
  - Add stub getegid impl for platforms lacking it (rhbz#1015247)
  - Remove (nearly) all use of getuid()/getgid() (rhbz#1015247)
  - Block all use of libvirt.so in setuid programs (rhbz#1015247)
  - spec: Clean up distribution of ChangeLog (and others) (rhbz#1024393)
  - Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (rhbz#1024393)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-12
changelog:
  - virpci: Don't error on unbinded devices (rhbz#1019387)
  - network: Fix connections count in case of allocate failure (rhbz#1020135)
  - qemu: Clean up migration ports when migration cancelled (rhbz#1019237)
  - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (rhbz#1022393)
  - Allow root directory in filesystem source dir schema (rhbz#1028107)
  - Use a port from the migration range for NBD as well (rhbz#1025699)
  - qemu: Avoid double free of VM (rhbz#1018267)
  - util: Use size_t instead of unsigned int for num_virtual_functions (rhbz#1025397)
  - pci: Properly handle out-of-order SRIOV virtual functions (rhbz#1025397)
  - conf: Do better job when comparing features ABI compatibility (rhbz#1008989)
  - schema: Rename option 'hypervtristate' to 'featurestate' (rhbz#1008989)
  - conf: Mark user provided strings in error messages when parsing XML (rhbz#1008989)
  - cpu: Add support for loading and storing CPU data (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86Data as virCPUx86Data (rhbz#1008989)
  - cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (rhbz#1008989)
  - Ensure 'arch' is always set in cpuArchNodeData (rhbz#1008989)
  - cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (rhbz#1008989)
  - cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (rhbz#1008989)
  - cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (rhbz#1008989)
  - cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (rhbz#1008989)
  - cpu: x86: Use whitespace to clarify context and use consistent labels (rhbz#1008989)
  - cpu: x86: Clean up error messages in x86VendorLoad() (rhbz#1008989)
  - cpu: Export few x86-specific APIs (rhbz#1008989)
  - cpu: x86: Parse the CPU feature map only once (rhbz#1008989)
  - cpu_x86: Refactor storage of CPUID data to add support for KVM features (rhbz#1008989)
  - qemu: Add monitor APIs to fetch CPUID data from QEMU (rhbz#1008989)
  - cpu: x86: Add internal CPUID features support and KVM feature bits (rhbz#1008989)
  - conf: Refactor storing and usage of feature flags (rhbz#1008989)
  - qemu: Add support for paravirtual spinlocks in the guest (rhbz#1008989)
  - qemu: process: Validate specific CPUID flags of a guest (rhbz#1008989)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-13
changelog:
  - virsh-domain: Mark --live and --config mutually exclusive in vcpucount (rhbz#1024245)
  - virSecurityLabelDefParseXML: Don't parse label on model='none' (rhbz#1028962)
  - qemuMonitorIO: Don't use @mon after it's unrefed (rhbz#1018267)
  - qemu: Allow hotplug of multiple SCSI devices (rhbz#1031062)
  - qemu: Call qemuSetupHostdevCGroup later during hotplug (rhbz#1025108)
  - virscsi: Hostdev SCSI AdapterId retrieval fix (rhbz#1031079)
  - storage: Returns earlier if source adapter of the scsi pool is a HBA (rhbz#1027680)
  - spec: Restrict virt-login-shell usage (rhbz#1033614)
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - Don't start a nested job in qemuMigrationPrepareAny (rhbz#1018267)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-14
changelog:
  - nodedev: Resolve Relax-NG validity error (rhbz#1035792)
  - test-lib: Make case skipping possible (rhbz#1034380)
  - tests: Don't test user config file if ran as root (rhbz#1034380)
  - Improve cgroups docs to cover systemd integration (rhbz#1004340)
  - Fix busy wait loop in LXC container I/O handling (rhbz#1032705)
  - tests: Guarantee abs_srcdir in all C tests (rhbz#1035403)
  - Introduce standard methods for sorting strings with qsort (rhbz#1035403)
  - Add virFileIsMountPoint function (rhbz#1035403)
  - Pull lxcContainerGetSubtree out into shared virfile module (rhbz#1035403)
  - Fix bug in identifying sub-mounts (rhbz#1035403)
  - LXC: Ensure security context is set when mounting images (rhbz#923903)
  - Ensure to zero out the virDomainBlockJobInfo arg (rhbz#1028846)
  - qemu: Default to vfio for nodedev-detach (rhbz#1035188)
  - daemon: Run virStateCleanup conditionally (rhbz#1033061)
  - qemu: Add "-boot strict" to commandline whenever possible (rhbz#1037593)
  - tests: Add forgotten boot-strict test files (rhbz#1037593)
  - conf: Fix XML formatting of RNG device info (rhbz#1035118)
  - qemu: Improve error when setting invalid count of vcpus via agent (rhbz#1035108)
  - Add qxl ram size to ABI stability check (rhbz#1035123)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-15
changelog:
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - qemu: hotplug: Only label hostdev after checking device conflicts (rhbz#1025108)
  - qemu: hotplug: Fix double free on USB collision (rhbz#1025108)
  - qemu: hotplug: Fix adding USB devices to the driver list (rhbz#1025108)
  - docs: Enhance memoryBacking/locked documentation (rhbz#1035954)
  - util: Fix two virCompareLimitUlong bugs (rhbz#1024272)
  - cgroups: Redefine what "unlimited" means wrt memory limits (rhbz#1024272)
  - qemu: Report VIR_DOMAIN_MEMORY_PARAM_UNLIMITED properly (rhbz#1024272)
  - qemu: Fix minor inconsistency in error message (rhbz#1024272)
  - conf: Don't format memtune with unlimited values (rhbz#1024272)
  - qemu_process: Read errors from child (rhbz#1035955)
  - network: Properly update iptables rules during net-update (rhbz#1035336)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1039991)
  - screenshot: Implement multiple screen support (rhbz#1026966)
  - Switch to private redhat namespace for QMP I/O error reason (rhbz#1026966)
  - Support virtio disk hotplug in JSON mode (rhbz#1026966)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-16
changelog:
  - qemu: Check for reboot-timeout on monitor (rhbz#1042690)
  - virsh: Fix return value error of cpu-stats (rhbz#1043388)
  - tools: Fix virsh connect man page (rhbz#1043260)
  - conf: Introduce generic ISA address (rhbz#996520)
  - conf: Add support for panic device (rhbz#996520)
  - qemu: Add support for -device pvpanic (rhbz#996520)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1043864)
  - virsh: man: Mention that volumes need to be in storage pool for undefine (rhbz#1044445)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-18
changelog:
  - qemu: Ask for -enable-fips when FIPS is required (rhbz#1035474)
  - qemu: Properly set MaxMemLock when hotplugging with VFIO (rhbz#1035490)
  - qemu: Avoid duplicate security label restore on hostdev attach failure (rhbz#1035490)
  - qemu: Re-add hostdev interfaces to hostdev array on libvirtd restart (rhbz#1045002)
  - domain: Don't try to interpret <driver> as virtio config for hostdev interfaces (rhbz#1046337)
  - virBitmapParse: Fix behavior in case of error and fix up callers (rhbz#1047234)
  - qemu: Fix live pinning to memory node on NUMA system (rhbz#1047234)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1047234)
  - qemu: Range check numa memory placement mode (rhbz#1047234)
  - virkeycode: Allow ANSI_A (rhbz#1044806)
  - Fix argument order of qemuMigrationPerformJob(). (rhbz#1049338)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1048643)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - PanicCheckABIStability: Need to check for existence (rhbz#996520)
  - virsh: Improve usability of '--print-xml' flag for attach-disk command (rhbz#1049529)
  - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1049529)
  - virsh: Use inactive definition when removing disk from config (rhbz#1049529)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-19
changelog:
  - CVE-2013-6436: Fix crash in lxcDomainGetMemoryParameters (rhbz#1049137)
  - Fix crash in lxcDomainSetMemoryParameters (rhbz#1052062)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)
  - qemu: Change the default unix monitor timeout (rhbz#892273)
  - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (rhbz#996543)
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1054785)
  - virt-login-shell: Fix regressions in behavior (rhbz#1015247)
  - pci: Make reattach work for unbound devices (rhbz#1046919)
  - pci: Fix failure paths in detach (rhbz#1046919)
  - qemu: Don't detach devices if passthrough doesn't work (rhbz#1046919)
  - Fix migration with QEMU 1.6 (rhbz#1053405)
  - build: More workarounds for if_bridge.h (rhbz#1042937)
  - build: Fix build with latest rawhide kernel headers (rhbz#1042937)
  - aarch64: Disable -fstack-protector. (rhbz#1042937)
  - AArch64: Parse cputopology from /proc/cpuinfo. (rhbz#1042937)
  - virDomainEventCallbackListFree: Don't leak @list->callbacks (rhbz#1047964)
  - Fix memory leak in virObjectEventCallbackListRemoveID() (rhbz#1047964)
  - event: Filter global events by domain:getattr ACL (CVE-2014-0028)
  - Doc: Improve the document for nodesuspend (rhbz#1045089)
  - Doc: Add "note" for node-memory-tune (rhbz#1045089)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-21
changelog:
  - util: Correct the NUMA node range checking (rhbz#1045958)
  - storage: Add document for possible problem on volume detection (rhbz#726797)
  - storage: Fix autostart of pool with "fc_host" type adapter (rhbz#726797)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-22
changelog:
  - Add a read/write lock implementation (rhbz#1034807)
  - Push nwfilter update locking up to top level (rhbz#1034807)
  - utils: Introduce functions for kernel module manipulation (rhbz#1045124)
  - virCommand: Introduce virCommandSetDryRun (rhbz#1045124)
  - tests: Add test for new virkmod functions (rhbz#1045124)
  - Honor blacklist for modprobe command (rhbz#1045124)
  - qemu: Be sure we're using the updated value of backend during hotplug (rhbz#1056360)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#1061099)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1061099)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1061099)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-23
changelog:
  - Generate a valid imagelabel even for type 'none' (rhbz#1061657)
  - qemu: keep pre-migration domain state after failed migration (rhbz#1057407)
  - schema: Fix guest timer specification schema according to the docs (rhbz#1056205)
  - conf: Enforce supported options for certain timers (rhbz#1056205)
  - qemu: hyperv: Add support for timer enlightenments (rhbz#1056205)
  - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (rhbz#1062665)
  - util: Add "shareable" field for virSCSIDevice struct (rhbz#957292)
  - util: Fix the indention (rhbz#957292)
  - qemu: Don't fail if the SCSI host device is shareable between domains (rhbz#957292)
  - util: Add one argument for several scsi utils (rhbz#957292)
  - tests: Add tests for scsi utils (rhbz#957292)
  - qemu: Fix the error message for scsi host device's shareable checking (rhbz#957292)
  - util: Accept test data path for scsi device's sg_path (rhbz#957292)
  - tests: Modify the scsi util tests (rhbz#957292)
  - event: move event filtering to daemon (regression fix) (rhbz#1047964)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-24
changelog:
  - Block info query: Add check for transient domain (rhbz#1065531)
  - Fix minor typos in messages and docs (rhbz#1045643)
  - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (rhbz#1045643)
  - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (rhbz#1045643)
  - maint: fix comment typos (rhbz#1045643)
  - storage: avoid short reads while chasing backing chain (rhbz#1045643)
  - Don't block use of USB with containers (rhbz#1045643)
  - Fix path used for USB device attach with LXC (rhbz#1045643)
  - Record hotplugged USB device in LXC live guest config (rhbz#1045643)
  - Fix reset of cgroup when detaching USB device from LXC guests (rhbz#1045643)
  - Disks are always block devices, never character devices (rhbz#1045643)
  - Move check for cgroup devices ACL upfront in LXC hotplug (rhbz#1045643)
  - Add virFileMakeParentPath helper function (rhbz#1045643)
  - Add helper for running code in separate namespaces (rhbz#1045643)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (CVE-2013-6456)
  - Ignore additional fields in iscsiadm output (rhbz#1067173)
  - qemuBuildNicDevStr: Set vectors= on Multiqueue (rhbz#1066209)
  - Don't depend on syslog.service (rhbz#1032695)
  - libvirt-guests: Run only after libvirtd (rhbz#1032695)
  - virSystemdCreateMachine: Set dependencies for slices (rhbz#1032695)
  - libvirt-guests: Wait for libvirtd to initialize (rhbz#1032695)
  - virNetServerRun: Notify systemd that we're accepting clients (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-25
changelog:
  - maint: fix comma style issues: conf (rhbz#1032370)
  - Allow <source> for type=block to have no dev (rhbz#1032370)
  - Allow LUN type disks to have no source (rhbz#1032370)
  - virsh-volume: Unify strigification of volume type (rhbz#1032370)
  - conf: Refactor virDomainDiskSourcePoolDefParse (rhbz#1032370)
  - conf: Split out code to parse the source of a disk definition (rhbz#1032370)
  - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (rhbz#1032370)
  - conf: Refactor virDomainDiskSourceDefParse (rhbz#1032370)
  - storage: fix RNG validation of gluster via netfs (rhbz#1032370)
  - maint: fix comment typos. (rhbz#1032370)
  - storage: use valid XML for awkward volume names (rhbz#1032370)
  - build: Don't fail on '&lt; ' or '&gt; ' with old xmllint (rhbz#1032370)
  - storage: allow interleave in volume XML (rhbz#1032370)
  - storage: expose volume meta-type in XML (rhbz#1032370)
  - storage: initial support for linking with libgfapi (rhbz#1032370)
  - storage: document existing pools (rhbz#1032370)
  - storage: document gluster pool (rhbz#1032370)
  - storage: implement rudimentary glusterfs pool refresh (rhbz#1032370)
  - storage: add network-dir as new storage volume type (rhbz#1032370)
  - storage: improve directory support in gluster pool (rhbz#1032370)
  - storage: improve allocation stats reported on gluster files (rhbz#1032370)
  - storage: improve handling of symlinks in gluster (rhbz#1032370)
  - storage: probe qcow2 volumes in gluster pool (rhbz#1032370)
  - storage: fix typo in previous patch (rhbz#1032370)
  - conf: Export virStorageVolType enum helper functions (rhbz#1032370)
  - test: Implement fake storage pool driver in qemuxml2argv test (rhbz#1032370)
  - storage: reduce number of stat calls (rhbz#1032370)
  - storage: use simpler 'char *' (rhbz#1032370)
  - storage: refactor backing chain division of labor (rhbz#1032370)
  - storage: always probe type with buffer (rhbz#1032370)
  - storage: don't read storage volumes in nonblock mode (rhbz#1032370)
  - storage: skip selinux cleanup when fd not available (rhbz#1032370)
  - storage: use correct type for array count (rhbz#1032370)
  - storage: allow interleave in pool XML (rhbz#1032370)
  - qemuxml2argv: Add test to verify correct usage of disk type="volume" (rhbz#1032370)
  - qemuxml2argv: Add test for disk type='volume' with iSCSI pools (rhbz#1032370)
  - tests: Fix comment for fake storage pool driver (rhbz#1032370)
  - conf: Support disk source formatting without needing a virDomainDiskDefPtr (rhbz#1032370)
  - conf: Clean up virDomainDiskSourceDefFormatInternal (rhbz#1032370)
  - conf: Split out seclabel formating code for disk source (rhbz#1032370)
  - conf: Export disk source formatter and parser (rhbz#1032370)
  - snapshot: conf: Use common parsing and formatting functions for source (rhbz#1032370)
  - snapshot: conf: Fix NULL dereference when <driver> element is empty (rhbz#1032370)
  - conf: Add functions to copy and free network disk source definitions (rhbz#1032370)
  - qemu: snapshot: Detect internal snapshots also for sheepdog and RBD (rhbz#1032370)
  - conf: Add helper do clear disk source authentication struct (rhbz#1032370)
  - qemu: snapshot: Touch up error message (rhbz#1032370)
  - qemu: snapshot: Add functions similar to disk source pool translation (rhbz#1032370)
  - qemu: Refactor qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: Split out formatting of network disk source URI (rhbz#1032370)
  - qemu: Simplify call pattern of qemuBuildDriveURIString (rhbz#1032370)
  - qemu: Use qemuBuildNetworkDriveURI to handle http/ftp and friends (rhbz#1032370)
  - qemu: Migrate sheepdog source generation into common function (rhbz#1032370)
  - qemu: Split out NBD command generation (rhbz#1032370)
  - qemu: Unify formatting of RBD sources (rhbz#1032370)
  - qemu: Refactor disk source string formatting (rhbz#1032370)
  - qemu: Clear old translated pool source (rhbz#1032370)
  - qemu: snapshots: Declare supported and unsupported snapshot configs (rhbz#1032370)
  - domainsnapshotxml2xmltest: Clean up labels and use bool instead of int (rhbz#1032370)
  - domainsnapshotxml2xmltest: Allow for better testing of snapshots (rhbz#1032370)
  - domainsnapshotxml2xml: Move files with conflicting names (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add existing files as new tests (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add test case for empty driver element (rhbz#1032370)
  - qemu: Fix indentation in qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: snapshot: Fix incorrect disk type for auto-generated disks (rhbz#1032370)
  - storage: fix omitted slash in gluster volume URI (rhbz#1032370)
  - virsh: domain: Fix undefine with storage of 'volume' disks (rhbz#1032370)
  - snapshot: schema: Split out snapshot disk driver definition (rhbz#1032370)
  - storage: Add gluster pool filter and fix virsh pool listing (rhbz#1032370)
  - storage: fix bogus target in gluster volume xml (rhbz#1032370)
  - storage: Improve error message when a storage backend is missing (rhbz#1032370)
  - storage: Break long lines and clean up spaces in storage backend header (rhbz#1032370)
  - storage: Support deletion of volumes on gluster pools (rhbz#1032370)
  - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (rhbz#1032370)
  - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (rhbz#1034993)
  - qemu: Avoid crash in qemuDiskGetActualType (rhbz#1032370)
  - snapshot: Add support for specifying snapshot disk backing type (rhbz#1032370)
  - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (rhbz#1032370)
  - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (rhbz#1032370)
  - storage: Add file storage APIs in the default storage driver (rhbz#1032370)
  - storage: add file functions for local and block files (rhbz#1032370)
  - storage: Add storage file backends for gluster (rhbz#1032370)
  - qemu: Switch snapshot deletion to the new API functions (rhbz#1032370)
  - qemu: snapshot: Use new APIs to detect presence of existing storage files (rhbz#1032370)
  - qemu: snapshot: Add support for external active snapshots on gluster (rhbz#1032370)
  - storage: Fix build with older compilers afeter gluster snapshot series (rhbz#1032370)
  - storage: gluster: Don't leak private data when storage file init fails (rhbz#1032370)
  - spec: Use correct versions of libgfapi in RHEL builds (rhbz#1032370)
  - spec: Fix braces around macros (rhbz#1032370)
  - build: use --with-systemd-daemon as configure option (rhbz#1032695)
  - spec: require device-mapper-devel for storage-disk (rhbz#1032695)
  - spec: make systemd_daemon usage configurable (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-26
changelog:
  - virNetDevVethCreate: Serialize callers (rhbz#1014604)
  - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (rhbz#1071888)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-27
changelog:
  - spec: Let translations be properly updated (rhbz#1030368)
  - Update translation to supported languages (rhbz#1030368)
  - Add a mutex to serialize updates to firewall (rhbz#1074003)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-28
changelog:
  - qemu: Forbid "sgio" support for SCSI generic host device (rhbz#957292)
  - qemu: monitor: Fix invalid parentheses (rhbz#1075973)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1076503)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29
changelog:
  - nwfilter: Increase buffer size for libpcap (rhbz#1078347)
  - nwfilter: Display pcap's error message when pcap setup fails (rhbz#1078347)
  - nwfilter: Fix double free of pointer (rhbz#1071181)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.7-1
changelog:
  - Rebased to libvirt-1.2.7 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#823535, rhbz#872628, rhbz#874418, rhbz#878394, rhbz#880483
      rhbz#921094, rhbz#963817, rhbz#964177, rhbz#967493, rhbz#967494
      rhbz#972964, rhbz#983350, rhbz#985782, rhbz#985980, rhbz#990319
      rhbz#990418, rhbz#991290, rhbz#992980, rhbz#994731, rhbz#995377
      rhbz#997627, rhbz#997802, rhbz#1006700, rhbz#1007698, rhbz#1007759
      rhbz#1010885, rhbz#1022874, rhbz#1023366, rhbz#1025407, rhbz#1027076
      rhbz#1029266, rhbz#1029732, rhbz#1032363, rhbz#1033020, rhbz#1033398
      rhbz#1033704, rhbz#1035128, rhbz#1046192, rhbz#1049038, rhbz#1052114
      rhbz#1056902, rhbz#1062142, rhbz#1063837, rhbz#1066280, rhbz#1066894
      rhbz#1067338, rhbz#1069552, rhbz#1069784, rhbz#1070680, rhbz#1072141
      rhbz#1072677, rhbz#1073368, rhbz#1073506, rhbz#1074086, rhbz#1075290
      rhbz#1075299, rhbz#1076957, rhbz#1076959, rhbz#1076960, rhbz#1076962
      rhbz#1077009, rhbz#1077572, rhbz#1078590, rhbz#1079162, rhbz#1079173
      rhbz#1080859, rhbz#1081881, rhbz#1081932, rhbz#1082124, rhbz#1083345
      rhbz#1084360, rhbz#1085706, rhbz#1085769, rhbz#1086121, rhbz#1086331
      rhbz#1086704, rhbz#1087104, rhbz#1087671, rhbz#1088293, rhbz#1088667
      rhbz#1088787, rhbz#1088864, rhbz#1089179, rhbz#1089378, rhbz#1091132
      rhbz#1091866, rhbz#1092038, rhbz#1092253, rhbz#1093127, rhbz#1095035
      rhbz#1097028, rhbz#1097503, rhbz#1097677, rhbz#1097968, rhbz#1098659
      rhbz#1099978, rhbz#1100086, rhbz#1100769, rhbz#1101059, rhbz#1101510
      rhbz#1101987, rhbz#1101999, rhbz#1102426, rhbz#1102457, rhbz#1102611
      rhbz#1104992, rhbz#1104993, rhbz#1105939, rhbz#1108593, rhbz#1110198
      rhbz#1110212, rhbz#1110673, rhbz#1111044, rhbz#1112939, rhbz#1113332
      rhbz#1113668, rhbz#1113751, rhbz#1113868, rhbz#1118710, rhbz#1119206
      rhbz#1119387, rhbz#1119592, rhbz#1120474, rhbz#1122255, rhbz#1122973
  - spec: Enable qemu driver for RHEL-7 on ppc64 (rhbz#1120474)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-1
changelog:
  - Rebased to libvirt-1.2.8 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#927369, rhbz#957293, rhbz#999926, rhbz#1021703, rhbz#1043735
      rhbz#1047818, rhbz#1062142, rhbz#1064770, rhbz#1072653, rhbz#1078126
      rhbz#1095636, rhbz#1103245, rhbz#1119215, rhbz#1121837, rhbz#1121955
      rhbz#1122455, rhbz#1126329, rhbz#1126721, rhbz#1126909, rhbz#1128097
      rhbz#1128751, rhbz#1129207, rhbz#1129372, rhbz#1129998, rhbz#1130089
      rhbz#1130379, rhbz#1131306, rhbz#1131445, rhbz#1131788, rhbz#1131811
      rhbz#1131819, rhbz#1131876, rhbz#1132301, rhbz#1132305, rhbz#1132347


