# changelog

author: Rafael Aquini <aquini@redhat.com> [2.6.32-412.el6]
changelog:
  - [netdrv] ixgbe: fix broken module parameter IntMode (Andy Gospodarek) [958967]
  - [netdrv] ixgbe: fix broken module parameter FdirMode (Andy Gospodarek) [958967]
  - [fs] fuse: initialize dentry->d_op properly in fuse_direntplus_link() (Brian Foster) [994492]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [987426]
  - [tracing] Replace syscall_meta_data struct array with pointer array (Jiri Olsa) [992987]
  - [tracing] Replace trace_event struct array with pointer array (Jiri Olsa) [992987]
  - [mm] percpu: don't implicitly include slab.h from percpu.h (Baoquan He) [878312]
  - [mm] percpu: fix per_cpu_ptr_to_phys() handling of non-page-aligned addresses (Baoquan He) [878312]
  - [mm] percpu: explain why per_cpu_ptr_to_phys() is more complicated than necessary (Baoquan He) [878312]
  - [mm] percpu: fix chunk range calculation (Baoquan He) [878312]
  - [mm] percpu: should use is_vmalloc_addr() (Baoquan He) [878312]
  - [mm] percpu: fix pcpu_last_unit_cpu (Baoquan He) [878312]
  - [mm] percpu: fix first chunk match in per_cpu_ptr_to_phys() (Baoquan He) [878312]
  - [mm] percpu: fix trivial bugs in pcpu_build_alloc_info() (Baoquan He) [878312]
  - [mm] percpu: move vmalloc based chunk management into percpu-vm.c (Baoquan He) [878312]
  - [mm] percpu: misc preparations for nommu support (Baoquan He) [878312]
  - [mm] percpu: reorganize chunk creation and destruction (Baoquan He) [878312]
  - [mm] percpu: factor out pcpu_addr_in_first/reserved_chunk() and update per_cpu_ptr_to_phys() (Baoquan He) [878312]
  - [mm] percpu: add __percpu sparse annotations to core kernel subsystems (Baoquan He) [878312]
  - [mm] percpu: avoid calling __pcpu_ptr_to_addr() (Baoquan He) [878312]
  - [mm] percpu: refactor the code in pcpu_depopulate_chunk() (Baoquan He) [878312]
  - [mm] percpu: add missing per_cpu_ptr_to_phys() definition for UP (Baoquan He) [878312]
  - [mm] percpu: Fix kdump failure if booted with percpu_alloc=page (Baoquan He) [878312]
  - [mm] Revert: percpu: fix chunk range calculation (Baoquan He) [878312]
  - [mm] Revert: percpu: Fix kdump crash_notes content lost in case i386 debug (Baoquan He) [878312]
  - [md] raid5: fix interaction of 'replace' and 'recovery' (Jes Sorensen) [994382]
  - [md] raid10: remove use-after-free bug (Jes Sorensen) [994382]
  - [md] Remove recent change which allows devices to skip recovery (Jes Sorensen) [994382]
  - [md] raid10: fix two problems with RAID10 resync (Jes Sorensen) [994382]
  - [infiniband] ocrdma: Fix several stack info leaks (Doug Ledford) [827601]
  - [infiniband] ocrdma: Remove unused include (Doug Ledford) [827601]
  - [infiniband] hw: import new ocrdma driver from upstream tree (Doug Ledford) [827601]
  - [infiniband] cma: Export AF_IB statistics (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to specify AF_IB when joining multicast (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to pass AF_IB into resolve (Michal Schmidt) [908111]
  - [infiniband] ucma: Allow user space to bind to AF_IB (Michal Schmidt) [908111]
  - [infiniband] ucma: Name changes to indicate only IP addresses supported (Michal Schmidt) [908111]
  - [infiniband] ucma: Add ability to query GID addresses (Michal Schmidt) [908111]
  - [infiniband] cma: Export cma_get_service_id() (Michal Schmidt) [908111]
  - [infiniband] ucma: Support querying when IB paths are not reversible (Michal Schmidt) [908111]
  - [infiniband] sa: Export function to pack a path record into wire format (Michal Schmidt) [908111]
  - [infiniband] ucma: Support querying for AF_IB addresses (Michal Schmidt) [908111]
  - [infiniband] cma: Only listen on IB devices when using AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Set qkey for AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Expose private data when using AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Merge cma_get/save_net_info (Michal Schmidt) [908111]
  - [infiniband] cma: Remove unused SDP related code (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to cma_get_service_id() (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to rdma_resolve_route() (Michal Schmidt) [908111]
  - [infiniband] cma: Add support for AF_IB to rdma_resolve_addr() (Michal Schmidt) [908111]
  - [infiniband] cma: Verify that source and dest sa_family are the same (Michal Schmidt) [908111]
  - [infiniband] cma: Restrict AF_IB loopback to binding to IB devices only (Michal Schmidt) [908111]
  - [infiniband] cma: Add helper functions to return id address information (Michal Schmidt) [908111]
  - [infiniband] cma: Do not modify sa_family when setting loopback address (Michal Schmidt) [908111]
  - [infiniband] cma: Allow user to specify AF_IB when binding (Michal Schmidt) [908111]
  - [infiniband] cma: Update port reservation to support AF_IB (Michal Schmidt) [908111]
  - [infiniband] cma: Add AF_IB support to ip_addr_size (Michal Schmidt) [908111]
  - [infiniband] cma: Include AF_IB in loopback and any address checks (Michal Schmidt) [908111]
  - [infiniband] cma: Allow enabling reuseaddr in any state (Michal Schmidt) [908111]
  - [infiniband] rdma: Define native IB address (Michal Schmidt) [908111]
  - [netdrv] mlx4: Set link type for RAW PACKET QPs in the QP context (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Disable VLAN stripping for RAW PACKET QPs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fetch XRC SRQ in the CQ polling code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Advertise MW support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Support memory window binding (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Remove redundant NULL check before kfree (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix compiler warning about uninitialized 'vlan' variable (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Convert is_xxx variables in build_mlx_header() to bool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Remove local invalidate segment unused fields (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Adjust duplicate test (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix bug unwinding on error in mlx4_ib_init_sriov() (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix build error on platforms where UL is not 64 bits (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: fix unresolved 64bit math in mellanox/mlx4/en_dcb_nl.c (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Can set maxrate only for TC0 (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Set max rate-limit for a TC (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] dcb: Add an optional max rate attribute (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Disable RFS when running in SRIOV mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Initialize RFS filters lock and list in init_netdev (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Limit the RFS filter IDs to be < RPS_NO_FILTER (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add accelerated RFS support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add rmap support to mlx4_assign_eq (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: fix small memory leak on error (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Dynamic VST to VST vlan/qos changes (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fail device init if num_vfs is negative (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add warning in case of command timeouts (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Replace sscanf() with kstrtoint() (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add prints when TX timeout occurs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix a race between napi poll function and RX ring cleanup (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Change log level from error to debug for vlan related messages (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Move register_netdev() to the end of initialization function (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Do not query stats when device port is down (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix resource leak in error flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: allow order-0 memory allocations in RX path (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: use one page fragment per incoming frame (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx_en: Timestamping is not supported in slave mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Keep VF assigned MAC in the PF admin table (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Handle unassigned VF MAC address correctly (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix adaptive moderation cq update (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Strengthen VLAN tags/priorities enforcement in VST mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add missing report on VST and spoof-checking dev caps (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix a build error on 32bit arches (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add support to get VF config (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add set VF default vlan ID and priority support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add set VF mac address support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add structures to keep VF Ethernet ports information (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Add reference counting to MAC registeration (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Disable HW clock overflow check when no HW support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable HW timestamping for VFs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Expose a few helpers to fill DMFS HW strucutures (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Directly expose fields of DMFS HW rule control segment (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Change a few DMFS fields names to match firmare spec (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Match DMFS promiscuous field names to firmware spec (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Move DMFS HW structs to common header file (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Reduce warning message for SRQ_LIMIT event to debug level (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add a service task (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Support software timestamping (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add HW timestamping support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Read HCA frequency and map internal clock (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add timestamping device capability (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Implement SRQ object lookup from srqn (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: set correct MTU in SRIOV (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Translate guest B0 steering rules to DMFS (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Add helper function to translate B0 steering rules to DMFS (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Advertize DCB_CAP_DCBX_HOST in getdcbx (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Enable DCB ETS ops only when supported by the firmware (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Added proper description for two device capabilities (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix setting initial MAC address (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disallow releasing VF QPs which have steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Always use 64 bit resource ID when doing lookup (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Remove ethtool flow steering rules before releasing QPs (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix wrong order of flow steering resources removal (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix wrong mask applied on EQ numbers in the wrapper (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Cleanup MAC resources on module unload or port stop (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix race when setting the device MAC address (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Fix endianness bug in set_param_l (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Turn off device-managed FS bit in dev-cap wrapper if DMFS is not enabled (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable mlx4_QP_ATTACH calls from guests if the host uses flow steering (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Implement memory windows allocation and deallocation (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Enable memory windows in INIT_HCA and QUERY_HCA (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Disable memory windows for virtual functions (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix allocation of device tx_cq (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Propagate MR deregistration failures to caller (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Rename MPT-related functions to have mpt_ prefix (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add unicast MAC filtering (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Manage hash of MAC addresses per port (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Save previous MAC address of the port so we can replace it later (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Re-arrange ndo_set_rx_mode related code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Move Ethernet related functionality from mlx4_core to mlx4_en (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Cleanup multiline strings (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Optimize Rx fast path filter checks (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Optimize loopback related checks in data path (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Assigning TX irq per ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix compilation error when CONFIG_INET isn't defined (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix error propagation for ethtool helper function (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix transmit timeout when driver restarts port (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Don't reassign port mac address on firmware that supports it (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Use firmware driven flow steering hash mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix ethtool rules leftovers after module unloaded (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Block insertion of ethtool steering rules while the interface is down (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix vlan mask for ethtool steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Validate VLAN IDs provided in ethtool flow steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix ip/udp steering rules multicast mac when attached via ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Set correctly allow_loopback flag (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Directly expose fields of HW flow steering rule control segment (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix a race when closing TX queue (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Return proper error code when __mlx4_add_one fails (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Use the correct netif lock on ndo_set_rx_mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix traffic loss under promiscuous mode (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Issue the dump eth statistics command under lock (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: remove redundant code (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Add support for destination MAC in steering rules (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Use generic etherdevice.h functions (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Set number of rx/tx channels using ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix TX moderation info loss after set_ringparam is called (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Adjusting moderation per each ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Remove remnants of LRO support (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Unmap UAR also in the case of error flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Don't use vlan tag value as an indication for vlan presence (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Perform correct resource cleanup if mlx4_QUERY_ADAPTER() fails (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_core: Remove annoying debug messages from SR-IOV flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: fix skb truesize underestimation (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] etherdevice.h: Add ether_addr_equal_64bits (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] ethtool: Add destination MAC address to flow steering API (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fixing TX queue stop/wake flow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: nullify cq->vector field when closing completion queue (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Checksum counters per ring (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4: Fix vlan table overflow (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Adding 40gb speed report for ethtool (Amir Vadai) [950401 950910 950913 950915]
  - [netdrv] mlx4_en: Fix crash upon device initialization error (Amir Vadai) [950401 950910 950913 950915]
  - [net] introduce IFF_NO_UNICAST_FLT (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ipoib: Add more rtnl_link_ops callbacks (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ipoib: Add rtnl_link_ops support (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] ib_srp: Eliminate state SRP_TARGET_DEAD - minus system_long_wq (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Allow SRP disconnect through sysfs (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Simplify attribute initialization code (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Fix attribute registration (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp_transport: Document sysfs attributes (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: use __scsi_target_unblock (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add Mellanox copyright (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Fix device removal flow (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add support for iser CM REQ additional info (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Return error to upper layers on EAGAIN registration failures (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Move informational messages from error to info level (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add module version (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: add support for TIPC protocol (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix ipoib_hard_header() return value (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix send lockup due to missed TX completion (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: zero last byte for strncpy (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: simplify a warning message (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: limit the size allocated by rds_message_alloc() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Free ipoib neigh on path record failure so path rec queries are retried (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Fail I/O requests if the transport is offline (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Avoid endless SCSI error handling loop (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Avoid sending a task management function needlessly (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Track connection state properly (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Enable iser when FMRs are not supported (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Avoid error prints on EAGAIN registration failures (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Use proper define for the commands per LUN value advertised to SCSI ML (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Don't attempt to release resources on error flow (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Add version and firmware info to ethtool reporting (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix ipoib_neigh hashing to use the correct daddr octets (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Fix crash due to skb double destruct (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] rds: remove depends on CONFIG_EXPERIMENTAL (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] IPoIB: Call skb_dst_drop() once skb is enqueued for sending (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: send disconnect request without waiting for CM timewait exit (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: destroy and recreate QP and CQs when reconnecting (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Introduce the helper function srp_remove_target() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Suppress superfluous error messages (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Process all error completions (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Introduce srp_handle_qp_err() (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Simplify SCSI error handling (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Keep processing commands during host removal (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Eliminate state SRP_TARGET_CONNECTING (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] srp: Increase block layer timeout (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] iser: Add more RX CQs to scale out processing of SCSI responses (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Don't touch cmid after dropping reference (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Verify that QP handler is valid before dispatching events (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] uverbs: Implement memory windows support in uverbs (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Add "type 2" memory windows support (Doug Ledford) [791284 865301 950918 983117]
  - [infiniband] core: Change return value from find_gid_port() (Doug Ledford) [791284 865301 950918 983117]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-413.el6]
changelog:
  - [mm] reinstate mmap -EINVAL return error code when mapping length is zero (Rafael Aquini) [995339]
  - [fs] ext4: introduce reserved space (Lukas Czerner) [916592]
  - [fs] ext4: dont let i_reserved_meta_blocks go negative (Lukas Czerner) [916592]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [867689]
  - [s390] zfcp: block queue limits with data router (Hendrik Brueckner) [952734]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (George Beshers) [876778]
  - [net] bridge: fix a conflict in if_bridge.h with glibc headers (Amerigo Wang) [981325]
  - [usb] fix endpoint-disabling for failed config changes (Don Zickus) [889391]
  - [usb] Free the allocated memory before exiting on error (Don Zickus) [889391]
  - [usb] xhci: fix list access before init (Don Zickus) [889391]
  - [usb] xhci-mem: init list heads at the beginning of init (Don Zickus) [889391]
  - [usb] xhci: override bogus bulk wMaxPacketSize values (Don Zickus) [889391]
  - [usb] enclose USB_XHCI_HCD related symbols within a if USB_XHCI_HCD block (Don Zickus) [889391]
  - [usb] xhci: clarify compliance mode debug messages (Don Zickus) [889391]
  - [usb] xhci: Rename SEGMENT_SIZE and SEGMENT_SHIFT as the former is used in a.out.h (Don Zickus) [889391]
  - [usb] xhci: Use ilog2() rather than __ffs() for calculating SEGMENT_SHIFT (Don Zickus) [889391]
  - [usb] xhci: Don't warn on empty ring for suspended devices (Don Zickus) [889391]
  - [usb] xhci: Fix TRB transfer length macro used for Event TRB (Don Zickus) [889391]