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-2
changelog:
  - remote: Fix memory leak on error path when deserializing bulk stats (rhbz#1136350)
  - spec: Fix preun script for daemon (rhbz#1136736)
  - security: fix DH key generation when FIPS mode is on (rhbz#1128497)
  - tests: force FIPS testing mode with new enough GNU TLS versions (rhbz#1128497)
  - Don't include non-migratable features in host-model (rhbz#1138221)
  - qemu: Rename DEFAULT_JOB_MASK to QEMU_DEFAULT_JOB_MASK (rhbz#1134154)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1134154)
  - qemu: snapshot: Acquire job earlier on snapshot revert/delete (rhbz#1134154)
  - qemu: snapshot: Fix snapshot function header formatting and spacing (rhbz#1134154)
  - qemu: snapshot: Simplify error paths (rhbz#1134154)
  - qemu: Propagate QEMU errors during incoming migrations (rhbz#1090093)
  - Refactor job statistics (rhbz#1063724)
  - qemu: Avoid incrementing jobs_queued if virTimeMillisNow fails (rhbz#1063724)
  - Add support for fetching statistics of completed jobs (rhbz#1063724)
  - qemu: Silence coverity on optional migration stats (rhbz#1063724)
  - virsh: Add support for completed job stats (rhbz#1063724)
  - qemu: Transfer migration statistics to destination (rhbz#1063724)
  - qemu: Recompute downtime and total time when migration completes (rhbz#1063724)
  - qemu: Transfer recomputed stats back to source (rhbz#1063724)
  - conf: Extend <loader/> and introduce <nvram/> (rhbz#1112257)
  - qemu: Implement extended loader and nvram (rhbz#1112257)
  - qemu: Automatically create NVRAM store (rhbz#1112257)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-3
changelog:
  - virsh: Move --completed from resume to domjobinfo (rhbz#1063724)
  - qemu_driver: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - virfile: Resolve Coverity DEADCODE (rhbz#1141209)
  - lxc: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - xen: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - virsh: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - daemon: Resolve Coverity RESOURCE_LEAK (rhbz#1141209)
  - domain_conf: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - storage_conf: Fix libvirtd crash when defining scsi storage pool (rhbz#1141943)
  - qemu: time: Report errors if agent command fails (rhbz#1142294)
  - util: storage: Copy driver type when initializing chain element (rhbz#1140984)
  - docs, conf, schema: add support for shared memory mapping (rhbz#1133144)
  - qemu: add support for shared memory mapping (rhbz#1133144)
  - rpc: reformat the flow to make a bit more sense (rhbz#927369)
  - remove redundant pidfile path constructions (rhbz#927369)
  - util: fix potential leak in error codepath (rhbz#927369)
  - util: get rid of unnecessary umask() call (rhbz#927369)
  - rpc: make daemon spawning a bit more intelligent (rhbz#927369)
  - conf: add backend element to interfaces (rhbz#1139362)
  - Wire up the interface backend options (rhbz#1139362)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - qemu: fix crash with shared disks (rhbz#1142722)
  - nvram: Fix permissions (rhbz#1026772)
  - libvirt.spec: Fix permission even for libvirt-driver-qemu (rhbz#1026772)
  - virDomainUndefineFlags: Allow NVRAM unlinking (rhbz#1026772)
  - formatdomain: Update <loader/> example to match the rest (rhbz#1026772)
  - domaincaps: Expose UEFI capability (rhbz#1026772)
  - qemu_capabilities: Change virQEMUCapsFillDomainCaps signature (rhbz#1026772)
  - domaincaps: Expose UEFI binary path, if it exists (rhbz#1026772)
  - domaincapstest: Run cleanly on systems missing OVMF firmware (rhbz#1026772)
  - conf: Disallow nonexistent NUMA nodes for hugepages (rhbz#1135396)
  - qemu: Honor hugepages for UMA domains (rhbz#1135396)
  - RHEL: Fix maxvcpus output (rhbz#1092363)
  - virsh: Add iothread to 'attach-disk' (rhbz#1101574)
  - qemu: Issue query-iothreads and to get list of active IOThreads (rhbz#1101574)
  - vircgroup: Introduce virCgroupNewIOThread (rhbz#1101574)
  - qemu_domain: Add niothreadpids and iothreadpids (rhbz#1101574)
  - qemu_cgroup: Introduce cgroup functions for IOThreads (rhbz#1101574)
  - qemu: Allow pinning specific IOThreads to a CPU (rhbz#1101574)
  - domain_conf: Add iothreadpin to cputune (rhbz#1101574)
  - vircgroup: Fix broken builds without cgroups (rhbz#1101574)
  - cputune: allow interleaved xml (rhbz#1101574)
  - qemu: Fix iothreads issue (rhbz#1101574)
  - qemu_cgroup: Adjust spacing around incrementor (rhbz#1101574)
  - qemu: Fix call in qemuDomainSetNumaParamsLive for virCgroupNewIOThread (rhbz#1101574)
  - qemu: Need to check for capability before query (rhbz#1101574)
  - qemu: Don't fail startup/attach for IOThreads if no JSON (rhbz#1101574)
  - Fixes for domains with no iothreads (rhbz#1101574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-4
changelog:
  - Fix libvirtd crash when removing metadata (rhbz#1143955)
  - Fix leak in x86UpdateHostModel (rhbz#1144303)
  - Move the FIPS detection from capabilities (rhbz#1135431)
  - qemu: raise an error when trying to use readonly sata disks (rhbz#1112939)
  - virsh-host: fix pagesize unit of freepages (rhbz#1145048)
  - nodeinfo: report error when given node is out of range (rhbz#1145050)
  - Fix typo of virNodeGetFreePages comment (rhbz#1145050)
  - nodeinfo: Prefer MIN in nodeGetFreePages (rhbz#1145050)
  - Fix bug with loading bridge name for active domain during libvirtd start (rhbz#1140085)
  - qemu: save image: Split out user provided XML checker (rhbz#1142693)
  - qemu: save image: Add possibility to return XML stored in the image (rhbz#1142693)
  - qemu: save image: Split out new definition check/update (rhbz#1142693)
  - qemu: save image: Split out checks done only when editing the save img (rhbz#1142693)
  - qemu: hook: Provide hook when restoring a domain save image (rhbz#1142693)
  - qemu: Expose additional migration statistics (rhbz#1013055)
  - qemu: Fix old tcp:host URIs more cleanly (rhbz#1013055)
  - qemu: Prepare support for arbitrary migration protocol (rhbz#1013055)
  - qemu: Add RDMA migration capabilities (rhbz#1013055)
  - qemu: RDMA migration support (rhbz#1013055)
  - qemu: Memory pre-pinning support for RDMA migration (rhbz#1013055)
  - qemu: Fix memory leak in RDMA migration code (rhbz#1013055)
  - schemas: finish virTristate{Bool, Switch} transition (rhbz#1139364)
  - conf: split out virtio net driver formatting (rhbz#1139364)
  - conf: remove redundant local variable (rhbz#1139364)
  - conf: add options for disabling segment offloading (rhbz#1139364)
  - qemu: wire up virtio-net segment offloading options (rhbz#1139364)
  - spec: Enable qemu driver for RHEL-7 on aarch64 (rhbz#1142448)
  - blkdeviotune: fix bug with saving values into live XML (rhbz#1146511)
  - security: Fix labelling host devices (rhbz#1146550)
  - qemu: Add missing goto on rawio (rhbz#1103739)
  - hostdev: Add "rawio" attribute to _virDomainHostdevSubsysSCSI (rhbz#1103739)
  - qemu: Process the hostdev "rawio" setting (rhbz#1103739)
  - util: Add function to check if a virStorageSource is "empty" (rhbz#1138231)
  - util: storage: Allow metadata crawler to report useful errors (rhbz#1138231)
  - qemu: Sanitize argument names and empty disk check in qemuDomainDetermineDiskChain (rhbz#1138231)
  - qemu: Report better errors from broken backing chains (rhbz#1138231)
  - storage: Improve error message when traversing backing chains (rhbz#1138231)
  - qemu: Always re-detect backing chain (rhbz#1144922)
  - event: introduce new event for tunable values (rhbz#1115898)
  - tunable_event: extend debug message and tweak limit for remote message (rhbz#1115898)
  - add an example how to use tunable event (rhbz#1115898)
  - Fix MinGW build (rhbz#1115898)
  - event_example: cleanup example code for tunable event (rhbz#1115898)
  - cputune_event: queue the event for cputune updates (rhbz#1115898)
  - blkdeviotune: trigger tunable event for blkdeviotune updates (rhbz#1115898)
  - Rename tunable event constants (rhbz#1115898)
  - Fix typo s/EMULATORIN/EMULATORPIN/ (rhbz#1115898)
  - Check for NULL in qemu monitor event filter (rhbz#1144920)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-5
changelog:
  - qemuPrepareNVRAM: Save domain after NVRAM path generation (rhbz#1026772)
  - Fix crash cpu_shares change event crash on domain startup (rhbz#1147494)
  - Don't verify CPU features with host-passthrough (rhbz#1147584)
  - Also filter out non-migratable features out of host-passthrough (rhbz#1147584)
  - selinux: Avoid label reservations for type = none (rhbz#1138487)
  - qemu: bulk stats: extend internal collection API (rhbz#1113116)
  - qemu: bulk stats: implement CPU stats group (rhbz#1113116)
  - qemu: bulk stats: implement balloon group (rhbz#1113116)
  - qemu: bulk stats: implement VCPU group (rhbz#1113116)
  - qemu: bulk stats: implement interface group (rhbz#1113116)
  - qemu: bulk stats: implement block group (rhbz#1113116)
  - virsh: add options to query bulk stats group (rhbz#1113116)
  - lib: De-duplicate stats group documentation for all stats functions (rhbz#1113116)
  - lib: Document that virConnectGetAllDomainStats may omit some stats fields (rhbz#1113116)
  - man: virsh: Add docs for supported stats groups (rhbz#1113116)
  - qemu: monitor: return block stats data as a hash to avoid disk mixup (rhbz#1113116)
  - qemu: monitor: Avoid shadowing variable "devname" on FreeBSD (rhbz#1113116)
  - qemu: monitor: Add helper function to fill physical/virtual image size (rhbz#1113116)
  - qemu: bulk stats: add block allocation information (rhbz#1113116)
  - qemu: json: Fix missing break in error reporting function (rhbz#1113116)
  - qemu: monitor: Avoid shadowing variable "devname" on FreeBSD. Again. (rhbz#1113116)
  - docs, conf, schema: add support for shmem device (rhbz#1126991)
  - qemu: add capability probing for ivshmem device (rhbz#1126991)
  - qemu: Build command line for ivshmem device (rhbz#1126991)
  - minor shmem clean-ups (rhbz#1126991)
  - virSecuritySELinuxSetTapFDLabel: Temporarily revert to old behavior (rhbz#1095636)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - qemu: support relative backing for RHEL 7.0.z qemu (rhbz#1150322)
  - qemu: Fix hot unplug of SCSI_HOST device (rhbz#1141732)
  - qemu: Remove need for virConnectPtr in hotunplug detach host, net (rhbz#1141732)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-6
changelog:
  - qemu: support nospace reason in io error event (rhbz#1119784)
  - RHEL: Add support for QMP I/O error reason (rhbz#1119784)
  - nodeinfo: fix nodeGetFreePages when max node is zero (rhbz#1145048)
  - nodeGetFreePages: Push forgotten change (rhbz#1145048)
  - conf: tests: fix virDomainNetDefFormat for vhost-user in client mode (rhbz#1155458)
  - util: string: Add helper to check whether string is empty (rhbz#1142693)
  - qemu: restore: Fix restoring of VM when the restore hook returns empty XML (rhbz#1142693)
  - security_selinux: Don't relabel /dev/net/tun (rhbz#1095636)
  - qemu: Fix updating bandwidth limits in live XML (rhbz#1146511)
  - qemu: save domain status after set the blkio parameters (rhbz#1146511)
  - qemu: call qemuDomainObjBeginJob/qemuDomainObjEndJob in qemuDomainSetInterfaceParameters (rhbz#1146511)
  - qemu: save domain status after set domain's numa parameters (rhbz#1146511)
  - qemu: forbid snapshot-delete --children-only on external snapshot (rhbz#956506)
  - qemu: better error message when block job can't succeed (rhbz#1140981)
  - Reject live update of offloading options (rhbz#1155441)
  - virutil: Introduce virGetSCSIHostNumber (rhbz#1146837)
  - virutil: Introduce virGetSCSIHostNameByParentaddr (rhbz#1146837)
  - storage_conf: Resolve libvirtd crash matching scsi_host (rhbz#1146837)
  - Match scsi_host pools by parent address first (rhbz#1146837)
  - Relax duplicate SCSI host pool checking (rhbz#1146837)
  - qemu: Remove possible NULL deref in debug output (rhbz#1141621)
  - virsh: Adjust the text in man page regarding qemu-attach (rhbz#1141621)
  - hotplug: Check for alias in controller detach (rhbz#1141621)
  - hotplug: Check for alias in disk detach (rhbz#1141621)
  - hotplug: Check for alias in hostdev detach (rhbz#1141621)
  - hotplug: Check for alias in chrdev detach (rhbz#1141621)
  - hotplug: Check for alias in net detach (rhbz#1141621)
  - qemu-attach: Assign device aliases (rhbz#1141621)
  - hotplug: fix char device detach (rhbz#1141621)
  - storage: Fix crash when parsing backing store URI with schema (rhbz#1156288)
  - remote: fix jump depends on uninitialised value (rhbz#1158715)
  - qemu: Release nbd port from migrationPorts instead of remotePorts (rhbz#1159245)
  - conf: add trustGuestRxFilters attribute to network and domain interface (rhbz#848199)
  - network: set interface actual trustGuestRxFilters from network/portgroup (rhbz#848199)
  - util: define virNetDevRxFilter and basic utility functions (rhbz#848199)
  - qemu: qemuMonitorQueryRxFilter - retrieve guest netdev rx-filter (rhbz#848199)
  - qemu: add short document on qemu event handlers (rhbz#848199)
  - qemu: setup infrastructure to handle NIC_RX_FILTER_CHANGED event (rhbz#848199)
  - qemu: change macvtap device MAC address in response to NIC_RX_FILTER_CHANGED (rhbz#848199)
  - util: Functions to update host network device's multicast filter (rhbz#848199)
  - qemu: change macvtap multicast list in response to NIC_RX_FILTER_CHANGED (rhbz#848199)
  - virnetdev: Resolve Coverity DEADCODE (rhbz#848199)
  - virnetdev: Resolve Coverity FORWARD_NULL (rhbz#848199)
  - virnetdev: Resolve Coverity RESOURCE_LEAK (rhbz#848199)
  - lxc: improve error message for invalid blkiotune settings (rhbz#1131306)
  - qemu: improve error message for invalid blkiotune settings (rhbz#1131306)
  - Do not probe for power mgmt capabilities in lxc emulator (rhbz#1159227)
  - qemu: make advice from numad available when building commandline (rhbz#1138545)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-7
changelog:
  - qemu: avoid rare race when undefining domain (rhbz#1150505)
  - qemu: stop NBD server after successful migration (rhbz#1160212)
  - Require at least one console for LXC domain (rhbz#1155410)
  - remote: Fix memory leak in remoteConnectGetAllDomainStats (rhbz#1158715)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)
  - Free job statistics from the migration cookie (rhbz#1161124)
  - Fix virDomainChrEquals for spicevmc (rhbz#1162097)
  - network: fix call virNetworkEventLifecycleNew when networkStartNetwork fail (rhbz#1162915)
  - Do not crash on gluster snapshots with no host name (rhbz#1162974)
  - nwfilter: fix deadlock caused updating network device and nwfilter (rhbz#1143780)
  - util: eliminate "use after free" in callers of virNetDevLinkDump (rhbz#1163463)
  - storage: Check for valid fc_host parent at startup (rhbz#1160565)
  - storage: Ensure fc_host parent matches wwnn/wwpn (rhbz#1160565)
  - storage: Don't use a stack copy of the adapter (rhbz#1160926)
  - storage: Introduce virStoragePoolSaveConfig (rhbz#1160926)
  - storage: Introduce 'managed' for the fchost parent (rhbz#1160926)
  - qemu: Always set migration capabilities (rhbz#1163953)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-8
changelog:
  - qemu: Fix crash in tunnelled migration (rhbz#1147331)
  - qemu: Really fix crash in tunnelled migration (rhbz#1147331)
  - qemu: Update fsfreeze status on domain state transitions (rhbz#1160084)
  - qemuPrepareNVRAM: Save domain conf only if domain's persistent (rhbz#1026772)
  - docs: Document NVRAM behavior on transient domains (rhbz#1026772)
  - Fix build in qemu_capabilities (rhbz#1165782)
  - qemu: Support OVMF on armv7l aarch64 guests (rhbz#1165782)
  - qemu: Drop OVMF whitelist (rhbz#1165782)
  - storage: Fix issue finding LU's when block doesn't exist (rhbz#1152382)
  - storage: Add thread to refresh for createVport (rhbz#1152382)
  - storage: qemu: Fix security labelling of new image chain elements (rhbz#1151718)
  - virsh: sync domdisplay help and manual (rhbz#997802)
  - docs: domain: Move docs for storage hosts under the <source> element (rhbz#1164528)
  - test: virstoragetest: Add testing of network disk details (rhbz#1164528)
  - util: storage: Copy hosts of a storage file only if they exist (rhbz#1164528)
  - qemu: Refactor qemuBuildNetworkDriveURI to take a virStorageSourcePtr (rhbz#1164528)
  - tests: Reflow the expected output from RBD disk test (rhbz#1164528)
  - util: split out qemuParseRBDString into a common helper (rhbz#1164528)
  - util: storagefile: Split out parsing of NBD string into a separate func (rhbz#1164528)
  - storage: Allow parsing of RBD backing strings when building backing chain (rhbz#1164528)
  - storage: rbd: qemu: Add support for specifying internal RBD snapshots (rhbz#1164528)
  - storage: rbd: Implement support for passing config file option (rhbz#1164528)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-9
changelog:
  - doc: fix mismatched ACL attribute name (rhbz#1161358)
  - qemu: monitor: Rename and improve qemuMonitorGetPtyPaths (rhbz#1146944)
  - conf: Add channel state for virtio channels to the XML (rhbz#1146944)
  - qemu: Add handling for VSERPORT_CHANGE event (rhbz#1146944)
  - qemu: chardev: Extract more information about character devices (rhbz#1146944)
  - qemu: process: Refresh virtio channel guest state when connecting to mon (rhbz#1146944)
  - event: Add guest agent lifecycle event (rhbz#1146944)
  - examples: Add support for the guest agent lifecycle event (rhbz#1146944)
  - qemu: Emit the guest agent lifecycle event (rhbz#1146944)
  - internal: add macro to round value to the next closest power of 2 (rhbz#1076098)
  - video: cleanup usage of vram attribute and update documentation (rhbz#1076098)
  - QXL: fix setting ram and vram values for QEMU QXL device (rhbz#1076098)
  - caps: introduce new QEMU capability for vgamem_mb device property (rhbz#1076098)
  - qemu-command: use vram attribute for all video devices (rhbz#1076098)
  - qemu-command: introduce new vgamem attribute for QXL video device (rhbz#1076098)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-10
changelog:
  - qemu: add the missing jobinfo type in qemuDomainGetJobInfo (rhbz#1167883)
  - network: Fix upgrade from libvirt older than 1.2.4 (rhbz#1167145)
  - qemu: fix domain startup failing with 'strict' mode in numatune (rhbz#1168866)
  - qemu: Don't track quiesced state of FSs (rhbz#1160084)
  - qemu: fix block{commit,copy} abort handling (rhbz#1135169)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-11
changelog:
  - virsh: vol-upload disallow negative offset (rhbz#1087104)
  - storage: fix crash caused by no check return before set close (rhbz#1087104)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1139567)
  - security: Manage SELinux labels on shared/readonly hostdev's (rhbz#1082521)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1169409)
  - conf: Fix libvirtd crash matching hostdev XML (rhbz#1174053)
  - qemu: Resolve Coverity REVERSE_INULL (rhbz#1172570)
  - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() (CVE-2014-8131)
  - qemu: bulk stats: Fix logic in monitor handling (rhbz#1172570)
  - qemu: avoid rare race when undefining domain (rhbz#1150505)
  - Do not format CPU features without a model (rhbz#1151885)
  - Ignore CPU features without a model for host-passthrough (rhbz#1151885)
  - Silently ignore MAC in NetworkLoadConfig (rhbz#1156367)
  - Generate a MAC when loading a config instead of package update (rhbz#1156367)
  - qemu: move setting emulatorpin ahead of monitor showing up (rhbz#1170484)
  - util: Introduce flags field for macvtap creation (rhbz#1081461)
  - network: Bring netdevs online later (rhbz#1081461)
  - qemu: always call qemuInterfaceStartDevices() when starting CPUs (rhbz#1081461)
  - qemu: add a qemuInterfaceStopDevices(), called when guest CPUs stop (rhbz#1081461)
  - conf: replace call to virNetworkFree() with virObjectUnref() (rhbz#1099210)
  - util: new functions for setting bridge and bridge port attributes (rhbz#1099210)
  - util: functions to manage bridge fdb (forwarding database) (rhbz#1099210)
  - conf: new network bridge device attribute macTableManager (rhbz#1099210)
  - network: save bridge name in ActualNetDef when actualType==network too (rhbz#1099210)
  - network: store network macTableManager setting in NetDef actual object (rhbz#1099210)
  - network: setup bridge devices for macTableManager='libvirt' (rhbz#1099210)
  - qemu: setup tap devices for macTableManager='libvirt' (rhbz#1099210)
  - qemu: add/remove bridge fdb entries as guest CPUs are started/stopped (rhbz#1099210)
  - virsh: document block.n.allocation stat (rhbz#1041569)
  - getstats: avoid memory leak on OOM (rhbz#1041569)
  - getstats: improve documentation (rhbz#1041569)
  - getstats: start giving offline block stats (rhbz#1041569)
  - getstats: add block.n.path stat (rhbz#1041569)
  - qemuMonitorJSONBlockStatsUpdateCapacity: Don't skip disks (rhbz#1041569)
  - getstats: prepare monitor collection for recursion (rhbz#1041569)
  - getstats: perform recursion in monitor collection (rhbz#1041569)
  - getstats: prepare for dynamic block.count stat (rhbz#1041569)
  - getstats: add new flag for block backing chain (rhbz#1041569)
  - getstats: split block stats reporting for easier recursion (rhbz#1041569)
  - getstats: crawl backing chain for qemu (rhbz#1041569)
  - logical: Add "--type snapshot" to lvcreate command (rhbz#1166592)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-12
changelog:
  - Fix hotplugging of block device-backed usb disks (rhbz#1175668)
  - qemu: Create memory-backend-{ram, file} iff needed (rhbz#1175397)
  - conf: Don't format actual network definition in migratable XML (rhbz#1177194)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-13
changelog:
  - conf: Fix memory leak when parsing invalid network XML (rhbz#1180136)
  - qxl: change the default value for vgamem_mb to 16 MiB (rhbz#1181052)
  - qemuxml2argvtest: Fix test after change of qxl vgamem_mb default (rhbz#1181052)
  - conf: fix crash when hotplug a channel chr device with no target (rhbz#1181408)
  - qemu: forbid second blockcommit during active commit (rhbz#1135339)
  - qemu_monitor: introduce new function to get QOM path (rhbz#1180574)
  - qemu_process: detect updated video ram size values from QEMU (rhbz#1180574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-14
changelog:
  - virNetworkDefUpdateIPDHCPHost: Don't crash when updating network (rhbz#1182486)
  - Format CPU features even for host-model (rhbz#1182448)
  - util: Add function virCgroupHasEmptyTasks (rhbz#1161540)
  - util: Add virNumaGetHostNodeset (rhbz#1161540)
  - qemu: Remove unnecessary qemuSetupCgroupPostInit function (rhbz#1161540)
  - qemu: Save numad advice into qemuDomainObjPrivate (rhbz#1161540)
  - qemu: Leave cpuset.mems in parent cgroup alone (rhbz#1161540)
  - qemu: Fix hotplugging cpus with strict memory pinning (rhbz#1161540)
  - util: Fix possible NULL dereference (rhbz#1161540)
  - qemu_driver: fix setting vcpus for offline domain (rhbz#1161540)
  - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs (CVE-2014-8136)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image (CVE-2015-0236)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots (CVE-2015-0236)
  - Check for domain liveness in qemuDomainObjExitMonitor (rhbz#1161024)
  - Mark the domain as active in qemuhotplugtest (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemuDomainHotplugVcpus (rhbz#1161024)
  - Fix vmdef usage while in monitor in BlockStat* APIs (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemu process (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device detach (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device attach (rhbz#1161024)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16
changelog:
  - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)
  - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.13-1
changelog:
  - Rebased to libvirt-1.2.13 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#872028, rhbz#907779, rhbz#927252, rhbz#956891, rhbz#1073506
      rhbz#1079917, rhbz#1095637, rhbz#1123767, rhbz#1125764, rhbz#1126762
      rhbz#1130390, rhbz#1131919, rhbz#1132900, rhbz#1135442, rhbz#1138125
      rhbz#1138516, rhbz#1138539, rhbz#1140034, rhbz#1140960, rhbz#1141159
      rhbz#1143921, rhbz#1146334, rhbz#1147195, rhbz#1151942, rhbz#1152404
      rhbz#1152473, rhbz#1153891, rhbz#1155843, rhbz#1158034, rhbz#1158722
      rhbz#1159180, rhbz#1160559, rhbz#1160995, rhbz#1161831, rhbz#1164627
      rhbz#1165485, rhbz#1165993, rhbz#1168849, rhbz#1169183, rhbz#1170092
      rhbz#1170140, rhbz#1170492, rhbz#1171533, rhbz#1171582, rhbz#1172015
      rhbz#1172468, rhbz#1172526, rhbz#1173420, rhbz#1174096, rhbz#1174154
      rhbz#1174569, rhbz#1175123, rhbz#1175449, rhbz#1176503, rhbz#1176510
      rhbz#1177723, rhbz#1178652, rhbz#1178850, rhbz#1178853, rhbz#1178986
      rhbz#1179678, rhbz#1179684, rhbz#1179981, rhbz#1181182, rhbz#1182467
      rhbz#1183869, rhbz#1183890, rhbz#1185165, rhbz#1186175, rhbz#1186199
      rhbz#1186765, rhbz#1186886, rhbz#1188914, rhbz#1189007, rhbz#1190956
      rhbz#1191016, rhbz#1191227, rhbz#1191355, rhbz#1191567, rhbz#1195461
      rhbz#1196503, rhbz#1196528, rhbz#1204017