  - [usb] xhci: fix build warning (Don Zickus) [889391]
  - [usb] xhci: fix bit definitions for IMAN register (Don Zickus) [889391]
  - [usb] xhci: correctly enable interrupts (Don Zickus) [889391]
  - [usb] xhci: fix memory leak of URB-private data (Don Zickus) [889391]
  - [usb] xhci: fix incorrect bit test (Don Zickus) [889391]
  - [usb] xhci: Fix TD size for isochronous URBs (Don Zickus) [889391]
  - [usb] xhci: Fix isoc TD encoding (Don Zickus) [889391]
  - [usb] xhci: remove unused trb var in xhci_irq() (Don Zickus) [889391]
  - [usb] xhci: Add Lynx Point LP to list of Intel switchable hosts (Don Zickus) [889391]
  - [usb] xhci: move HC_STATE_SUSPENDED check to xhci_suspend() (Don Zickus) [889391]
  - [usb] xhci: Stricter conditional for Z1 system models for Compliance Mode Patch (Don Zickus) [889391]
  - [usb] xhci: Extend Fresco Logic MSI quirk (Don Zickus) [889391]
  - [usb] xhci: fix null-pointer dereference when destroying half-built segment rings (Don Zickus) [889391]
  - [usb] xhci: Fix TD Size calculation on 1.0 hosts (Don Zickus) [889391]
  - [usb] xhci: Fix conditional check in bandwidth calculation (Don Zickus) [889391]
  - [usb] xhci: Avoid global symbol pollution with handshake (Don Zickus) [889391]
  - [usb] xhci: Remove assigned but unused ep_ctx (Don Zickus) [889391]
  - [usb] xhci: Remove assigned but unused slot_ctx (Don Zickus) [889391]
  - [usb] xhci: Fix missing break in xhci_evaluate_context_result (Don Zickus) [889391]
  - [usb] xhci: Fix potential NULL ptr deref in command cancellation (Don Zickus) [889391]
  - [usb] xhci: Remove __force__ __u16 before assigning DeviceRemovable and assign directly (Don Zickus) [889391]
  - [usb] xhci-ring: removes unnecessary semicolon (Don Zickus) [889391]
  - [usb] xhci: update a comment regarding the BOS descriptor to reflect the code (Don Zickus) [889391]
  - [usb] xhci: sparse fixes (Don Zickus) [889391]
  - [usb] Fail a get config when the port is powered off (Don Zickus) [889391]
  - [usb] xhci: Handle clear PORT_POWER feature (Don Zickus) [889391]
  - [usb] redefine DeviceRemovable and wHubDelay as _le16 (Don Zickus) [889391]
  - [usb] xhci: Avoid "dead ports", add roothub port polling (Don Zickus) [894180]
  - [usb] Handle warm reset failure on empty port (Don Zickus) [894180]
  - [usb] Ignore port state until reset completes (Don Zickus) [894180]
  - [usb] Increase reset timeout (Don Zickus) [894180]
  - [usb] Allow USB 3.0 ports to be disabled (Don Zickus) [894180]
  - [usb] Ignore xHCI Reset Device status (Don Zickus) [894180]
  - [usb] Handle auto-transition from hot to warm reset (Don Zickus) [894180]
  - [usb] xhci: Handle HS bulk/ctrl endpoints that don't NAK (Don Zickus) [894180]
  - [usb] Enable LPM after a failed probe (Don Zickus) [815547]
  - [usb] Don't enable LPM if the exit latency is zero (Don Zickus) [815547]
  - [usb] Send Set SEL before enablng parent U1/U2 timeout (Don Zickus) [815547]
  - [usb] xhci: endianness xhci_calculate_intel_u2_timeout (Don Zickus) [815547]
  - [usb] xhci: fix integer overflow (Don Zickus) [815547]
  - [usb] Fix LPM disable count mismatch on driver unbind (Don Zickus) [815547]
  - [usb] Disable LPM while the device is unconfigured (Don Zickus) [815547]
  - [usb] Fix LPM disable/enable during device reset (Don Zickus) [815547]
  - [usb] xhci: Fix DIV_ROUND_UP compile error (Don Zickus) [815547]
  - [usb] xhci: Fix compile with CONFIG_USB_SUSPEND=n (Don Zickus) [815547]
  - [usb] Fix core compile with CONFIG_USB_SUSPEND=n (Don Zickus) [815547]
  - [usb] Disable hub-initiated LPM for comms devices (Don Zickus) [815547]
  - [usb] xhci: Add Intel U1/U2 timeout policy (Don Zickus) [815547]
  - [usb] xhci: Add infrastructure for host-specific LPM policies (Don Zickus) [815547]
  - [usb] Add macros for interrupt endpoint types (Don Zickus) [815547]
  - [usb] xhci: Reserve one command for USB3 LPM disable (Don Zickus) [815547]
  - [usb] xhci: Some Evaluate Context commands must succeed (Don Zickus) [815547]
  - [usb] Disable USB 3.0 LPM in critical sections (Don Zickus) [815547]
  - [usb] Add support to enable/disable USB3 link states (Don Zickus) [815547]
  - [usb] Allow drivers to disable hub-initiated LPM (Don Zickus) [815547]
  - [usb] Calculate USB 3.0 exit latencies for LPM (Don Zickus) [815547]
  - [usb] Refactor code to set LPM support flag (Don Zickus) [815547]
  - [usb] Make sure to fetch the BOS desc for roothubs (Don Zickus) [815547]
  - [usb] xhci: Add roothub code to set U1/U2 timeouts (Don Zickus) [815547]
  - [scsi] pm8001: Add new driver pmc8001 to RHEL 6.5 (Rich Bono) [922129]
  - [scsi] bnx2fc: introduce missing kfree (Jan Vesely) [916004]
  - [scsi] bnx2fc: Fix common misspellings (Jan Vesely) [916004]
  - [scsi] bnx2fc: Drivers: scsi: remove __dev* attributes (Jan Vesely) [916004]
  - [scsi] bnx2fc: Make the fcoe_cltr the SCSI host parent (Jan Vesely) [916004]
  - [scsi] bnx2fc: Bumped version to 1.0.14 (Jan Vesely) [916004]
  - [scsi] bnx2fc: Update copyright dates (Jan Vesely) [916004]
  - [scsi] bnx2fc: Fix race condition between IO completion and abort (Jan Vesely) [916004]
  - [scsi] bnx2fc: Include chip number in the symbolic name (Jan Vesely) [916004]
  - [scsi] bnx2fc: Enable cached tasks to improve performance (Jan Vesely) [916004]
  - [scsi] bnx2fc: adjust duplicate test (Jan Vesely) [916004]
  - [scsi] bnx2fc: Bumped version to 1.0.13 (Jan Vesely) [916004]
  - [scsi] bnx2fc: Support max IO size to 512KB (Jan Vesely) [916004]
  - [scsi] bnx2fc: Tx/Rx byte counts reset to 0 when exceeding 32 bit values (Jan Vesely) [916004]
  - [scsi] bnx2fc: Map the doorbell register between offload and enable requests (Jan Vesely) [916004]
  - [scsi] bnx2fc: Move offload/upload wait logic into a function (Jan Vesely) [916004]
  - [scsi] bnx2fc: support software fcoe target (Jan Vesely) [916004]
  - [scsi] bnx2fc: remove useless calls to memset() (Jan Vesely) [916004]
  - [scsi] bnx2fc: use fcoe_get_lesb/fcoe_ctlr_get_lesb() directly from libfcoe (Jan Vesely) [916004]
  - [scsi] bnx2fc: use fcoe_link_speed_update() from the exported symbol in libfcoe (Jan Vesely) [916004]
  - [scsi] bnx2fc: add support to get_netdev for bnx2f_interface (Jan Vesely) [916004]
  - [scsi] bnx2fc: Use the fcoe_sysfs control interface (Jan Vesely) [916004]
  - [scsi] libfcoe, fcoe, bnx2fc: Add new fcoe control interface (Jan Vesely) [916004]
  - [scsi] bnx2fc: treewide: fix typo of "suppport" in various comments (Jan Vesely) [916004]
  - [scsi] fix various printk and comment typos (Jan Vesely) [916004]
  - [scsi] fcoe, bnx2fc, libfcoe: SW FCoE and bnx2fc use FCoE Syfs (Jan Vesely) [916004]
  - [scsi] bnx2fc: Allocate fcoe_ctlr with bnx2fc_interface, not as a member (Jan Vesely) [916004]
  - [scsi] bnx2i: Fixed bugs in the handling of unsolicited NOP-Ins (Jan Vesely) [916003]
  - [scsi] bnx2i: Update version and copyright year 2013 (Jan Vesely) [916003]
  - [scsi] bnx2i: Drivers: scsi: remove __dev* attributes (Jan Vesely) [916003]
  - [scsi] bnx2i: Fix typo in printk and comments (Jan Vesely) [916003]
  - [scsi] bnx2i: fix the bit manipulation when setting the error mask (Jan Vesely) [916003]
  - [scsi] bnx2i: removed the individual PCI DEVICE ID checking (Jan Vesely) [916003]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-414.el6]
changelog:
  - [fs] Revert "ext4: dont let i_reserved_meta_blocks go negative" (Rafael Aquini) [916592]
  - [fs] Revert "ext4: introduce reserved space" (Rafael Aquini) [916592]
  - [netdrv] bnx2x: fill in sane dump flag information (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: remove zeroing of dump data buffer (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: fix dump flag handling (Michal Schmidt) [995475 996988]
  - [netdrv] bnx2x: fix crash in bnx2x_set_vlan_stripping() (Michal Schmidt) [995475]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.1p driver release (Rob Evers) [947546]
  - [scsi] lpfc: Merge with "lpfc 8.3.31: Fixed system panic due to midlayer abort and (Rob Evers) [947546]
  - [scsi] lpfc: Removed obsolete fcp_eq_count and fcp_wq_count driver attributes (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Update Copyrights to 2013 for 8.3.38, 8.3.39, and 8.3.40 modifications (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed a race condition between SLI host and port failed FCF rediscovery (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed issue mailbox wait routine failed to issue dump memory mbox command (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed system panic due to unsafe walking and deleting linked list (Rob Evers) [947546]
  - [scsi] lpfc: lpfc 8.3.40: Fixed FCoE connection list vlan identifier and add FCF list debug (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Clarified the behavior of the lpfc_max_luns module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix to allow OCM to report FEC status (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed a missing return code in a logging message (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed some logging message fields (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed list corruption when lpfc_drain_tx runs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix starting reference tag when calculating BG error (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix inconsistent list removal causes crash (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed system panic during handling unsolicited receive buffer error condition (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix BlockGuard error checking (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fixed crash during FCoE failover testing (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.40: Fix lpfc_used_cpu to be more dynamic (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed driver handling of CLEAR_LA with NPIV enabled causing SID=0 frames out (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Reduced tmo value set to FLOGI WQE for quick recovery from FLOGI sequence timeout (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Add log message when completes with clean address bit set to zero (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed driver vector mapping to CPU affinity (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed iocb flags not being reset for scsi commands (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed system panic during EEH recovery due to midlayer acting on outstanding I/O (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed not returning FAILED status when SCSI invoking host reset handler failed (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed bad book keeping in posting els sgls to port (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed BlockGuard to take advantage of rdprotect/wrprotect info when available (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Reduced spinlock contention on SCSI buffer list (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed crash when processing bsg's sg list with high memory pages (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Remove lpfc_fcp_look_ahead module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with SCSI Host reset (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Doorbell formation information logged in dual-chute mode WQ and RQ setup (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with large s/g lists for BlockGuard (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fix driver issues with large lpfc_sg_seg_cnt values (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed pt2pt and loop discovery problems on topology changes (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Remove driver dependency on HZ (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed BlockGuard error reporting (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.39: Fixed VPI allocation issues after firmware dump is performed (Rob Evers) [947546]