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.14-1
changelog:
  - Rebased to libvirt-1.2.14 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#790583, rhbz#853839, rhbz#872424, rhbz#921426, rhbz#952499
      rhbz#958510, rhbz#1070695, rhbz#1125755, rhbz#1127045, rhbz#1129198
      rhbz#1135491, rhbz#1140958, rhbz#1141119, rhbz#1142631, rhbz#1142636
      rhbz#1143832, rhbz#1155887, rhbz#1161461, rhbz#1163553, rhbz#1164053
      rhbz#1166024, rhbz#1171484, rhbz#1173468, rhbz#1174147, rhbz#1176050
      rhbz#1177219, rhbz#1177237, rhbz#1179533, rhbz#1181062, rhbz#1187012
      rhbz#1187533, rhbz#1190590, rhbz#1196185, rhbz#1196644, rhbz#1196934
      rhbz#1197600, rhbz#1199036, rhbz#1199182, rhbz#1206365, rhbz#1206406
      rhbz#1206987, rhbz#1207122, rhbz#1207937
  - RHEL: Hack around changed Broadwell/Haswell CPUs (rhbz#1199446)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.15-1
changelog:
  - Rebased to libvirt-1.2.15 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#858147, rhbz#890606, rhbz#1043436, rhbz#1073305, rhbz#1076708
      rhbz#1084876, rhbz#1147847, rhbz#1161617, rhbz#1165119, rhbz#1168530
      rhbz#1171933, rhbz#1177062, rhbz#1177733, rhbz#1181465, rhbz#1192318
      rhbz#1200634, rhbz#1202606, rhbz#1202704, rhbz#1203628, rhbz#1203931
      rhbz#1206114, rhbz#1206479, rhbz#1206521, rhbz#1206625, rhbz#1207257
      rhbz#1208009, rhbz#1208176, rhbz#1208434, rhbz#1208763, rhbz#1209312
      rhbz#1209394, rhbz#1209813, rhbz#1210159, rhbz#1210545, rhbz#1210650
      rhbz#1210669, rhbz#1211436, rhbz#1211548, rhbz#1211550, rhbz#1213434
      rhbz#1213698, rhbz#1215569, rhbz#1216046