  - [scsi] lpfc: fix potential NULL pointer dereference in lpfc_sli4_rq_put() (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed potential mis-interpretation of READ_TOPOLOGY reserved fields (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fix default value for lpfc_enable_rrq (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed circular locking dependency and inconsistent lock state issues (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed PT2PT bring up problem for FC SLI4 (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed OXID reuse issue (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed async FCF modified event to in-use FCF failure to trigger recovery (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed deadlock condition in FCF round robin handling (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed bsg timeout handling issues that would result in crashes ? applied and checked into RHEL6.5 (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed degraded performance after cable pulls (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.38: Fixed NMI watch dog panic's when resetting the hba (Rob Evers) [947546]
  - [scsi] lpfc: treewide: Fix typos in kernel messages (Rob Evers) [947546]
  - [scsi] lpfc: fix lpfc build when wmb() is defined as mb() (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed infinite loop in lpfc_sli4_fcf_rr_next_index_get (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed crash due to SLI Port invalid resource count (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Provide support for FCoE protocol dual-chute (ULP) operation (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed stale ndlp state when the node is marked for deferred removal (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fix potential memory corruption bug (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed no-context ABTS failed with BA_RJT (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Removed use of NOP mailboxes for interrupt verification (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed exhausted retry for plogi to nameserver (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Fixed ELS_REC received on the unsolicited receive queue (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.37: Provide support for change_queue_type (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Correct mask error (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Correct buffer length overrun (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Update DIF support for passthru/strip/insert (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.36: Fix bug with Target Resets and FCP2 devices (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fixed not checking solicition in progress bit when verifying FCF record for use (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fixed PRLI not being retried if a LS_RJT with a reason (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Expand I/O channel support for large systems (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.34: Adjust IO Channels to 1 when INTx (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.35: Fix interrupt delay multipler conversion for eq_create (Rob Evers) [947546]
  - [scsi] lpfc 8.3.34: Correct typecasts for snprintf messages (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.34: Fix number of IO channels to match CPUs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Fixed debugfs queInfo to include queue stats (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add lpfc_fcp_look_ahead module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Make I/O to hw queue distribution algorithm a module parameter (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Change Naming convention for SLI4 Interrupt vector (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Allow per-hba interrupt rate tuning (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Tie parallel I/O queues into separate MSIX vectors (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add Interrupts per second stats via debugfs (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Parallelize SLI-4 Q distribution (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Formally separate lpfc_sli_ring SLI-3 and SLI-4 variantions (Rob Evers) [947546]
  - [scsi] lpfc: 8.3.33: Add debugfs interface to display SLI queue information (Rob Evers) [947546]
  - [scsi] lpfc: treewide: fix comment/printk/variable typos (Rob Evers) [947546]
  - [netdrv] qlcnic: Update version to 5.2.43 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enhance virtual NIC logging (Chad Dupuis) [927395]
  - [netdrv] qlcnic: qlcnic_get_board_name() function cleanup (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Implement GET_LED_STATUS command for 82xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: modify reset recovery path in diag mode (Chad Dupuis) [927395]
  - [netdrv] qlcnic: diagnostics routine changes (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Convert nested if-else to switch-case (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Initialize trans_work and idc_aen_work at VF probe (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Remove qlcnic_config_npars module parameter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update IRQ name for 8200 and 8300 Series adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Disable INT-x interrupt for 83xx on driver unload (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support spoof check config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix LRO bugs while tuning offloads using Q application (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enable LRO if it was disabled by RX checksum (Chad Dupuis) [927395]
  - [netdrv] qlcnic: remove netdev->trans_start updates within the driver (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Return proper error codes from probe failure paths (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix validation of link event command (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix mailbox response handling (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix bug in diagnostics test reset recovery path (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix reset recovery after transmit timeout (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix ethtool supported port status for 83xx (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix missing bracket in module parameter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix ethtool strings (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix setting MAC address (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update version to 5.2.42 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add identifying string for 83xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Rename the IRQ description (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enable Interrupt Coalescing for 83xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add eSwitch statistics support (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Take EPORT out of reset sequence before disabling PAUSE (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Enhance channel configuration logs (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Update version to 5.2.41 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support polling for mailbox events (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix loopback test for SR-IOV PF (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support VLAN id config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support MAC address, Tx rate config (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF reset recovery implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF FLR implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Change 82xx adapter VLAN id endian type (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix typo in logs (Chad Dupuis) [927395]
  - [netdrv] qlcnic: fix TSO race condition (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Stop traffic before performing loopback test (Chad Dupuis) [927395]
  - [netdrv] qlcnic: fix beaconing test for 82xx adapter (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix set_flags handler for ethtool (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Bump up the version to 5.2.40 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix sparse warnings (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix NULL dereference in error path (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Fix potential NULL dereference (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Bump up the version to 5.2.39 (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support atomic commands (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support VF-PF communication channel commands (Chad Dupuis) [927395]
  - [netdrv] qlcnic: VF-PF communication channel implementation (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Use shared interrupt vector for Tx and Rx (Chad Dupuis) [927395]
  - [netdrv] qlcnic: SR-IOV VF probe (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Support SR-IOV enable and disable (Chad Dupuis) [927395]
  - [netdrv] qlcnic: Add QLCNIC_SRIOV to Kconfig (Chad Dupuis) [927395]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-415.el6]
changelog:
  - [drm] upstream sync to 3.9.9 (Rob Clark) [818344 902637 962824]
  - [uapi] install UAPI headers in the correct path (Rob Clark) [962824]
  - [debug] lockdep: provide mutex_lock_nest_lock (Rob Clark) [962824]
  - [pci] backport PCIE_SPEED_* (Rob Clark) [962824]
  - [pci] Add PCIe Link Capability link speed and width names (Rob Clark) [962824]
  - [fs] export get_task_comm() (Rob Clark) [962824]
  - [x86] sgi-xp: handle non-fatal traps - headers (George Beshers) [956876]
  - [x86] sgi-xp: handle non-fatal traps (George Beshers) [956876]
  - [x86] irq: Rename gsi_end gsi_top, and fix off by one errors (Prarit Bhargava) [998602]
  - [x86] ioapic: In mpparse use mp_register_ioapic (Prarit Bhargava) [998602]
  - [x86] ioapic: Teach mp_register_ioapic to compute a global gsi_end (Prarit Bhargava) [998602]
  - [x86] Reinsert "io_apic: initialize nr_ioapic_registers early in mp_register_ioapic()" (Prarit Bhargava) [855057 998602]
  - [virt] Add a check to catch KVM emulation of Hyper-V (Jason Wang) [985747]
  - [virt] kvm: Switch to use hypervisor_cpuid_base() (Jason Wang) [985747]
  - [x86] Introduce hypervisor_cpuid_base() (Jason Wang) [985747]
  - [kernel] kexec: add the values related to buddy system for filtering free pages (Nigel Croxon) [960746]
  - [virt] hv_balloon: Initialize the transaction ID just before sending the packet (Jason Wang) [993473]
  - [virt] hv_balloon: Do not post pressure status if interrupted (Jason Wang) [993473]
  - [virt] hv_balloon: Fix a bug in the hot-add code (Jason Wang) [993473]
  - [kernel] sysctl: range checking in do_proc_dointvec_ms_jiffies_conv (Francesco Fusco) [972430]
  - [net] neigh: prevent overflowing params in /proc/sys/net/ipv4/neigh/ (Francesco Fusco) [972430]
  - [net] neigh: fix some compiler warning in net/core/neighbour.c (Francesco Fusco) [972430]
  - [net] neigh: prohibit negative value for unres_qlen_bytes parameter (Francesco Fusco) [972430]
  - [net] netfilter: don't permit ct creation with random tuple (Thomas Graf) [994393]
  - [net] netfilter: fix BUG_ON while removing nf_conntrack with netns (Thomas Graf) [991246]
  - [net] gro: Fix kcalloc argument order (Amerigo Wang) [995405]
  - [net] gro: fix a race in gro_cell_poll() (Amerigo Wang) [995405]
  - [net] ip_tunnel: fix a pointer cast in ip_tunnel_xmit() (Amerigo Wang) [995405]
  - [virt] xen: avoid allocation causing potential swap activity on the resume path (Radim Krcmar) [996631]
  - [virt] xen: ensure timer tick is resumed even on CPU driving the resume (Radim Krcmar) [996631]
  - [infiniband] ipoib: Fix race in deleting ipoib_neigh entries (Doug Ledford) [987174]
  - [scsi] libiscsi: Added new boot entries in the session sysfs (Chris Leech) [994743]
  - [x86] kvm: use kernel_fpu_begin/end() in kvm_load/put_guest_fpu() (Fam Zheng) [988658]
  - [block] do not pass disk names as format strings (Alexander Gordeev) [971372] {CVE-2013-2851}


author: Rafael Aquini <aquini@redhat.com> [2.6.32-416.el6]
changelog:
  - [fs] gfs2: dont overrun reserved revokes (Benjamin Marzinski) [996637]
  - [s390] qeth: change default standard blkt settings for OSA (Hendrik Brueckner) [997625]
  - [s390] kernel: z90crypt module load crash (Hendrik Brueckner) [997621]
  - [s390] dasd: fix hanging devices after path events (Hendrik Brueckner) [996185]
  - [cpufreq] revert "remove rwsem lock from CPUFREQ_GOV_STOP call -- second call site" (Prarit Bhargava) [869899]
  - [perf] Fix regs retrieval for tracepoints events (Jiri Olsa) [1000706]
  - [tools] perf: Fix period symbol_conf.field_sep display (Jiri Olsa) [985968]
  - [tools] traceevent: Handle dynamic array's element size properly (Jiri Olsa) [664899]
  - [tools] perf: Fix perf build make command and BuildRequires (Jiri Olsa) [968186]
  - [tools] perf: Add support for wildcard in tracepoint system name (Jiri Olsa) [664899]
  - [perf] Add support for PERF_HW_COUNT_REF_CPU_CYCLES (Jiri Olsa) [968806]
  - [perf] events: Add Intel x86 mapping for PERF_COUNT_HW_REF_CPU_CYCLES (Jiri Olsa) [968806]
  - [perf] events: Add PERF_COUNT_HW_REF_CPU_CYCLES generic PMU event (Jiri Olsa) [968806]
  - [perf] events: Enable raw event support for Intel unhalted_reference_cycles event (Jiri Olsa) [968806]
  - [net] phonet: some signedness bugs (Francesco Fusco) [1000271]
  - [net] phonet: put protocols array under RCU (Francesco Fusco) [1000271]
  - [net] openvswitch: Add vxlan tunneling support (Amerigo Wang) [981285]
  - [net] vxlan: Add tx-vlan offload support (Amerigo Wang) [981285]
  - [net] vxlan: Improve vxlan headroom calculation (Amerigo Wang) [981285]
  - [net] vxlan: Factor out vxlan send api (Amerigo Wang) [981285]
  - [net] vxlan: Extend vxlan handlers for openvswitch (Amerigo Wang) [981285]
  - [net] vxlan: Add vxlan recv demux (Amerigo Wang) [981285]
  - [net] vxlan: Restructure vxlan receive (Amerigo Wang) [981285]
  - [net] vxlan: Restructure vxlan socket apis (Amerigo Wang) [981285]
  - [net] openvswitch: Reset tunnel key between input and output (Amerigo Wang) [981285]
  - [net] openvswitch: Use correct type while allocating flex array (Amerigo Wang) [981285]
  - [net] openvswitch: Fix bad merge resolution (Amerigo Wang) [981285]
  - [net] vxlan: fix a soft lockup in vxlan module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix a regression of igmp join (Amerigo Wang) [923915]
  - [net] vxlan: fix rcu related warning (Amerigo Wang) [923915]
  - [net] vxlan: fdb: replace an existing entry (Amerigo Wang) [923915]
  - [kernel] list: introduce list_first_entry_or_null (Amerigo Wang) [923915]
  - [net] vxlan: fix igmp races (Amerigo Wang) [923915]
  - [net] vxlan: unregister on namespace exit (Amerigo Wang) [923915]
  - [net] vxlan: add necessary locking on device removal (Amerigo Wang) [923915]
  - [net] vxlan: Fix kernel crash on rmmod (Amerigo Wang) [923915]
  - [net] vxlan: fix function name spelling (Amerigo Wang) [923915]
  - [net] vxlan: fdb: allow specifying multiple destinations for zero MAC (Amerigo Wang) [923915]
  - [net] rtnetlink: allow using zero MAC address in rtnl_fdb_add, rtnl_fdb_del (Amerigo Wang) [923915]
  - [net] fix address check in rtnl_fdb_del (Amerigo Wang) [923915]
  - [net] vxlan: allow removal of single destination from fdb entry (Amerigo Wang) [923915]
  - [net] vxlan: introduce vxlan_fdb_parse (Amerigo Wang) [923915]
  - [net] vxlan: introduce vxlan_fdb_find_rdst (Amerigo Wang) [923915]
  - [net] vxlan: add implicit fdb entry for default destination (Amerigo Wang) [923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: cosmetic cleanup's (Amerigo Wang) [923915]
  - [net] vxlan: Use initializer for dummy structures (Amerigo Wang) [923915]
  - [net] vxlan: port module param should be ushort (Amerigo Wang) [923915]
  - [net] vxlan: convert remotes list to list_rcu (Amerigo Wang) [923915]
  - [net] vxlan: make vxlan_xmit_one void (Amerigo Wang) [923915]
  - [net] vxlan: move cleanup to uninit (Amerigo Wang) [923915]
  - [net] vxlan: fix race caused by dropping rtnl_unlock (Amerigo Wang) [923915]
  - [net] vxlan: send notification when MAC migrates (Amerigo Wang) [923915]
  - [net] vxlan: move IGMP join/leave to work queue (Amerigo Wang) [923915]
  - [net] vxlan: fix crash from work pending on module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix out of order operation on module removal (Amerigo Wang) [923915]
  - [net] vxlan: fix check for migration of static entry (Amerigo Wang) [923915]
  - [net] vxlan: handle skb_clone failure (Amerigo Wang) [923915]
  - [net] vxlan: only migrate dynamic FDB entries (Amerigo Wang) [923915]
  - [net] vxlan: fix race between flush and incoming learning (Amerigo Wang) [923915]
  - [net] vxlan: defer vxlan init as late as possible (Amerigo Wang) [923915]
  - [net] vxlan: use unsigned int instead of unsigned (Amerigo Wang) [923915]
  - [net] vxlan: remove the unused rcu head from struct vxlan_rdst (Amerigo Wang) [923915]
  - [net] vxlan: Update vxlan fdb 'used' field after each usage (Amerigo Wang) [923915]
  - [net] vxlan: listen on multiple ports (Amerigo Wang) [923915]
  - [net] vxlan: do not set SKB_GSO_UDP (Amerigo Wang) [923915]
  - [net] vxlan: allow choosing destination port per vxlan (Amerigo Wang) [923915]
  - [net] vxlan: compute source port in network byte order (Amerigo Wang) [923915]
  - [net] vxlan: source compatiablity with IFLA_VXLAN_GROUP (Amerigo Wang) [923915]
  - [net] vxlan: fix byte order issues with NDA_PORT (Amerigo Wang) [923915]
  - [net] vxlan: document UDP default port (Amerigo Wang) [923915]
  - [net] vxlan: update mail address and copyright date (Amerigo Wang) [923915]
  - [net] vxlan: Allow L2 redirection with L3 switching (Amerigo Wang) [923915]
  - [net] vxlan: Allow setting destination to unicast address (Amerigo Wang) [923915]
  - [net] vxlan: don't bypass encapsulation for multi- and broadcasts (Amerigo Wang) [923915]
  - [net] vxlan: use htonl when snooping for loopback address (Amerigo Wang) [923915]
  - [net] vxlan: fix some sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: Bypass encapsulation if the destination is local (Amerigo Wang) [923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [923915]
  - [net] vxlan: Use IP Tunnels tunnel ENC encap API (Amerigo Wang) [923915]
  - [net] vxlan: generalize forwarding tables (Amerigo Wang) [923915]
  - [net] vxlan: Add vlan support to static neighbors (Amerigo Wang) [923915]
  - [net] vxlan: allow live mac address change (Amerigo Wang) [923915]
  - [net] vxlan: add DOVE extensions for VXLAN (Amerigo Wang) [923915]
  - [net] vxlan: move SET_ETHTOOL_OPS() to vxlan_newlink() (Amerigo Wang) [923915]
  - [net] vxlan: specify fl4.proto before calling ip_route_output_key() (Amerigo Wang) [923915]
  - [net] vxlan: Depend on CONFIG_INET (Amerigo Wang) [923915]
  - [net] fix invalid usage of netdev->priv_flags (Stanislaw Gruszka) [984373]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-417.el6]
changelog:
  - [target] Set bi_destructor in iblock_get_bio (Andy Grover) [999490]
  - [target] Fix calling bdev_get_queue on a NULL *bio (Andy Grover) [999490]
  - [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999365] {CVE-2013-0343}
  - [net] soreuseport: UDP/IPv6 implementation (Thomas Graf) [991600]
  - [net] soreuseport: TCP/IPv6 implementation (Thomas Graf) [991600]
  - [net] soreuseport: UDP/IPv4 implementation (Thomas Graf) [991600]
  - [net] soreuseport: TCP/IPv4 implementation (Thomas Graf) [991600]
  - [net] soreuseport: infrastructure (Thomas Graf) [991600]
  - [kernel] prevent an older auditd shutdown from orphaning a newer auditd startup (Richard Guy Briggs) [742562]
  - [kernel] audit: add an option to control logging of passwords with pam_tty_audit (Richard Guy Briggs) [725100]
  - [misc] hpilo: Correct panic when an AUX iLO is detected (Nigel Croxon) [996600]
  - [watchdog] hpwdt: Patch to ignore auxilary iLO devices (Nigel Croxon) [996608]
  - [netdrv] igb: fix vlan filtering in promisc mode when not in VT mode (Stefan Assmann) [996277]
  - [char] random: fix priming of last_data (Jarod Wilson) [997985]
  - [char] random: prime last_data value per fips requirements (Jarod Wilson) [997985]
  - [char] random: simplify fips mode (Jarod Wilson) [997985]
  - [fs] nfs: don't extend writes to cover entire page if pagecache is invalid (Jeff Layton) [1002830]
  - [fs] nfs: fix inode reference leak (Steve Dickson) [998694]
  - [fs] nfs: Use session max response size for GETDEVICEINFO gdia_maxcount (Steve Dickson) [922810]
  - [fs] nfs: Simplify the NFSv4 REMOVE, LINK and RENAME compounds (Steve Dickson) [998697]
  - [fs] nfs: Simplify the NFSv4 CREATE compound (Steve Dickson) [998697]
  - [fs] nfs: Simplify the NFSv4 OPEN compound (Steve Dickson) [998697]
  - [fs] nfs: Simplify the cache invalidation code (Steve Dickson) [998697]
  - [fs] nfs: Change attribute updates should set NFS_INO_REVAL_PAGECACHE (Steve Dickson) [998697]
  - [fs] nfs: Simplify nfs_fhget() (Steve Dickson) [998697]
  - [fs] nfs: Always trust the PageUptodate flag when we have a delegation (Steve Dickson) [998697]
  - [fs] nfs: Optimise away nfs_check_inode_attributes() when holding a delegation (Steve Dickson) [998697]
  - [fs] nfs: Dont force page cache revalidations when holding a delegation (Steve Dickson) [998697]
  - [fs] nfs: Retrieve attributes _before_ calling delegreturn (Steve Dickson) [998697]
  - [fs] nfs: Fix a typo in NFS4_enc_link_sz (Steve Dickson) [998697]
  - [scsi] Fix bug on some bnx2x devices that don't support iSCSI (Tomas Henzl) [957217]
  - [scsi] mpt3sas: Added a driver module parameter max_msix_vectors (Tomas Henzl) [997045]
  - [scsi] aacraid: Fix for arrays going offline in the system. System hangs (Rich Bono) [996207]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-418.el6]
changelog:
  - [netdrv] bnx2x: prevent crash in shutdown flow with CNIC (Michal Schmidt) [1003436]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [998752]
  - [wireless] iwl4965: fix rfkill set state regression (Stanislaw Gruszka) [992969]
  - [wireless] rt2800: fix wrong TX power compensation (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: add missing channel context release (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: add a flag to indicate CCK support for HT clients (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: Restore skb headroom when returning skb to mac80211 (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Enable PLL fix only for AR9340/AR9330 (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: disable L1 Active after pci_enable_device (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: dvm: fix calling ieee80211_chswitch_done() with NULL (Stanislaw Gruszka) [992969]
  - [wireless] Hostap: copying wrong data prism2_ioctl_giwaplist() (Stanislaw Gruszka) [992969]