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.15-2
changelog:
  - RHEL: Relax qemu-kvm dependency from libvirt-daemon-kvm (rhbz#1212642)
  - caps: Fix regression defaulting to host arch (rhbz#1219191)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.16-1
changelog:
  - Rebased to libvirt-1.2.16 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#847198, rhbz#890648, rhbz#893738, rhbz#976387, rhbz#981546
      rhbz#998813, rhbz#1066375, rhbz#1073233, rhbz#1073305, rhbz#1076354
      rhbz#1131486, rhbz#1143837, rhbz#1146539, rhbz#1159171, rhbz#1159219
      rhbz#1161541, rhbz#1164966, rhbz#1171984, rhbz#1174177, rhbz#1174226
      rhbz#1176020, rhbz#1176739, rhbz#1177599, rhbz#1181074, rhbz#1183893
      rhbz#1191227, rhbz#1194593, rhbz#1195882, rhbz#1197580, rhbz#1204006
      rhbz#1204033, rhbz#1206521, rhbz#1207043, rhbz#1211938, rhbz#1213345
      rhbz#1218145, rhbz#1218577, rhbz#1220195, rhbz#1220265, rhbz#1220474
      rhbz#1220702, rhbz#1220809, rhbz#1221047, rhbz#1221504, rhbz#1223631
      rhbz#1223688, rhbz#1224018, rhbz#1226849


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-1
changelog:
  - Rebased to libvirt-1.2.17 (rhbz#1194593)
  - The rebase also fixes the following bugs:
      rhbz#890648, rhbz#985653, rhbz#1021480, rhbz#1089914, rhbz#1131755
      rhbz#1171933, rhbz#1179680, rhbz#1181087, rhbz#1182388, rhbz#1186797
      rhbz#1186969, rhbz#1194593, rhbz#1196644, rhbz#1200206, rhbz#1201143
      rhbz#1201760, rhbz#1202208, rhbz#1207692, rhbz#1210352, rhbz#1220213
      rhbz#1223177, rhbz#1224053, rhbz#1224088, rhbz#1224233, rhbz#1224587
      rhbz#1225694, rhbz#1226234, rhbz#1226854, rhbz#1227180, rhbz#1227551
      rhbz#1227555, rhbz#1227558, rhbz#1227664, rhbz#1228007, rhbz#1229199
      rhbz#1229592, rhbz#1229666, rhbz#1230039, rhbz#1230137, rhbz#1230664
      rhbz#1232606, rhbz#1232880, rhbz#1234686, rhbz#1234729, rhbz#1235116
      rhbz#1236438, rhbz#1236496, rhbz#1236507, rhbz#1236585, rhbz#1236924
      rhbz#1238153, rhbz#1238338


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-2
changelog:
  - util: bitmap: Don't alloc overly large binary bitmaps (rhbz#1238589)
  - storage: Fix regression in storagePoolUpdateAllState (rhbz#1238610)
  - Separate isa-fdc options generation (rhbz#1227880)
  - Explicitly format the isa-fdc controller for newer q35 machines (rhbz#1227880)
  - Add rhel machine types to qemuDomainMachineNeedsFDC (rhbz#1227880)
  - conf: Don't allow duplicated target names regardless of bus (rhbz#1142631)
  - storage: Revert volume obj list updating after volume creation (4749d82a) (rhbz#1241454)
  - qemu_monitor: Wire up MIGRATION event (rhbz#1212077)
  - qemu: Enable migration events on QMP monitor (rhbz#1212077)
  - qemuDomainGetJobStatsInternal: Support migration events (rhbz#1212077)
  - qemu: Update migration state according to MIGRATION event (rhbz#1212077)
  - qemu: Wait for migration events on domain condition (rhbz#1212077)
  - qemu: Check duplicate WWNs also for hotplugged disks (rhbz#1208009)
  - qemu: move the guest status check before agent config and status check (rhbz#1240979)
  - qemu: report error for non-existing disk in blockjobinfo (rhbz#1241355)
  - virCondWaitUntil: add another return value (rhbz#1147471)
  - virDomainObjSignal: drop this function (rhbz#1147471)
  - monitor: detect that eject fails because the tray is locked (rhbz#1147471)
  - qemu_hotplug: try harder to eject media (rhbz#1147471)
  - qemu: Drop LFs at the end of error from QEMU log (rhbz#1090093)
  - Introduce virHashAtomic (rhbz#1090093)
  - Introduce virErrorCopyNew (rhbz#1090093)
  - RHEL: spec: Require perl-XML-XPath (rhbz#1090093)
  - qemu: Remember incoming migration errors (rhbz#1090093)
  - qemu: Don't report false error from MigrateFinish (rhbz#1090093)
  - qemu: Use error from Finish instead of "unexpectedly failed" (rhbz#1090093)
  - cpu: Add support for MPX and AVX512 Intel features (rhbz#1076170)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-3
changelog:
  - qemuProcessHandleMigrationStatus: Update migration status more frequently (rhbz#1212077)
  - qemuDomainSetNumaParamsLive: Check for NUMA mode more wisely (rhbz#1232663)
  - qemu: process: Improve update of maximum balloon state at startup (rhbz#1242940)
  - storage: Fix pool building when directory already exists (rhbz#1244080)
  - virsh: report error if vcpu number exceed the guest maxvcpu number (rhbz#1160559)
  - cmdVcpuPin: Remove dead code (rhbz#1160559)
  - rpc: Add virNetDaemonHasClients (rhbz#1240283)
  - rpc: Rework timerActive logic in daemon (rhbz#1240283)
  - cgroup: Drop resource partition from virSystemdMakeScopeName (rhbz#1238570)
  - virsh: blockjob: Extract block job info code into a separate function (rhbz#1227551)
  - virsh: cmdBlockJob: Switch to declarative flag interlocking (rhbz#1227551)
  - virsh: blockjob: Split out vshBlockJobSetSpeed from blockJobImpl (rhbz#1227551)
  - virsh: block job: separate abort from blockJobImpl (rhbz#1227551)
  - virsh: Split out block pull implementation from blockJobImpl (rhbz#1227551)
  - virsh: Kill blockJobImpl by moving the final impl into cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor argument checking in cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor argument handling in cmdBlockCopy (rhbz#1227551)
  - virsh: Refactor argument handling in cmdBlockPull (rhbz#1227551)
  - qemu: Update state of block job to READY only if it actually is ready (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockPull (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockCommit (rhbz#1227551)
  - virsh: Refactor block job waiting in cmdBlockCopy (rhbz#1197592)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-4
changelog:
  - qemu: Reject migration with memory-hotplug if destination doesn't support it (rhbz#1248350)
  - qemu: Properly check for incoming migration job (rhbz#1242904)
  - qemu: Do not reset labels when migration fails (rhbz#1242904)
  - qemu: Check for iotune_max support properly (rhbz#1224053)
  - docs: Add Fibre Channel NPIV supported option for volume lun config (rhbz#1238545)
  - conf: Allow error reporting in virDomainDiskSourceIsBlockType (rhbz#1238545)
  - qemu: Forbid image pre-creation for non-shared storage migration (rhbz#1249587)
  - qemu: remove deadcode in qemuDomain{HelperGetVcpus|GetIOThreadsLive} (rhbz#1213713)
  - nodeinfo: Introduce local linuxGetCPUPresentPath (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUCount (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetPresentCPUBitmap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUBitmap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetCPUMap (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetInfo (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeCapsInitNUMA (rhbz#1213713)
  - nodeinfo: Add sysfs_prefix to nodeGetMemoryStats (rhbz#1213713)
  - nodeinfo: fix to parse present cpus rather than possible cpus (rhbz#1213713)
  - tests: Add nodeinfo test for non-present CPUs (rhbz#1213713)
  - nodeinfo: Make sysfs_prefix usage more consistent (rhbz#1213713)
  - nodeinfo: Formatting changes (rhbz#1213713)
  - tests: Restore links in deconfigured-cpus nodeinfo test (rhbz#1213713)
  - nodeinfo: Add nodeGetPresentCPUBitmap() to libvirt_private.syms (rhbz#1213713)
  - nodeinfo: Fix nodeGetCPUBitmap()'s fallback code path (rhbz#1213713)
  - nodeinfo: Introduce linuxGetCPUGlobalPath() (rhbz#1213713)
  - nodeinfo: Introduce linuxGetCPUOnlinePath() (rhbz#1213713)
  - nodeinfo: Rename linuxParseCPUmax() to linuxParseCPUCount() (rhbz#1213713)
  - nodeinfo: Add old kernel compatibility to nodeGetPresentCPUBitmap() (rhbz#1213713)
  - nodeinfo: Remove out parameter from nodeGetCPUBitmap() (rhbz#1213713)
  - nodeinfo: Rename nodeGetCPUBitmap() to nodeGetOnlineCPUBitmap() (rhbz#1213713)
  - nodeinfo: Phase out cpu_set_t usage (rhbz#1213713)
  - nodeinfo: Use nodeGetOnlineCPUBitmap() when parsing node (rhbz#1213713)
  - nodeinfo: Use a bitmap to keep track of node CPUs (rhbz#1213713)
  - nodeinfo: Calculate present and online CPUs only once (rhbz#1213713)
  - nodeinfo: Check for errors when reading core_id (rhbz#1213713)
  - Renamed deconfigured-cpus to allow make dist (rhbz#1213713)
  - tests: Finish rename of the long nodeinfo test case (rhbz#1213713)
  - nodeinfo: Fix output on PPC64 KVM hosts (rhbz#1213713)
  - tests: Prepare for subcore tests (rhbz#1213713)
  - tests: Add subcores1 nodeinfo test (rhbz#1213713)
  - tests: Add subcores2 nodeinfo test (rhbz#1213713)
  - tests: Add subcores3 nodeinfo test (rhbz#1213713)
  - nodeinfo: Fix build failure when KVM headers are not available (rhbz#1213713)
  - qemu: fix some api cannot work when disable cpuset in conf (rhbz#1244664)
  - qemu: Auto assign pci addresses for shared memory devices (rhbz#1165029)
  - conf: Add getter for network routes (rhbz#1094205)
  - network: Add another collision check into networkCheckRouteCollision (rhbz#1094205)
  - docs: Document how libvirt handles companion controllers (rhbz#1069590)
  - qemu: Reject updating unsupported disk information (rhbz#1007228)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-5
changelog:
  - numa_conf: Introduce virDomainNumaGetMaxCPUID (rhbz#1176020)
  - virDomainDefParseXML: Check for malicious cpu ids in <numa/> (rhbz#1176020)
  - conf: more useful error message when pci function is out of range (rhbz#1004596)
  - qemu: Fix reporting of physical capacity for block devices (rhbz#1250982)
  - network: verify proper address family in updates to <host> and <range> (rhbz#1184736)
  - rpc: Remove keepalive_required option (rhbz#1247087)
  - virNetDevBandwidthParseRate: Reject negative values (rhbz#1022292)
  - domain: Fix crash if trying to live update disk <serial> (rhbz#1007228)
  - qemu: fail on attempts to use <filterref> for non-tap network connections (rhbz#1180011)
  - network: validate network NAT range (rhbz#985653)
  - conf: Don't try formating non-existing addresses (rhbz#985653)
  - cpu: Rename {powerpc, ppc} => ppc64 (filesystem) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (exported symbols) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (internal symbols) (rhbz#1250977)
  - cpu: Indentation changes in the ppc64 driver (rhbz#1250977)
  - cpu: Mark driver functions in ppc64 driver (rhbz#1250977)
  - cpu: Simplify NULL handling in ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64ModelFromCPU() (rhbz#1250977)
  - cpu: Reorder functions in the ppc64 driver (rhbz#1250977)
  - cpu: Remove ISA information from CPU map XML (rhbz#1250977)
  - tests: Remove unused file (rhbz#1250977)
  - tests: Improve result handling in cpuTestGuestData() (rhbz#1250977)
  - cpu: Never skip CPU model name check in ppc64 driver (rhbz#1250977)
  - cpu: CPU model names have to match on ppc64 (rhbz#1250977)
  - cpu: Use ppc64Compute() to implement ppc64DriverCompare() (rhbz#1250977)
  - tests: Temporarily disable ppc64 cpu tests (rhbz#1250977)
  - cpu: Align ppc64 CPU data with x86 (rhbz#1250977)
  - cpu: Support multiple PVRs in the ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64 part of CPU map XML (rhbz#1250977)
  - cpu: Parse and use PVR masks in the ppc64 driver (rhbz#1250977)
  - cpu: Add POWER8NVL information to CPU map XML (rhbz#1250977)
  - cpu: Implement backwards compatibility in the ppc64 driver (rhbz#1250977)
  - cpu: Forbid model fallback in the ppc64 driver (rhbz#1250977)
  - tests: Re-enable ppc64 cpu tests (rhbz#1250977)
  - tests: Add a bunch of cpu test case for ppc64 (rhbz#1250977)
  - cpu: Fix segfault in the ppc64 driver (rhbz#1250977)
  - qemu: Fix segfault when parsing private domain data (rhbz#1162947)
  - conf: Pass private data to Parse function of XML options (rhbz#1162947)
  - qemu: Keep numad hint after daemon restart (rhbz#1162947)
  - qemu: Use numad information when getting pin information (rhbz#1162947)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-6
changelog:
  - api: Remove check on iothread_id arg in virDomainPinIOThread (rhbz#1251886)
  - api: Adjust comment for virDomainAddIOThread (rhbz#1251886)
  - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (rhbz#1251886)
  - conf: Check for attach disk usage of iothread=0 (rhbz#1253108)
  - virNetDevBandwidthUpdateRate: turn class_id into integer (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthChangeAllowed (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthUpdate (rhbz#1252473)
  - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (rhbz#1252473)
  - cpu: Don't update host-model guest CPUs on ppc64 (rhbz#1251927)
  - cpu: Better support for ppc64 compatibility modes (rhbz#1251927)
  - cpu: Move check for NULL CPU model inside the driver (rhbz#1251927)
  - tests: Add some compatibility-related cases to the CPU tests (rhbz#1251927)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-7
changelog:
  - Start daemon only after filesystems are mounted (rhbz#1255228)
  - virfile: Add error for root squash change mode failure (rhbz#1253609)
  - virfile: Introduce virFileUnlink (rhbz#1253609)
  - storage: Correct the 'mode' check (rhbz#1253609)
  - storage: Handle failure from refreshVol (rhbz#1253609)
  - util: Add virStringGetFirstWithPrefix (rhbz#1165580)
  - util: Add virCgroupGetBlockDevString (rhbz#1165580)
  - util: Add getters for cgroup block device I/O throttling (rhbz#1165580)
  - lxc: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - qemu: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - Allow vfio hotplug of a device to the domain which owns the iommu (rhbz#1256486)
  - hostdev: skip ACS check when using VFIO for device assignment (rhbz#1256486)
  - docs: Clarify unprivileged sgio feature (rhbz#1072736)
  - qemu: Introduce qemuIsSharedHostdev (rhbz#1072736)
  - qemu: Introduce qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuCheckSharedDisk to create qemuCheckUnprivSGIO (rhbz#1072736)
  - qemu: Inline qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuSetUnprivSGIO return values (rhbz#1072736)
  - qemu: Fix integer/boolean logic in qemuSetUnprivSGIO (rhbz#1072736)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1072736)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1072736)
  - security_selinux: Use proper structure to access socket data (rhbz#1146886)
  - security_dac: Label non-listening sockets (rhbz#1146886)
  - security: Add virSecurityDomainSetDirLabel (rhbz#1146886)
  - security_stack: Add SetDirLabel support (rhbz#1146886)
  - security_selinux: Add SetDirLabel support (rhbz#1146886)
  - security_dac: Add SetDirLabel support (rhbz#1146886)
  - qemu: Fix access to auto-generated socket paths (rhbz#1146886)
  - tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (rhbz#1146886)
  - qemu: Label correct per-VM path when starting (rhbz#1146886)
  - selinux: fix compile errors (rhbz#1146886)
  - conf: Add ioeventfd option for controllers (rhbz#1150484)
  - qemu: Enable ioeventfd usage for virtio-scsi controllers (rhbz#1150484)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-8
changelog:
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1257004)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1257004)
  - cpu: Introduce IvyBridge CPU model (rhbz#1254420)
  - examples: Add example polkit ACL rules (rhbz#1115289)
  - qemu: don't use initialized ret in qemuRemoveSharedDevice (rhbz#1072736)
  - qemu: Introduce qemuDomainMachineIsS390CCW (rhbz#1258361)
  - qemu: Need to check for machine.os when using ADDRESS_TYPE_CCW (rhbz#1258361)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-9
changelog:
  - conf: fix crash when parsing a unordered NUMA <cell/> (rhbz#1260846)
  - vmx: Some whitespace cleanup (rhbz#1172544)
  - vmx: The virVMXParseDisk deviceType can be NULL, add some missing checks (rhbz#1172544)
  - vmx: Add handling for CDROM devices with SCSI passthru (rhbz#1172544)
  - qemu: hotplug: Properly clean up drive backend if frontend hotplug fails (rhbz#1262399)
  - qemu: Introduce QEMU_CAPS_DEVICE_RTL8139 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_E1000 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_VIRTIO_NET (rhbz#1254044)
  - qemu: Try several network devices when looking for a default (rhbz#1254044)
  - qemu: Report error if per-VM directory cannot be created (rhbz#1146886)
  - qemu: Do not allow others into per-VM subdirectories (rhbz#1146886)
  - qemu: Allow others to browse /var/lib/libvirt/qemu (rhbz#1146886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-10
changelog:
  - virSecuritySELinuxSetSecurityAllLabel: drop useless virFileIsSharedFSType (rhbz#1124841)
  - security_selinux: Replace SELinuxSCSICallbackData with proper struct (rhbz#1124841)
  - virSecurityManager: Track if running as privileged (rhbz#1124841)
  - security_selinux: Take @privileged into account (rhbz#1124841)
  - qemu: Fix using guest architecture as lookup key (rhbz#1260753)
  - virfile: Check for existence of dir in virFileDeleteTree (rhbz#1146886)
  - Revert "qemu: Fix integer/boolean logic in qemuSetUnprivSGIO" (rhbz#1072736)
  - qemu: migration: Relax enforcement of memory hotplug support (rhbz#1252685)
  - conf: Add helper to determine whether memory hotplug is enabled for a vm (rhbz#1252685)
  - qemu: Make memory alignment helper more universal (rhbz#1252685)
  - conf: Drop VIR_DOMAIN_DEF_PARSE_CLOCK_ADJUST flag (rhbz#1252685)
  - conf: Document all VIR_DOMAIN_DEF_PARSE_* flags (rhbz#1252685)
  - conf: Add XML parser flag that will allow us to do incompatible updates (rhbz#1252685)
  - conf: Split memory related post parse stuff into separate function (rhbz#1252685)
  - conf: Rename max_balloon to total_memory (rhbz#1252685)
  - conf: Pre-calculate initial memory size instead of always calculating it (rhbz#1252685)
  - conf: Don't always recalculate initial memory size from NUMA size totals (rhbz#1252685)
  - qemu: command: Align memory sizes only on fresh starts (rhbz#1252685)
  - qemu: ppc64: Align memory sizes to 256MiB blocks (rhbz#1249006)
  - test: Add test to validate that memory sizes don't get updated on migration (rhbz#1252685)
  - qemu: Align memory module sizes to 2MiB (rhbz#1252685)
  - qemu: Refresh memory size only on fresh starts (rhbz#1242940)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13
changelog:
  - qemu: Add conditions for qemu-kvm use on ppc64 (rhbz#1267882)
  - qemu: Move simplification variable to begining of the function (rhbz#1266856)
  - qemu: Extract -mem-path building into its own function (rhbz#1266856)
  - qemu: Add -mem-path even with numa (rhbz#1266856)
  - qemu: Use memory-backing-file only when needed (rhbz#1266856)
  - qemu: Always update migration times on destination (rhbz#1265902)
  - qemu: Copy completed migration stats only on success (rhbz#1265902)
  - qemu: Introduce flags in qemuMigrationCompleted (rhbz#1265902)
  - qemu: Make updating stats in qemuMigrationCheckJobStatus optional (rhbz#1265902)
  - qemu: Wait until destination QEMU consumes all migration data (rhbz#1265902)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.1
changelog:
  - qemu: migration: Properly parse memory hotplug migration flag (rhbz#1280419)
  - qemu: Emit correct audit message for memory hot unplug (rhbz#1280420)
  - qemu: Emit correct audit message for memory hot plug (rhbz#1280420)
  - qemu: Extract logic to determine the mlock limit size for VFIO (rhbz#1280420)
  - qemu: hotplug: Fix mlock limit handling on memory hotplug (rhbz#1280420)
  - qemu: domain: Restructurate control flow in qemuDomainGetMlockLimitBytes (rhbz#1280420)
  - qemu: Explain mlock limit size more in detail (rhbz#1280420)
  - qemu: hotplug: Reject VFIO hotplug if setting RLIMIT_MEMLOCK fails (rhbz#1283924)
  - process: Log when limiting the amount of locked memory (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() in qemuBuildCommandLine() (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() when attaching PCI hostdev (rhbz#1283924)
  - qemu: Add ppc64-specific math to qemuDomainGetMlockLimitBytes() (rhbz#1283924)
  - qemu: Always set locked memory limit for ppc64 domains (rhbz#1283924)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.4
changelog:
  - systemd: Escape machine name for machined (rhbz#1308494)
  - systemd: Add virSystemdGetMachineNameByPID (rhbz#1308494)
  - systemd: Modernize machine naming (rhbz#1308494)
  - virSystemdGetMachineNameByPID: Initialize @reply (rhbz#1308494)
  - util: Fix virCgroupNewMachine ATTRIBUTE_NONNULL args (rhbz#1308494)
  - dbus: Don't unref NULL messages (rhbz#1308494)
  - vmx: Expose datacenter path in domain XML (rhbz#1305489)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.5
changelog:
  - nodedev: Indent PCI express for future fix (rhbz#1331328)
  - nodedev: Expose PCI header type (rhbz#1331328)
  - nodedev: Fix parsing of generated XMLs (rhbz#1331328)
  - qemu: driver: Remove unnecessary flag in qemuDomainGetStatsBlock (rhbz#1339963)
  - qemu: driver: Separate bulk stats worker for block devices (rhbz#1339963)
  - qemu: bulk stats: Don't access possibly blocked storage (rhbz#1339963)


author: Daniel Veillard <veillard@redhat.com> 2.6.27-1
changelog:
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream


author: Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
changelog:
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups


author: Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
changelog:
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.7-1
changelog:
  - Upstream release of 2.7.7
  - fix serious trouble with zlib >= 1.2.4
  - xmllint new option --xpath
  - various HTML parser improvements
  - includes a number of nug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.8-1
changelog:
  - Upstream release of 2.7.8
  - various bug fixes, including potential crashes
  - new non-destructive formatting option
  - date parsing updated to RFC 5646