  - [wireless] zd1201: do not use stack as URB transfer_buffer (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: unregister leds when registration failed (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: take the seqno from packet if transmit failed (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: don't set the MCAST queue in STA's queue list (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: properly tell the fw that a STA is awake (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix MCAST in AP mode (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: correctly configure MCAST in AP mode (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: don't wait for TX status forever (Stanislaw Gruszka) [992969]
  - [wireless] nl80211: fix another nl80211_fam.attrbuf race (Stanislaw Gruszka) [992969]
  - [wireless] cfg80211: fix P2P GO interface teardown (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: continue using disabled channels while connected (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix infinite loop in ieee80211_determine_chantype (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: ignore HT primary channel while connected (Stanislaw Gruszka) [992969]
  - [wireless] iwl4965: reset firmware after rfkill off (Stanislaw Gruszka) [992969]
  - [wireless] iwl4965: set power mode early (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: dvm: don't send BT_CONFIG on devices w/o Bluetooth (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: set SSID bits for passive channels (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: fix stop queue (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix monitor interface suspend crash regression (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix ethtool stats for non-station interfaces (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: fix duplicate retransmission detection (Stanislaw Gruszka) [992969]
  - [wireless] mac80211/minstrel_ht: fix cck rate sampling (Stanislaw Gruszka) [992969]
  - [wireless] mac80211/minstrel: fix NULL pointer dereference issue (Stanislaw Gruszka) [992969]
  - [wireless] nl80211: fix mgmt tx status and testmode reporting for netns (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: reboot firmware if it was loaded (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_htc: do some initial hardware configuration (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix flushing not started aggregation sessions (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: add DELL SKU for 5150 HMC (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: refuse connection to APs with BI < 16 (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix bug in scan ssid (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: mvm: fix L2P BA ressources leak (Stanislaw Gruszka) [992969]
  - [wireless] mac80211: close AP_VLAN interfaces before unregistering all (Stanislaw Gruszka) [992969]
  - [wireless] b43: ensue that BCMA is "y" when B43 is "y" (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Do not assign noise for NULL caldata (Stanislaw Gruszka) [992969]
  - [wireless] ath9k: Fix noisefloor calibration (Stanislaw Gruszka) [992969]
  - [wireless] ath9k_hw: Assign default xlna config for AR9485 (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: rt2800lib: fix default TX power check for RT55xx (Stanislaw Gruszka) [992969]
  - [wireless] rt2x00: read 5GHz TX power values from the correct offset (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: wake the queue if stopped when being unmapped (Stanislaw Gruszka) [992969]
  - [wireless] iwlwifi: pcie: fix race in queue unmapping (Stanislaw Gruszka) [992969]
  - [fs] ext4: don't let i_reserved_meta_blocks go negative (Lukas Czerner) [916592]
  - [fs] ext4: introduce reserved space (Lukas Czerner) [916592]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-419.el6]
changelog:
  - [netdrv] bonding: Fix corrupted queue_mapping (Veaceslav Falico) [991799]
  - [fs] xfs: fallback to vmalloc for large buffers in xfs_attrlist_by_handle (Eric Sandeen) [905086]
  - [fs] nfs: set open access operation call flag in nfs4_init_opendata_res (Jeff Layton) [1002855]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1002765]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-420.el6]
changelog:
  - [net] ipv6: Don't depend on per socket memory for neighbour discovery messages (Thomas Graf) [963317]
  - [netdrv] bnx2x: add missing ethtool ops of virtual functions (Michal Schmidt) [1009492]
  - [netdrv] bnx2x: avoid atomic allocations during initialization (Michal Schmidt) [1004645 1007900]
  - [netdrv] bnx2x: Fix VF stats sync (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix VF memory leak unload (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix functionality of configuring vlan list (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Fix move FP memory deallocations (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: vf mark stats started (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: set VF DMAE when first function has 0 supported VFs (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Protect against VFs' ndos when SR-IOV is disabled (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: prevent VF benign attentions (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Consider DCBX remote error (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: Change DCB context handling (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: dropless flow control not always functional (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: fix PTE write access error (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: fix memory leak in VF (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: update fairness parameters following DCB negotiation (Michal Schmidt) [1007900]
  - [netdrv] bnx2x: protect different statistics flows (Michal Schmidt) [1007900]
  - [scsi] lpfc: update version for 8.3.7.21.2p driver release (Rob Evers) [1007485]
  - [scsi] lpfc: 8.3.42: Fixed issue of task management commands having a fixed timeout (Rob Evers) [1007485]
  - [scsi] rdac: Add new IBM product id to the RDAC devlist (Rob Evers) [1006061]
  - [block] hpsa: remove unused Smart Array ID (Tomas Henzl) [1002788]
  - [block] hpsa: bump driver version to reflect changes (Tomas Henzl) [1002788]
  - [block] hpsa: housekeeping patch for device_id and product arrays (Tomas Henzl) [1002788]
  - [block] hpsa: add HP Smart Array Gen8 names (Tomas Henzl) [1002788]
  - [block] hpsa: add HP Smart Array Gen9 PCI ID's (Tomas Henzl) [1002788]
  - [block] hpsa: remove unneeded variable (Tomas Henzl) [893773]
  - [block] hpsa: fix a race in cmd_free/scsi_done (Tomas Henzl) [893773]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k2 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Export more firmware info in sysfs (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Only BIOS boot target entries should be at index 0 and 1 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: discovery_parent_idx can be shown without any check (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Set IPv6 traffic class if device type is IPv6 (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Use discovery_parent_idx instead of discovery_parent_type (Chad Dupuis) [982175]
  - [scsi] qla4xxx: Allow removal of failed session using logout (Chad Dupuis) [982175]
  - [scsi] libiscsi: Add missing prints for session and connection sysfs attrs (Chad Dupuis) [982175]
  - [scsi] megaraid_sas: Add High Availability clustering support using shared Logical Disks (Tomas Henzl) [997004]
  - [scsi] megaraid_sas: Version and Changelog update (Tomas Henzl) [997004]
  - [net] cnic: Use CHIP_NUM macros from bnx2x.h (Tomas Henzl) [1004554]
  - [hid] validate HID report id size (Frantisek Hrbata) [1000453] {CVE-2013-2888}
  - [infiniband] cma: Check for GID on listening device first (Doug Ledford) [920306]
  - [infiniband] cma: use cached gids (Doug Ledford) [920306]
  - [input] wacom: collect device quirks into single function (Aristeu Rozanski) [815589]
  - [input] wacom: add device type to device name string (Aristeu Rozanski) [815589]
  - [input] wacom: request tablet data for Bamboo Pens (Aristeu Rozanski) [815589]
  - [input] wacom: implement missing multitouch wrappers (Aristeu Rozanski) [815589]
  - [input] wacom: fix bug in HID parsing introduced by last patchset (Aristeu Rozanski) [815589]
  - [fs] nfsv4: Clean up delegation recall error handling (Steve Dickson) [1007556]
  - [fs] nfsv4: Clean up nfs4_open_delegation_recall (Steve Dickson) [1007556]
  - [fs] nfsv4: Clean up nfs4_lock_delegation_recall (Steve Dickson) [1007556]
  - [fs] nfs: It is not safe to dereference lsp->ls_state in release_lockowner (Steve Dickson) [962844]
  - [fs] nfs: Ensure that we free the lock stateid on the server (Steve Dickson) [962844]
  - [fs] nfs: Don't free the nfs4_lock_state until after the release_lockowner (Steve Dickson) [962844]
  - [fs] nfs: Convert nfs41_free_stateid to use an asynchronous RPC call (Steve Dickson) [962844]
  - [fs] nfs: Clean up TEST_STATEID and FREE_STATEID error reporting (Steve Dickson) [962844]
  - [fs] nfs: Clean up handling of privileged operations (Steve Dickson) [962844]
  - [fs] nfs: Clean up nfs41_setup_sequence (Steve Dickson) [962844]
  - [fs] nfs: Pass a stateid to test_stateid() and free_stateid() (Steve Dickson) [962844]
  - [fs] nfs: added FREE_STATEID call (Steve Dickson) [962844]
  - [virt] xen: mask cpu feature avx (Andrew Jones) [1006549]
  - [fs] nfsv4: Fix up nfs4_proc_lookup_mountpoint (Jeff Layton) [997133]
  - [block] rsxx: Moving pci_map_page to prevent overflow (Steve Best) [1001555]
  - [block] rsxx: Handling failed pci_map_page on PowerPC and double free (Steve Best) [1001545]
  - [kernel] sched/rt: Add a tuning knob to allow changing SCHED_RR timeslice (Herbert Xu) [919238]
  - [kernel] sched: Make initial SCHED_RR timeslace DEF_TIMESLICE (Herbert Xu) [919238]
  - [block] nvme: nvme_submit_bio_queue fixup check for DISCARD (David Milburn) [1006051]
  - [block] nvme: Update nvme_id_power_state with latest spec (David Milburn) [1006051]
  - [block] nvme: Split header file into user-visible and kernel-visible pieces (David Milburn) [1006051]
  - [block] nvme: Merge issue on character device bring-up (David Milburn) [1006051]
  - [block] nvme: Handle ioremap failure (David Milburn) [1006051]
  - [block] nvme: Add pci suspend/resume driver callbacks (David Milburn) [1006051]
  - [block] nvme: Use normal shutdown (David Milburn) [1006051]
  - [block] nvme: Separate controller init from disk discovery (David Milburn) [1006051]
  - [block] nvme: Separate queue alloc/free from create/delete (David Milburn) [1006051]
  - [block] nvme: Group pci related actions in functions (David Milburn) [1006051]
  - [block] nvme: Disk stats for read/write commands only (David Milburn) [1006051]
  - [block] nvme: Bring up cdev on set feature failure (David Milburn) [1006051]
  - [block] nvme: Fix checkpatch issues (David Milburn) [1006051]
  - [block] nvme: Namespace IDs are unsigned (David Milburn) [1006051]