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-0rc1
changelog:
  - upstream release candidate 1 of 2.9.0
  - introduce a small API change, but ABI compatible, see
    https://mail.gnome.org/archives/xml/2012-August/msg00005.html
    patches for php, gcc/libjava and evolution-data-connector are upstream
    Grab me in cases of problems veillard@redhat.com
  - many bug fixes including security aspects and small improvements


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-1
changelog:
  - upstream release of 2.9.0
  - A few new API entry points
  - More resilient push parser mode
  - A lot of portability improvement
  - Faster XPath evaluation
  - a lot of bug fixes and smaller improvement


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-2
changelog:
  - remaining cleanups from merge bug rhbz#226079
  - do not put the docs in the main package, only in -devel rhbz#864731


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Preston Brown <pbrown@redhat.com> 3.5.6-1
changelog:
  - enable LFS support (debian bug #100810)
  - quote filenames for running compress commands or pre/postrotate cmds (#21348)
  - deprecate "errors" directive (see bug #16544 for explanation)
  - update man page
  - configurable compression command by Colm Buckley <colm@tuatha.org>


author: Preston Brown <pbrown@redhat.com> 3.6-1
changelog:
  - patch from Alexander Kourakos <awk@awks.org> to stop the shared
    postrotate/prerotate scripts from running if none of the log(s) need
    rotating.  All log files are now checked for rotation in one batch,
    rather than sequentially.
  - more fixes from Paul Martin <pm@debian.org>


author: Elliot Lee <sopwith@redhat.com> 3.6.2-1
changelog:
  - Fix bug #55809 (include logrotate.status in "files")
  - Fix bug #58328 (incorrect error detection when reading state file)
  - Allow 'G' size specifier from bug #57242


author: Erik Troan <ewt@redhat.com>
changelog:
  - always use compressext for the extension for compressed
    files; before compresscmd and compressext had to agree
  - moved all compression to one code block
  - compression, scripts don't use system() anymore
  - compress and maillast didn't work together properly
  - delaycompress and mailfirst didn't work properly
  - don't use system() for mailing (or uncompressing) logs anymore
  - use "-s" for speciying the subjected of mailed logs


author: Miloslav Trmac <mitr@redhat.com> - 3.7.1-2
changelog:
  - Fix sending mails (#131583)
  - Preserve file attributes when compressing files (#121523, original patch by
    Daniel Himler)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.4-11
changelog:
  - logrotate won't stop if there are some errors in configuration
    or glob failures (#166510, #182062)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.4-12
changelog:
  - fix problem with compress_options_list (#227706)
  - fix spec file to meet Fedora standards (#226104)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.5-2
changelog:
  - fix error hadnling after prerotate, postrotate, firstaction 
    script failure. (http://qa.mandriva.com/show_bug.cgi?id=29979)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.5-4
changelog:
  - use dateext in the default config file (#240292)
  - add options to use shred for deleting files -- adapt patch sent by
    Peter Eckersley <pde@eff.org> (#239934)
  - ignore .cfsaved files by default (#223476)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.6-1
changelog:
  - new upstream version
  - fix #248565 logrotate never rotates /var/log/btmp
  - fix compile warnings
  - tabooext accepts wildcards (related #247816)
  - fix minor errors and update man page (related #250059)
  - fix handling of size directive (related #247410)


author: Tomas Smetana <tsmetana@redhat.com> 3.7.6-2
changelog:
  - fix #427274 - logrotate fails to preserve SELinux file contexts
  - fix #427661 - SELinux stops vsftpd from working correctly


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-12
changelog:
  - fix #602643 - update manpage to reflect scripts changes
  - fix #606675 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.9-5
changelog:
  - fix #661181 - fixed SIGBUS when config file is empty or 4096 bytes
  - fix #666677 - preserve ACLs when rotating files


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Honza Horak <hhorak@redhat.com> 5.5.28a-5
changelog:
  - Added licenses LGPLv2 and BSD
  - Removed wrong usage of %{epoch}
  - Test-suite is run in %check
  - Removed perl dependency checking adjustment, rpm seems to be smart enough
  - Other minor spec file fixes


author: Honza Horak <hhorak@redhat.com> 5.5.28a-6
changelog:
  - Removed %{_isa} from provides/obsoletes, which doesn't allow
    proper obsoleting
  - Do not obsolete mysql at the time of testing


author: Honza Horak <hhorak@redhat.com> 5.5.28a-7
changelog:
  - Adding necessary hacks for perl dependency checking, rpm is still
    not wise enough
  - Namespace sanity re-added for symbol default_charset_info


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Rebase to 5.5.29
    https://kb.askmonty.org/en/mariadb-5529-changelog/
  - Fix inaccurate default for socket location in mysqld-wait-ready
    Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.29-3
changelog:
  - Packages need to provide also %_isa version of mysql package
  - Provide own symbols with real- prefix to distinguish from mysql
    unambiguously
  - Fix format for buffer size in error messages (MDEV-4156)
  - Disable some tests that fail on ppc and s390
  - Conflict only with real-mysql, otherwise mariadb conflicts with ourself


author: Honza Horak <hhorak@redhat.com> 5.5.29-7
changelog:
  - Use configured prefix value instead of guessing basedir
    in mysql_config
  Resolves: #916189
  - Export dynamic columns and non-blocking API functions documented
    by upstream


author: Honza Horak <hhorak@redhat.com> 5.5.29-9
changelog:
  - Let mariadb-embedded-devel conflict with MySQL-embedded-devel
  - Adjust mariadb-sortbuffer.patch to correspond with upstream patch


author: Honza Horak <hhorak@redhat.com> 1:5.5.29-10
changelog:
  - Adding epoch to have higher priority than other mysql implementations
    when comes to provider comparison


author: Honza Horak <hhorak@redhat.com> 5.5.30-2
changelog:
  - Remove mytop utility, which is packaged separately
  - Resolve multilib conflicts in mysql/private/config.h


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Rebase to 5.5.31
    https://kb.askmonty.org/en/mariadb-5531-changelog/
  - Preserve time-stamps in case of installed files
  - Use /var/tmp instead of /tmp, since the later is using tmpfs,
    which can cause problems
    Resolves: #962087
  - Fix test suite requirements


author: Honza Horak <hhorak@redhat.com> 5.5.31-6
changelog:
  - Test suite params enhanced to decrease server condition influence
  - Fix misleading error message when uninstalling built-in plugins
    Related: #966873


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Rebase to 5.5.32
    https://kb.askmonty.org/en/mariadb-5532-changelog/
  - Clean-up un-necessary systemd snippets


author: Dennis Gilmore <dennis@ausil.us> - 5.5.32-5
changelog:
  - remove "Requires(pretrans): systemd" since its not possible
  - when installing mariadb and systemd at the same time. as in a new install


author: Honza Horak <hhorak@redhat.com> 5.5.32-6
changelog:
  - Remove unneeded systemd-sysv requires
  - Provide mysql-compat-server symbol
  - Create mariadb.service symlink
  - Fix multilib header location for arm
  - Enhance documentation in the unit file
  - Use scriptstub instead of links to avoid multilib conflicts
  - Revert docs in unversioned dir
  - Remove mysql provides from server-side and obsoleting mysql
  - Revert explicit enabling mysqld in the beggining of the transaction


author: Honza Horak <hhorak@redhat.com> - 1:5.5.32-9
changelog:
  - Move log file into /var/log/mariadb/mariadb.log
  - Rename logrotate script to mariadb
  - Resolves: #999589


author: Honza Horak <hhorak@redhat.com> 1:5.5.34-1
changelog:
  - Rebase to 5.5.34
  - Obsolete mysql packages
    Resolves: #1043971
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Resolves: #1048881
  - Check if socket file is not being used by another process at a time
    of starting the service
    Resolves: #1045435


author: Honza Horak <hhorak@redhat.com> 1:5.5.34-3
changelog:
  - Clean all non-needed doc files properly
    Related: #1044532
  - Disable main.gis-precise test also for AArch64
    Disable perfschema.func_file_io and perfschema.func_mutex for AArch64
    (like it is done for 32-bit ARM)
    Resolves: #1050988
  - Build with -O3 on ppc64 (disabling innodb_prefix_index_restart_server)
    Related: #1051069
  - Move mysql_config to -devel sub-package and remove Require: mariadb
    Resolves: #1050920


author: Honza Horak <hhorak@redhat.com> 5.5.35-1
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1054041


author: Honza Horak <hhorak@redhat.com> - 1:5.5.37-1
changelog:
  - Rebase to 5.5.37
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Also fixes: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432 CVE-2014-2431
    CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1101062


author: Honza Horak <hhorak@redhat.com> - 1:5.5.37-2
changelog:
  - Build with -O3 on all power64 arches
    Disable some failing tests temporarily on ppc64le
    Resolves: #1123497


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160549


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.41-1
changelog:
  - Rebase to 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186110


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.44-3
changelog:
  - MDEV-8827 Duplicate key with auto increment
    fix innodb auto-increment handling three bugs:
      1. innobase_next_autoinc treated the case of current<offset incorrectly
      2. ha_innobase::get_auto_increment didn't recalculate current when increment changed
      3. ha_innobase::get_auto_increment didn't pass offset down to innobase_next_autoinc
    Resolves: #1300621


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.47-1
changelog:
  - Rebase to 5.5.47
    Also fixes: CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816
    CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858
    CVE-2015-4861 CVE-2015-4870 CVE-2015-4879 CVE-2015-4913 CVE-2015-7744
    CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598
    CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616
    CVE-2016-2047
    Resolves: #1304515


author: <gleblanc@localhost.localdomain>
changelog:
  - beautification
  - made mdadm.conf non-replaceable config
  - renamed Copyright to License in the header
  - added missing license file
  - used macros for file paths


author: Doug Ledford <dledford@redhat.com> 1.5.0-2
changelog:
  - Add a default MAILADDR line to the mdadm.conf file installed by default
    (Bugzilla #92447)
  - Make it build with gcc-3.4


author: Doug Ledford <dledford@redhat.com> 1.5.0-4
changelog:
  - Update mdmonitor script to start daemon more cleanly
  - Repackage mdmpd tarball to include gcc-3.4 changes and to make
    mdmpd properly daemonize at startup instead of forking and leaving
    the child attached to the terminal.


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> 1.11.0-2.fc4
changelog:
  - Change the default auto= mode so it need not be on the command line to
    work with udev, however it is still supported on the command line (#132706)
  - Add a man page (from Luca Berra) for mdassemble


author: Doug Ledford <dledford@redhat.com> 1.11.0-4.fc4
changelog:
  - Make the mdmonitor init script use the pid-file option, major cleanup
    of the script now possible (#134459)


author: Warren Togami <wtogami@redhat.com> 2.2-1
changelog:
  - 2.2 upgrade (#167897)
  - disable diet because we don't ship it anymore
    and we don't actually use mdassemble now


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Doug Ledford <dledford@redhat.com> - 2.6-1
changelog:
  - Update to latest upstream version
  - Remove the mdmpd daemon entirely.  Now that multipath tools from the lvm/dm
    packages handles multipath devices well, this is no longer needed.
  - Various cleanups in the spec file


author: Doug Ledford <dledford@redhat.com> - 2.6.2-1
changelog:
  - Update to latest upstream
  - Remove requirement for /usr/sbin/sendmail - it's optional and not on by
    default, and sendmail isn't *required* for mdadm itself to work, and isn't
    even required for the monitoring capability to work, just if you want to
    have the monitoring capability do the automatic email thing instead of
    run your own program (and if you use the program option of the monitor
    capability, your program could email you in a different manner entirely)


author: Doug Ledford <dledford@redhat.com> - 2.6.2-2
changelog:
  - Fix a file leak issue when mdadm is in monitor mode
  - Update mdadm init script so that status will always run and so
    return codes are standards compliant
  - Fix assembly of version 1 superblock devices
  - Make the attempt to create an already running device have a clearer
    error message
  - Allow the creation of a degraded raid4 array like we allow for raid5
  - Make mdadm actually pay attention to raid4 devices when in monitor mode
  - Make the mdmonitor script use daemon() correctly
  - Fix a bug where manage mode would not add disks correctly under certain
    conditions
  - Resolves: bz244582, bz242688, bz230207, bz169516, bz171862, bz171938
  - Resolves: bz174642, bz224272, bz186524


author: Doug Ledford <dledford@redhat.com> - 2.6.2-3
changelog:
  - Oops, had to update the file leak patch, missed one thing
  - Minor tweak to return codes in init script and add LSB header
  - Resolves: bz244582, bz246980


author: Doug Ledford <dledford@redhat.com> - 2.6.2-4
changelog:
  - Oops, if we call -C -e1, minor_version is no longer properly set, fix that
    up
  - Related: bz230207


author: Bill Nottingham <notting@redhat.com> - 2.6.4-4
changelog:
  - make /dev/md if necessary in incremental mode (#429604)
  - open RAID devices with O_EXCL to avoid racing against other --incremental processes (#433932)


author: Doug Ledford <dledford@redhat.com> - 2.6.7-1
changelog:
  - Update to latest upstream version (should resolve #444237)
  - Drop incremental patch as it's now part of upstream
  - Clean up all the open() calls in the code (#437145)
  - Fix the build process to actually generate mdassemble (#446988)
  - Update the udev rules to get additional info about arrays being assembled
    from the /etc/mdadm.conf file (--scan option) (#447818)
  - Update the udev rules to run degraded arrays (--run option) (#452459)


author: Doug Ledford <dledford@redhat.com> - 2.6.7.1-1
changelog:
  - Updated to latest upstream stable release (#466803)
  - Change udev rule to not assemble degraded arrays (#453314)
  - Fix metadata matching in config file (#466078)
  - Fix assembly of raid10 devices (#444237)
  - Fix incremental assembly of partitioned raid devices (#447818)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.1
changelog:
  - Update to latest upstream devel release
  - Use the udev rules file included with mdadm instead of our own
  - Drop all the no longer relevant patches
  - Fix a build error in mdopen.c
  - Fix the udev rules path in Makefile
  - Fix a compile issue with the __le32_to_cpu() macro usage (bad juju to
    to operations on the target of the macro as it could get executed
    multiple times, and gcc now throws an error on that)
  - Add some casts to some print statements to keep gcc from complaining