  - [block] nvme: Call nvme_process_cq from submission path (David Milburn) [1006051]
  - [block] nvme: Remove "process_cq did something" message (David Milburn) [1006051]
  - [block] nvme: Return correct value from interrupt handler (David Milburn) [1006051]
  - [block] nvme: Disk IO statistics (David Milburn) [1006051]
  - [block] nvme: Restructure MSI / MSI-X setup (David Milburn) [1006051]
  - [block] nvme: Use kzalloc instead of kmalloc+memset (David Milburn) [1006051]
  - [netdrv] e1000e: Add code to check for failure of pci_disable_link_state call (John Green) [1000548]
  - [tools] perf: Fix missing tool parameter (Jiri Olsa) [984785]
  - [tools] perf: Remove builtin-inject unused parameter (Jiri Olsa) [984785]
  - [mm] pagewalk: walk_page_range should avoid VM_PFNMAP areas (Larry Woodman) [990753]
  - [mm] pagemap: set pagemap walk limit to PMD boundary (Motohiro Kosaki) [991260]
  - [mm] task_mmu: fix buffer overflow in add_page_map() (Motohiro Kosaki) [991260]
  - [mm] proc: copy_to_user() returns unsigned (Motohiro Kosaki) [991260]
  - [mm] pagemap: Hold mmap_sem during page walk (Motohiro Kosaki) [991260]
  - [netdrv] ixgbe: fix lockdep annotation issue for ptp's work item (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: add support for quad-port x520 adapter (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: clear semaphore bits on timeouts (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix semaphore lock for I2C read/writes on 82598 (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: add new media type (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: bump version number (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix SFF data dumps of SFP+ modules (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Fix Tx Hang issue with lldpad on 82598EB (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: fix fc autoneg ethtool reporting (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Retain VLAN filtering in promiscuous + VT mode (Andy Gospodarek) [986967]
  - [netdrv] ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (Andy Gospodarek) [986967]
  - [lib] dma-debug: Fix comparison using wrong pointer variable in dma debug code (Stefan Assmann) [1002992]
  - [lib] dma-debug: hash_bucket_find needs to allow for offsets within an entry (Stefan Assmann) [1002992]
  - [mm] x86-64: fall back to regular page vmemmap on allocation failure (Johannes Weiner) [854363]
  - [mm] x86-64: use vmemmap_populate_basepages() for !pse setups (Johannes Weiner) [854363]
  - [mm] x86-64: remove dead debugging code for !pse setups (Johannes Weiner) [854363]
  - [mm] sparse-vmemmap: specify vmemmap population range in bytes (Johannes Weiner) [854363]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-421.el6]
changelog:
  - [scsi] bnx2fc: Bump version from 1.0.14 to 2.4.1 (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: hung task timeout warning observed when rmmod bnx2x with active FCoE targets (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: Fixed a SCSI CMD cmpl race condition between ABTS and CLEANUP (Tomas Henzl) [1008733]
  - [scsi] cnic: Fix crash in, cnic_bnx2x_service_kcq() (Tomas Henzl) [1004554]
  - [hid] zeroplus: validate output report details (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [hid] provide a helper for validating hid reports (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [netdrv] sfc: Add SIOCEFX:EFX_MCDI_REQUEST ioctl to workaround MTD limits (Nikolay Aleksandrov) [1008705]
  - [netdrv] sfc: deny changing of unsupported flags (Nikolay Aleksandrov) [1010840]
  - [kernel] __ptrace_may_access() should not deny sub-threads (Oleg Nesterov) [927360]
  - [tools] perf: Make kmem work for non numa machines (Jiri Olsa) [984788]
  - [powerpc] Bring all threads online prior to migration/hibernation (Steve Best) [1010528]
  - [kvm] introduce guest count uevent (Paolo Bonzini) [1004802]
  - [scsi] iscsi_tcp: consider session state in iscsi_sw_sk_state_check (Chris Leech) [840638]
  - [crypto] ansi_cprng: Fix off by one error in non-block size request (Neil Horman) [1007694] {CVE-2013-4345}
  - [infiniband] cache: don't fill the cache with junk (Doug Ledford) [920306]
  - [usb] core: don't try to reset_device() a port that got just disconnected (Don Zickus) [1000944]
  - [usb] Fix connected device switch to Inactive state (Don Zickus) [1000944]
  - [usb] Don't use EHCI port sempahore for USB 3.0 hubs (Don Zickus) [1000944]
  - [netdrv] macvtap: Ignore tap features when VNET_HDR is off (Vlad Yasevich) [987201]
  - [netdrv] macvtap: Correctly set tap features when IFF_VNET_HDR is disabled (Vlad Yasevich) [987201]
  - [netdrv] macvtap: simplify usage of tap_features (Vlad Yasevich) [987201]
  - [infiniband] mlx4: Use default pkey when creating tunnel QPs (Doug Ledford) [993587]
  - [infiniband] core: Create QP1 using the pkey index which contains the default pkey (Doug Ledford) [993587]
  - [infiniband] ipoib: Make sure child devices use valid/proper pkeys (Doug Ledford) [993587]
  - [infiniband] ipoib: Fix pkey change flow for virtualization environments (Doug Ledford) [993587]
  - [netdrv] igb: don't deprecate the max_vfs parameter (Stefan Assmann) [1005877]
  - [netdrv] igb: Read flow control for i350 from correct EEPROM section (Stefan Assmann) [1005877]
  - [netdrv] igb: Add additional get_phy_id call for i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Update version number (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation to report advertised/supported link on i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Get speed and duplex for 1G non_copper devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Support to get 2_5G link status for appropriate media type (Stefan Assmann) [1005877]
  - [netdrv] igb: No PHPM support in i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: M88E1543 PHY downshift implementation (Stefan Assmann) [1005877]
  - [netdrv] igb: New PHY_ID for i354 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation of 1-sec delay for i210 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Don't look for a PBA in the iNVM when flashless (Stefan Assmann) [1005877]
  - [netdrv] igb: Expose RSS indirection table for ethtool (Stefan Assmann) [1005877]
  - [netdrv] igb: Add macro for size of RETA indirection table (Stefan Assmann) [1005877]
  - [netdrv] igb: Fix get_fw_version function for all parts (Stefan Assmann) [1005877]
  - [netdrv] igb: Add device support for flashless SKU of i210 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor NVM read functions to accommodate devices with no flash (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor of init_nvm_params (Stefan Assmann) [1005877]
  - [netdrv] igb: Update MTU so that it is always at least a standard frame size (Stefan Assmann) [1005877]
  - [netdrv] igb: don't allow SR-IOV without MSI-X (Stefan Assmann) [1005877]
  - [netdrv] igb: Added rcu_lock to avoid race (Stefan Assmann) [1005877]
  - [netdrv] igb: Read register for latch_on without return value (Stefan Assmann) [1005877]
  - [netdrv] igb: Reset the link when EEE setting changed (Stefan Assmann) [1005877]
  - [netdrv] treewide: relase -> release (Stefan Assmann) [1005877]
  - [scsi] iterate over devices individually for /proc/scsi/scsi (David Milburn) [966170]
  - [scsi] zfcp: fix lock imbalance by reworking request queue locking (Mikulas Patocka) [803592]
  - [kernel] pidns: fix two invalid task_active_pid_ns() usages (Aristeu Rozanski) [984597]
  - [netdrv] be2net: implement ethtool set/get_channel hooks (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_setup() to consolidate queue creation routines (Ivan Vecera) [975885]
  - [netdrv] be2net: Fix be_cmd_if_create() to use MBOX if MCCQ is not created (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_get_resources() code (Ivan Vecera) [975885]
  - [netdrv] be2net: don't limit max MAC and VLAN counts (Ivan Vecera) [975885]
  - [netdrv] be2net: Fixup profile management routines (Ivan Vecera) [975885]
  - [netdrv] be2net: use EQ_CREATEv2 for SH-R (Ivan Vecera) [975885]
  - [netdrv] be2net: delete primary MAC address while unloading (Ivan Vecera) [874733]
  - [netdrv] be2net: use SET/GET_MAC_LIST for SH-R (Ivan Vecera) [874733]
  - [netdrv] be2net: refactor MAC-addr setup code (Ivan Vecera) [874733]
  - [netdrv] be2net: fix pmac_id for BE3 VFs (Ivan Vecera) [874733]
  - [netdrv] be2net: allow VFs to program MAC and VLAN filters (Ivan Vecera) [874733]
  - [netdrv] be2net: fix MAC address modification for VF (Ivan Vecera) [874733]
  - [netdrv] be2net: don't use dev_err when AER enabling fails (Ivan Vecera) [986513]
  - [netdrv] be2net: Clear any capability flags that driver is not interested in (Ivan Vecera) [998856]
  - [net] ethtool: fix RHEL backport of ETHTOOL_RESET (Jiri Benc) [1008678]
  - [net] gact: Fix potential panic in tcf_gact() (Jiri Benc) [1003781]
  - [net] tcp: fix FIONREAD/SIOCINQ (Francesco Fusco) [1001479]
  - [net] vxlan: Avoid creating fdb entry with NULL destination (Amerigo Wang) [923915]
  - [net] bridge: sync the definition of struct br_mdb_entry with upstream (Amerigo Wang) [1010251]
  - [fs] proc/ns: Fix ABI of proc_inode (Thomas Graf) [1005224]
  - [fs] nfs: Fix writeback performance issue on cache invalidation (Scott Mayhew) [1010038]
  - [fs] xfs: switch stacks for bmap btree modifications (Dave Chinner) [918359]
  - [fs] GFS2: Dont flag consistency error if first mounter is a spectator (Robert S Peterson) [997929]
  - [x86] Mark Intel Haswell-EP as supported (Prarit Bhargava) [948339]
  - [s390] tx: allow program interruption filtering in user space (Hendrik Brueckner) [1006523]
  - [tty] hvc_iucv: Disconnect IUCV connection when lowering DTR (Hendrik Brueckner) [1007570]
  - [tty] hvc_console: Add DTR/RTS callback to handle HUPCL control (Hendrik Brueckner) [1007570]
  - [netdrv] bonding: fix bond_arp_rcv setting and arp validate desync state (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix store_arp_validate race with mode change (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix set mode race conditions (Nikolay Aleksandrov) [1003697]
  - [bluetooth] rfcomm: Fix info leak in RFCOMMGETDEVLIST ioctl() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [bluetooth] rfcomm: Fix info leak via getsockname() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [mm] mlock: operate on any regions with protection != PROT_NONE (Larry Woodman) [982460]
  - [mm] mlock: avoid dirtying pages and triggering writeback (Larry Woodman) [982460]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Tim Powers <timp@redhat.com>
changelog:
  - patched to build with gcc-2.96
  - use gcc instead of c++ for CXX, otherwise you expose an ICE in gcc when
    using g++ on two files, one being a C++ source, and the other a C source.
    Using gcc does the correct thing.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - explicitly list the modules which are built when the package compiles, so
    that module build failures (for whatever reason) get caught