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.2
changelog:
  - Readd our old mdadm rules file that does incremental assembly
  - Remove the new mdadm rules file from upstream as we already have this in
    our udev package (and the one in the udev package already has a bug fixed)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.1
changelog:
  - Update to latest devel release
  - Remove the no longer necessary udev patch
  - Remove the no longer necessary warn patch
  - Remove the no longer necessary alias patch
  - Update the mdadm.rules file to only pay attention to device adds, not
    changes and to enable incremental assembly
  - Add a cron job to run a weekly repair of the array to correct bad sectors
  - Resolves: bz474436, bz490972


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.3
changelog:
  - Slightly tweak the udev rules to make sure we don't start arrays
    while running in rc.sysinit...leave array starting to it instead
  - Modify mdadm to put its mapfile in /dev/md instead of /var/run/mdadm
    since at startup /var/run/mdadm is read-only by default and this
    breaks incremental assembly
  - Change how mdadm decides to assemble incremental devices using their 
    preferred name or a random name to avoid possible conflicts when plugging
    a foreign array into a host


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.5
changelog:
  - Fix a few issues with the new code to determine when a device gets to
    keep its name and when it doesn't


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.6
changelog:
  - Only check raid devices automatically, do not attempt to repair them
    during the weekly data scrubbing


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.7
changelog:
  - Move the mdadm.map file from /dev/md/ to /dev/ so the installer doesn't
    need to precreate the /dev/md/ directory in order for incremental
    assembly to work


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Remove stale patches already accepted by upstream
  - Fix the raid-check script to only try and check a device if it is
    checkable
  - Update to official mdadm-3.0 version
  - Resolves: bz505587, bz505552


author: Doug Ledford <dledford@redhat.com> - 3.0-2
changelog:
  - Improved raid-check script as well as the ability to configure what devices
    get checked
  - Endian patch for uuid generation


author: Doug Ledford <dledford@redhat.com> - 3.0-3
changelog:
  - Update to current head of upstream git repo for various imsm related fixes
    (fixes bz523262)
  - Fix display of metadata version in output of Detail mode
  - Add UUID output to --detail --export (bz523314)


author: Hans de Goede <hdegoede@redhat.com> - 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - Add a patch fixing mdadm --detail -export segfaults (bz526761, bz523862)
  - Add a patch making mdmon store its state under /dev/.mdadm for initrd
    mdmon, rootfs mdmon handover
  - Restart mdmon from initscript (when running) for rootfs mdmon handover


author: Doug Ledford <dledford@redhat.com> - 3.0.3-1
changelog:
  - New upstream release 3.0.3 (bz523320, bz527281)
  - Update a couple internal patches
  - Drop a patch in that was in Neil's tree for 3.0.3 that we had pulled for
    immediate use to resolve a bug
  - Drop the endian patch because it no longer applied cleanly and all attempts
    to reproduce the original problem as reported in bz510605 failed, even up
    to and including downloading the specific package that was reported as
    failing in that bug and trying to reproduce with it on both ppc and ppc64
    hardware and with both ppc and ppc64 versions on the 64bit hardware.
    Without a reproducer, it is impossible to determine if a rehashed patch
    to apply to this code would actually solve the problem, so remove the patch
    entirely since the original problem, as reported, was an easy to detect DOA
    issue where installing to a raid array was bound to fail on reboot and so
    we should be able to quickly and definitively tell if the problem resurfaces.
  - Update the mdmonitor init script for LSB compliance (bz527957)
  - Link from mdadm.static man page to mdadm man page (bz529314)
  - Fix a problem in the raid-check script (bz523000)
  - Fix the intel superblock handler so we can test on non-scsi block devices


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.1
changelog:
  - Update to head of upstream git repo, which contains a significant number
    of bug fixes we need (bz543746)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.3
changelog:
  - Don't run the raid-check script if the kernel doesn't support
    md devices (bz557053)
  - Don't report any mismatch_cnt issues on raid1 devices as there are
    legitimate reasons why the count may not be 0 and we are getting enough
    false positives that it renders the check useless (bz554217, bz547128)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.4
changelog:
  - Fix problem with booting multiple imsm containers when they aren't listed
    "just so" in the mdadm.conf file (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.5
changelog:
  - The uuid patch cause a different problem during assembly, so use a gross
    hack to work around the uuid issue that won't break assembly until fixed
    properly upstream (bz567132)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.6
changelog:
  - Newer version of imsm patch that leaves warning, but only when there
    actually are too many devices on the command line (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-1
changelog:
  - Grab latest upstream release instead of git repo snapshot (bz552344, bz572561)
  - The lack of /dev/md is causing problems, so add code to mapfile.c to cause
    us to create /dev/md if it doesn't exist (bz569019)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-2
changelog:
  - Add a little more paranoia checking to the RebuildMap code to avoid ever
    having the same infinite loop as in bz569019 again even if we change file
    locations to somewhere where we can't create a mapfile


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, fixes bz602457)
  - Add in 64-md-raid.rules to compensate for it no longer being in udev
    (bz581905)
  - Remove mdadm.static as its no longer used in initrd creation


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.2
changelog:
  - Remove the glibc-static buildreq and don't build the static mdadm since
    we don't install it anyway
  - Remove the udev file since adding it was supposed to be a rawhide only change


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100804.1
changelog:
  - Update to latest upstream release (resolves an issue with stale lock
    files on the md device map file)


author: Doug Ledford <dledford@redhat.com> - 3.1.5-1
changelog:
  - Update to latest upstream stable release
  - Update mdadm.rules file to honor noiswmd and nodmraid command line options
  - Ghost the directory in /var/run, create /var/run/mdadm in mdmonitor init
    script
  - Don't report mismatch counts on either raid1 or raid10
  - Check both active and idle arrays during raid check runs
  - Move the raid-check script from cron.weekly to /usr/sbin, add a crontab
    file to /etc/cron.d and mark it config(noreplace).  This way users can
    select their own raid-check frequency and have it honored through
    upgrades.
  - Allow the raid-check script to set the process and io priority of the
    thread performing the check in order to preserve responsiveness of the
    machine during the check.
  - Resolves: 633229, 656620. 679843, 671076, 659933


author: Milan Broz <mbroz@redhat.com> - 3.2.2-3
changelog:
  - Use unit files with systemd. (johannbg)
  - Add sub-package sysvinit for SysV init script.
  - Resolves: bz713573


author: Doug Ledford <dledford@redhat.com> - 3.2.2-8
changelog:
  - Rework the 65-md-incremental.rules file to add the following support:
    Nested md raid arrays should now work
    MD on top of LUKS or other lvm based devices should now work
    We should no longer grab multipath paths before multipath can


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-10
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)
  - Fix race between udev and mdadm when assembling md device using
    mdadm -I, where udev would spawn an additional mdadm command to
    perform the assembly in parallel.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-12
changelog:
  - Backport upstream version of fix for IMSM RAID assembly problem,
    which resolves issues when booting off sysvinit based system.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-14
changelog:
  - Backport upstream fixes to prevent growing v0.90 metadata raid out
    of supported size.
  - Add missing 'disable' argument to systemctl in preun script
  - Resolves: bz735306 (Fedora 15) bz748731 (Fedora 16) bz748732 (rawhide),
    Resolves: bz751716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-15
changelog:
  - Backport upstream fix for memory leak that can prevent migration to
    RAID5 from completing.
  - Backport upstream fix preventing mounting a device while it is in
    process of reshaping
  - Resolves: bz755005 bz755009


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-1
changelog:
  - Update to upstream 3.2.3
  - Resolves: bz770110 (rawhide) bz771413 (f16) bz759014 (rawhide)
  - Resolves: bz759015 (f16) bz759035 (rawhide) bz759036 (f16)
  - Resolves: bz771608 (f15) bz759016 (f15) bz759039 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Fix case where we have to retry in case a remove fails due to an array
    being busy
  - Resolves: bz773337 (rawhide) bz773340 (f16) bz773341 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Add support for --offroot to mdadm/mdmon
  - Resolves: bz785739 (rawhide) bz785737 (f16) bz771405 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz789898 (f16) bz791189 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-6
changelog:
  - Fix double free on buggy old kernel sysfs read
  - Fix segfault if trying to write superblock to non existing device
  - Resolves: bz795707 (f17) bz795747 (f16) bz795748 (f15)
  - Resolves: bz795461 (f17) bz795749 (f16) bz795750 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-7
changelog:
  - Fix issue when re-adding drive to a raid1 array with bitmap
  - Resolves: bz807743 (f17) bz769323 (f16) bz791159 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-8
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz817522 (f17) bz817535 (f16) bz817537 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-9
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - Correctly fix failure when trying to add internal bitmap to 1.0 arrays
  - Resolves: bz817023 (f17) bz817024 (f17) bz817026 (f17) bz817028 (f17)
  - Resolves: bz817029 (f17) bz817032 (f17) bz817038 (f17) bz808774 (f17)
  - Resolves: bz817039 (f17) bz817042 (f17)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-2
changelog:
  - Fix mdadm.conf to use 'd' for /var/run/mdadm creation, to avoid the
    map file getting deleted during boot.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-3
changelog:
  - Fix mdadm-3.2.4 introduced bug where --add fails in common cases
  - Resolves bz821717 (f17) bz821718 (f16) bz821719 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-2
changelog:
  - Fix uninstall script to remove dangling symlink to
    mdmonitor-takeover.service, if the mdadm package is uninstalled from
    the system.
  - Resolves bz828354


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Fix problem where reshape of RAID volume is broken after trying to
    stop all MD devices.
  - Enhance raid-check to allow the adming to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz830177, bz820124


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4
changelog:
  - Move /etc/tmpfiles.d/mdadm.conf to /lib/tmpfiles.d/ to comply with
    Fedora tmpfile rules
  - Resolves bz840187


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-7
changelog:
  - Remove bogus rogue patch applied in 3.2.5-5 with justification and
    without following the structure of the mdadm package.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-13
changelog:
  - Relax installation requirements for abrt script to only depend on
    libreport-filesystem rather than the full abrt package


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2
changelog:
  - Modify mdadm to set the cgroup of mdmon to systemd if it's available
  - Related bz873576 (and others)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Disallow creating a second IMSM RAID array size 0 (bz880972)
  - Disallow creating IMSM RAIDs that spans multiple controllers (bz880974)
  - Resolves bz880972, bz880974


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-5
changelog:
  - mdadm-sysvinit is obsolete given that we no longer support booting
    using sysvinit scripts
  - Resolves bz884993


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Fix issue with udev scripts where if an raid volume with one of
    the disks failing, the failed disk is still present in the volume
    and container. The raid volume stays is in normal state (should be
    degraded) and the rebuild cannot start.
  - Resolves bz886123


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - mdmonitor-takeover.service is obsolete with the --offroot support,
    and it is harmful as of 3.2.6
  - Resolves bz834245


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Reintroduce fix for removing dangling symlink of
    mdmonitor-takeover.service which got lost in the fix introduced in
    3.2.6-8


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Move code to leave udev cgroup into mdmon and excute it after we
    work, to make sure it actually does the right thing.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-12
changelog:
  - Launch mdmon via systemctl to avoid it ending up in the wrong cgroup
    and getting killed in the boot process when switching from the
    initrd to the real root.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-14
changelog:
  - Resync with final version of upstream patches for launching mdmon
    via systemctl. Require dracut 024-025 or later to match.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-16
changelog:
  - Rely on rpm macros to place files in correct directories, and match /usr
    move
  - Resolves bz955248


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-18
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz948745


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-19
changelog:
  - Fix problem where  rebuild of IMSM RAID5 volume started in OROM,
    does not proceed in OS 
  - Resolves bz956021 (f18), bz956026 (f17), bz956031 (f19)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-21
changelog:
  - Fix pointless rpmbuild noise over mismatching date info
  - Remove Fedora 17 support
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's bz956059


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-22
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015515


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-28
changelog:
  - Fix problem with policy with path=* not working if there is no
    /dev/disk/by-path/ directory, as is the case with (S)ATA only systems
  - Resovles bz1045510


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-29
changelog:
  - Fix problem with mdadm crashing, if trying to create an IMSM array, with
    missing devices.
  - Resolves bz1056466


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-30
changelog:
  - Fix problem where Resync and recovery of RAID10 stopped at more than
    50% does not continue after reassemblation
  - Resolves bz1068154


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-31
changelog:
  - Fix problem of IMSM platform capabilities not being detected in UEFI
    mode when only the second SATA controller is enabled.
  - Resolves bz1074161


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-32
changelog:
  - Fix issue with mdmon not being launched correctly after reboot
    during container reshape second of a second RAID5 array, resulting in
    it being read-only and cannot be mounted.
  - Resolves bz1074970


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-33
changelog:
  - Fix problem with spare disk not being added correctly to IMSM array
    because mdmon is unable to write metadata to it.
  - Resolves bz1072979


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-3
changelog:
  - Fix issue where migration record was not always cleared after successful
    reshape.
  - Resolves rhbz#1183724


author: Paul Lindner <lindner@inuus.com> - 1.2.2-3
changelog:
  - Enable build-time regression tests
  - add dependency on initscripts
  - remove memcached-debug (not needed in dist)
  - above suggestions from Bernard Johnson


author: root <lindner@inuus.com> - 1.2.3-2
changelog:
  - Upgrade to 1.2.3 upstream
  - Adjust make install to preserve man page timestamp
  - Conform with LSB init scripts standards, add force-reload


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Joe Orton <jorton@redhat.com> - 0:1.4.5-2
changelog:
  - LSB compliance fixes for init script
  - don't run the test suite as root
  - ensure a constant timestamp on the sysconfig file


author: Paul Lindner <lindner@inuus.com> - 0:1.4.7-1
changelog:
  - Upgrade to memcached 1.4.7 (http://code.google.com/p/memcached/wiki/ReleaseNotes147)
  - Fix some rpmlint errors/warnings.


author: Paul Lindner <lindner@mirth.inuus.com> - 0:1.4.13-1
changelog:
  - Upgrade to memcached 1.4.13
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1413
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1412
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1411


author: Joe Orton <jorton@redhat.com> - 0:1.4.15-1
changelog:
  - update to 1.4.15 (#782395)
  - switch to simple systemd service (#878198)
  - use systemd scriptlet macros (Václav Pavlín, #850204)


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update license
  - Update microcode data file to 20080131 revision.


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Kyle McMartin <kyle@redhat.com> 1.17-1.56
changelog:
  - Add AMD x86/x86-64 microcode. (Dated: 2009-10-09)
    Doesn't need microcode_ctl modifications as it's loaded by
    request_firmware() like any other sensible driver.
  - Eventually, this AMD firmware can probably live inside
    kernel-firmware once it is split out.


author: Anton Arapov <anton@redhat.com> 1.17-18
changelog:
  - Ship splitted microcode for Intel CPUs [#690930]
  - Include tool for splitting microcode for Intl CPUs (Kay Sievers )


author: Simo Sorce <simo@redhat.com> 1.3.1-1
changelog:
  - Various bugfixes and minor new features
  - resolves: #1258168
  - resolves: #1258171
  - resolves: #1258172
  - resolves: #1258456


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-5
changelog:
  - Fixed snmpd in FIPS mode (#874440)
  - Removed APSL licensed code (#830796)
  - Synchronized with RHEL-6.4


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - Removed unused patch
  - Added net-snmp-agent-libs dependency where appropriate
  - Added full relro
  - Make net-snmp-create-v3-user multilib safe


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-8
changelog:
  - Removed APSL patch (#830796)
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)
  - Python: fixed IPADDRESS size on 64-bit systems (#895357)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-9
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#978384)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#978398)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919240)
  - fixed kernel threads in hrSWRunTable (#979329)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#969061)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks if
    'includeAllDisks' is specified in snmpd.conf (#982644)
  - fixed crash in extTable on empty command line (#955609)
  - lowered severity of few debugging messages in dot3statsTable (#915302)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-11
changelog:
  - fixed parsing of integer variable sizes (#953926, #983116)
  - added support of simfs and vzfs to hrStorageTable (#861152, #989498)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-14
changelog:
  - move tmpfiles.d config file to /usr/lib (#881218)
  - fixed dashes in net-snmp-config.h (#1038642)
  - fixed snmpd crashing on monitor trigger evaluation (#1050971)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-17
changelog:
  - fixed various error codes in Python module (#1064338)
  - fixed net-snmp-config.h header file (#1064437)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-19
changelog:
  - Fixed not-increasing OIDs in IP-FORWARD-MIB::ipCidrRouteTable (#1172013)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070076)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086606)
  - Added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#1086925)
  - fixed proxying of out-of-tree GETNEXT requests (#1087801)
  - use python/README to net-snmp-python subpackage (#1158391)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: Steve Dickson <steved@redhat.com> 1.0.10-2
changelog:
  - Fixed -o remount (bz 210346)
  - fix memory leak in rpc.idmapd (bz 212547)
  - fix use after free bug in dirscancb (bz 212547)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.10-4
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 212471)


author: Steve Dickson <steved@redhat.com> 1.0.12-2
changelog:
  - Added condstop to all the initscripts (bz 196934)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.12-5
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Updated mountd and showmount reverse lookup flags (bz 220772)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887) 
  - Added missing unlock_mtab() call in moutnd
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)


author: Steve Dickson <steved@redhat.com> 1.0.10-6
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240225)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Disabled the FSCache patch, for now...


author: Steve Dickson <steved@redhat.com> 1.1.0-4
changelog:
  - Make sure the open() system calling in exportfs uses
    mode bits when creating the etab file (bz 252440).


author: Steve Dickson <steved@redhat.com> 1.1.0-5
changelog:
  - Changed the default paths in sm-notify to 
    /var/lib/nfs/statd (bz 258461)
  - Updated exportfs manpage (bz 262861)


author: Steve Dickson <steved@redhat.com> 1.1.1-1
changelog:
  - Updated to latest upstream release, nfs-utils-1.1.1
  - Added the removal of sm-notify.pid to nfslock init script.
  - Changed spec file to use condrestart instead of condstop
    when calling init scripts.
  - Fixed typo in rpc.mountd man page 
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Added -S/--since to the nfsstat(1) manpage
  - The wording in the exportfs man page can be a bit confusing, implying
    that "exportfs -u :/foo" will unexport /foo from all hosts, which it won't
  - Removed nfsprog option since the kernel no longer supports it.
  - Removed mountprog option since the kernel no longer supports it.
  - Stop segfaults on amd64 during warnings messages.
  - Fix bug when both crossmnt and fsid are set.


author: Steve Dickson <steved@redhat.com> 1.1.1-3
changelog:
  - Added in relatime mount option so mount.nfs stays
    compatible with the mount command in util-linux-ng (bz 274301)


author: Steve Dickson <steved@redhat.com> 1.1.1-5
changelog:
  - Stopped mountd from incorrectly logging an error
    (commit 9dd9b68c4c44f0d9102eb85ee2fa36a8b7f638e3)
  - Stop gssd from ignoring the machine credential caches
    (commit 46d439b17f22216ce8f9257a982c6ade5d1c5931)
  - Fixed typo in the nfsstat command line arugments.
    (commit acf95d32a44fd8357c24e8a04ec53fc6900bfc58)
  - Added test to stop buffer overflow in idmapd
    (commit bcd0fcaf0966c546da5043be700587f73174ae25)


author: Steve Dickson <steved@redhat.com> 1.1.2-3
changelog:
  - Documented how to turn off/on protocol support for
    rpc.nfsd in /etc/sysconfig/nfs (bz443625)
  - Corrected the nfslock initscript 'status' return code (bz 441605)
  - Removed obsolete code from the nfslock initscript (bz 441604)


author: Steve Dickson <steved@redhat.com> 1.1.2-7
changelog:
  - Added -D_FILE_OFFSET_BITS=64 to CFLAGS
  - make nfsstat read and print stats as unsigned integers
  - Added (but not installed) the mountstats and nfs-iostat
    python scripts.


author: Steve Dickson <steved@redhat.com> 1.1.2-12
changelog:
  - Changed the default directories for sm-notify (bz 435480)
  - Added 'condstop' to init scripts so service are not
    started when nfs-utils is removed.


author: Steve Dickson <steved@redhat.com> 1.1.3-5
changelog:
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 462508)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - gssd: unblock DNOTIFY_SIGNAL in case it was blocked
  - Ensure statd gets started if required when non-root
    user mounts an NFS filesystem


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.1.6-4
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-15
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
    - Stop ignoring the -o v4 option (bz 529407)
    - Allow network protocol roll backs when proto is set
      in the config file (bz 529864)
  - v4 mounts will roll back to v3 mounts when the mount
    fails with ENOENT.


author: Steve Dickson <steved@redhat.com> 1.2.1-10
changelog:
  - Updated to the latest pseudo root release (rel10) which
    containts the upstream pseudo root release


author: Steve Dickson <steved@redhat.com> 1.2.1-11
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-12
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-13
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6


author: Steve Dickson <steved@redhat.com> 1.2.3-2
changelog:
  - Initscripts do not conform to LSB specification (bz 621562)
  - sm-notify needs to call res_init() before each try (bz 625531)
  - exports(5) man page duplicated paragraphs (bz 590921)


author: Steve Dickson <steved@redhat.com> 1.2.3-4
changelog:
  - The nfs service is not stopped on reboot or halt (bz 652786)
  - Removed obsolete configuration values (bz 653765)


author: Steve Dickson <steved@redhat.com> 1.2.3-7
changelog:
  - Updated to latest upstream release: nfs-utils-1-2-4-rc5
  - Add initscripts changes needed for rpcbind to be running when nfs is started
  - Initscripts changes needed to support NFS over RDMA
  - Allow the setting of the NFSv4 grace period (bz 665387)


author: J. Bruce Fields <bfields@redhat.com> 1.2.4-1
changelog:
  - Rely on crypto module autoloading in init scripts
  - initscripts: just try to mount rpc_pipefs always


author: Steve Dickson <steved@redhat.com> 1.2.4-4
changelog:
  - Converted init scrips to systemd services. (bz 699040)
  - Made nfsnobody's uid/gid to always be a 16-bit value of -2
  - mount: fix for libmount from util-linux >= 2.20


author: Steve Dickson <steved@redhat.com> 1.2.4-7
changelog:
  - Added StandardError=syslog+console to all the service files
    so startup errors will be logged. 
  - Changed exportfs to only log errors on existing /etc/export.d 
    directory, which eliminates a needless syslog entry.
  - Automount /proc/fs/nfsd for rpc.nfsd


author: Steve Dickson <steved@redhat.com> 1.2.4-9
changelog:
  - Both the nfs.lock and nfs.idmap services should always
    enabled on both installs and upgrades (bz 699040)
  - Fixed the paths to the server scriptlets (bz 733531)


author: Steve Dickson <steved@redhat.com> 1.2.5-1
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc1
  - Added named.service to After list in nfs-server.service (bz 742746)


author: Steve Dickson <steved@redhat.com> 1.2.5-2
changelog:
  - Removed SUID bits on mount commands (bz 528498)
  - Fixed a few typos in a couple man pages (bz 668124, 673818, 664330)
  - Fixed a I/0 problem in rpc.idmapd (bz 684308)


author: Steve Dickson <steved@redhat.com> 1.2.5-5
changelog:
  - Ensured nfs-idmap service is started after the network up (bz 748275)
  - Update to upstream RC release: nfs-utils-1.2.6-rc3 (bz 746497)


author: Steve Dickson <steved@redhat.com> 1.2.5-6
changelog:
  - Remove RQUOTAD_PORT and RQUOTAD from /etc/sysconfig/nfs (bz 754496)
  - Ensured nfs-idmap service is started after the named is up (bz 748275)


author: Steve Dickson <steved@redhat.com> 1.2.5-7
changelog:
  - Enabled new idmaping by installing the id_resolver.conf file.
  - Update to upstream RC release: nfs-utils-1.2.6-rc4


author: Steve Dickson <steved@redhat.com> 1.2.5-11
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc6
  - Reworked how the nfsd service requires the rpcbind service (bz 768550)


author: Steve Dickson <steved@redhat.com> 1.2.5-13
changelog:
  - Make sure statd is start before NFS mounts (bz 786050)
  - rpc.idmap: Hide global symbols from libidmap plugins (bz 797332)
  - nfsd: Bump up the default to 8 nprocs (bz 757452)


author: Steve Dickson <steved@redhat.com> 1.2.5-14
changelog:
  - gssd: Look for user creds in user defined directory (bz 786993)
  - gssd: Don't link with libgssapi_krb5 (bz 784908)


author: Steve Dickson <steved@redhat.com> 1.2.6-0
changelog:
  - Update to the latest upstream release: nfs-utils-1.2.6 (bz 821673)
  - Split out NFS server daemons into individual service files (bz 769879) 
  - Removed Wants= from nfs-lock.service (bz 817895)
  - Only enable services if they are enabled on upgrades (bz 807020)


author: Steve Dickson <steved@redhat.com> 1.2.6-1
changelog:
  - Correctly search for the existence of nfsnobody (bz 816149)
  - Correctly change the default group id for nfsnobody (bz 816149)


author: Steve Dickson <steved@redhat.com> 1.2.6-12
changelog:
  - Added FedFS support by added a BuildRequires for fedfs-utils-devel
  - Introduce new systemd-rpm macros (bz 850227)
  - Updated to latest upstream RC release: nfs-utils.1.2.7-rc5 (bz 833024)


author: Steve Dickson <steved@redhat.com> 1.2.6-14
changelog:
  - Allow the service to start when RPCNFSDCOUNT is comment out. (bz 870143)
  - Removed some old cruft from the spec file (bz 226198)


author: Steve Dickson <steved@redhat.com> 1.2.7-3
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc3
  - Took ownership of /usr/lib/nfs-utils (bz 894535)


author: Steve Dickson <steved@redhat.com> 1.2.7-5
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc4
  - Added nfs-lock.service to After line in nfs-server.service (bz 914792)


author: Steve Dickson <steved@redhat.com> 1.2.8-2.0
changelog:
  - Update to latest upstream RC release: nfs-utils.1.2.9-rc1
  - Added GSS_USE_PROXY variable to nfs.sysconfig (bz 967112)


author: Steve Dickson <steved@redhat.com> 1.2.9-0.5
changelog:
  - Reverted patch for bz1029573. The kernel can now detect 
    when rpc.gssd is or is not running (bz1031197)
  - gssd: always reply to rpc-pipe requests from kernel. (bz1031197)


author: Steve Dickson <steved@redhat.com> 1.2.9-2.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc2
    - mount.nfs: Eliminated long delays during mount (bz 1031643)
    - exportfs: Corrected erroneously error messages (bz 1049589)


author: Steve Dickson <steved@redhat.com> 1.2.9-3.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc3
    - exportfs: Exit with correct value when an error occurs (bz 1053933)
    - mount.nfs: Removed supported flag from usage string (bz 1000989)
    - gssd: Improve first attempt at acquiring GSS credentials (bz 1053877)
    - rpc.idmapd: Remove no longer supported flags from man page (bz 1003513)
    - rpc.statd: Allow usage messages to be displayed when statd is running. (bz 1037044)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.0
changelog:
  - Updated to latest upstream release: nfs-utils-1-3-0
    - mount.nfs: Fix fallback from tcp to udp (bz 984901)
    - nfsidmap: Keys need to be invalidated instead of revoked (bz 1080505)
  - Removed RDMA_PORT stub from /etc/sysconfig/nfs (bz 1078792)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.1
changelog:
  - Added configurable timeout to rpc.gssd (bz 1009528)
  - Added callback to sm_notify (bz 1108105)
  - mountd: Fixed path in start-statd (bz 1116794)
  - rpc.gssd: Fixed silent error message (bz 1117384)
  - rpc.gssd: add the acceptor name to the info passed in downcall (bz 1088011)
  - nfs-utils.spec: fixed runtime configuration files (bz 1118177)
  - exportfs: fix test of NULL pointer in host_pton() (bz 1083018)
  - gssd: Fixed errno typo in get_servername() (bz 1082480)
  - nfsiostat: documented the output better (bz 1109864)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.2
changelog:
  - Upgrade to latest upstream systemd scripts  (bz 1144440)
  - Taught start-statd to use systemd  (bz 1144440)
  - Repaced rpc.svcgssd with gssproxy (bz 1082746)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.6
changelog:
  - Corrected argument names in the systemd scripts (bz 1170364)
  - Added RELRO check (bz 1092543)
  - Properly parse IPv6 literal strings with null termination (bz 1161490)
  - Added the 'nordirplus' export flag to disable v3 readdirplus (bz 1161458)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.8
changelog:
  - Stop sm-notify from running in HA environments (bz 1182692)
  - Set the GSS_USE_PROXY variable in nfs-utils_env.sh (bz 1183821)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.10
changelog:
  - Updated mountstats to latest upstream version (bz 1215808)
  - Enable all auth flavors on pseudofs exports (bz 1187223)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.11
changelog:
  - Added the rpcuser group before adding the rpcuser uid (bz 1190874)
  - Added back variables to help get through firewalls (bz 1208488)
  - Made the postuns conditional (bz 1200713)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.12
changelog:
  - Fixed nfs-idmap start race (bz 1164064)
  - Updated nfsdcltrack v2 schema (bz 1234598)
  - Added missing arguments in rpc.mountd man page (bz 1003558)
  - Added nfsconfig.conf to nfs.man and mount.nfs.man (bz 1196646)
  - nfs-server now Requires rpcbind.service (bz 1171603)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.18
changelog:
  - Stop gssd from silenty reaps cache (bz 1256469)
  - Remove errant echo call from spec file (bz 1257144)
  - Add more symlinks to make systemd scripts backwards compatible (bz 1159183)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21
changelog:
  - Stop gssd from flooding the KDC with TGT fetches (bz 1264999)
  - Decouple the start/stop of rpcbind with nfs-server and rpc-statd (bz 1266993)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21_2
changelog:
  - exportfs: Restore the EAI_NONAME check in host_pton() (bz 1288435)
  - gssd: Don't assume the machine account will be in uppercase (bz 1288433)


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to NSPR_4_10_2_RTM
  - Avoid unsigned integer wrapping in PL_ArenaAllocate
  - Resolves: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