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.9-1
changelog:
  - include patch based on patch from Ulf Härnhammar to fix unsafe use of
    sscanf when reading http directory listings (CAN-2003-0963)
  - include patch based on patch from Ulf Härnhammar to fix compile warnings
    modified based on input from Solar Designer


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-1
changelog:
  - update to 2.6.10, which folds in the previous patches
  - configure with --with-debug so that we get useful debug info


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-3
changelog:
  - add patch to avoid DoS when connecting to HTTP servers (or "HTTP" "servers")
    which don't provide status headers, or provide empty lines instead of status
    headers


author: Jason Vas Dias <jvdias@redhat.com> - 3.3.2-1
changelog:
  - *** PLEASE COULD ANYONE MODIFYING lftp TEST IT BEFORE SUBMITTING! ***
    (and preferably contact the lftp package maintainer (me) first - thank you!)
    bug 171096 : 'mget files in lftp causes abort' (core dump actually)
    resulted from not doing so .
    See http://lftp.yar.ru :
  	Recent events:2005-10-17: 
  	lftp-3.3.2 released. Fixed a coredump caused by double-free.


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-1
changelog:
  - Upgrade to version 3.3.5
  - fix bug bz172376 : host lookups should use any address found after timeout


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-4
changelog:
  - fix bug 176315: openssl libraries not being picked up - gnutls was instead
  - improvements to bug 172376 fix


author: Maros Barabas <mbarabas@redhat.com> - 3.5.10-3
changelog:
  - Correct mistake removing devel package & calling chkconfig
  - Resolves #235436
  - Removing automake autoconf
  - Resolves #225984


author: Martin Nagy <mnagy@redhat.com> - 3.6.1-1
changelog:
  - upgrade to upstream version 3.6.1
  - remove rpath and make some spec file changes for review (#225984)
  - remove old patches
  - fix core dumping when html tag has its argument empty
  - use own libtool


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> 0:0.2.5-0.fdr.1
changelog:
  - updated to 0.2.5
  - changed license to LGPL
  - rearranged %check to reflect execution order
  - minor cosmetical changes


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.3-1
changelog:
  - updated to 1.3 (#426488, #431334)
  - use wrapper around libtasn1-config which should make it multilib
    safe (#342411); this implies an untagged 'Requires: pkgconfig' for
    -devel now
  - conditionalized BR of valgrind (#401041)


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-0.pre20100121
changelog:
  - Push a prerelease version of 0.7.6 for testing in Beta1
  - Allow specifying -cpu model/flags for qemu
  - Resolves: rhbz#515213
  - Add async qemu machine protocol to libvirt based on JSON QEmu API
  - Resolves: rhbz#518701
  - Allow for static PCI address assignment to all devices
  - Resolves: rhbz#481924
  - expose qemu's -fda fat:floppy feature (525074)
  - configuration of virtual CPU topology (sockets, threads, cores) (538015)
  - rewrite file chown'ing code to use security driver framework (547545 )
  - cannot create a headless KVM virtual machine (548127)
  - Improve virsh schedular parameters documentation (548485)
  - Fail to delete a inactive pool using command "virsh pool-delete" (530985)
  - virsh man page updation for using container (lxc:///) (528709)
  - Command 'virsh vcpuinfo' returns libvirt error in RHEL6 with KVM (522829)
  - Expose information about host CPU flags in capabilities (518062)


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements
  - Resolves: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-2
changelog:
  - enable JSON interface, desactivated by default in 0.7.6
  - Resolves: rhbz#563189
  - make sure cgroups are installed and that cgconfig service is on
  - Resolves: rhbz#531263


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.6-3
changelog:
  - Fix balloon units handling in JSON mode (rhbz #566261)
  - Invoke qmp_capabilities at monitor startup (rhbz #563189)


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support (rhbz#553348)
  - async job handling (rhbz #515278)
  - virtio channel (rhbz#515281)
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - Improve libvirt error reporting for failed migrations (rhbz#528793)
  - qemu driver support CPU hotplug (rhbz#533138)
  - wrong (octal) device number for attaching USB devices (rhbz#549840)
  - cannot save domain into root_squashing nfs export (rhbz#558763)
  - assorted bug fixes and lots of cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100312
changelog:
  - preview for 0.7.8 rebase
  - Extra non upstream basic patch for spice and XQL
  - Resolves: rhbz#515264
  - Resolves: rhbz#515265
  - connected virsh dies with a SIGPIPE after libvirtd restart
  - Resolves: rhbz#526656
  - error when running logrotate on s/390x arch
  - Resolves: rhbz#547514


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100322
changelog:
  - preview #2 for 0.7.8 rebase
  - migration max downtime API
  - Resolves: rhbz#561935
  - allow suspend during migration
  - Resolves: rhbz#561934
  - support vhost net mode at qemu startup for net devices
  - Resolves: rhbz#540391
  - read-only device access support for qemu
  - Resolves: rhbz#556769
  - LSB compliance of libvirtd init script
  - Resolves: rhbz#538701
  - No domain vcpu information output when using JSON monitor
  - Resolves: rhbz#572051
  - "qemudDomainSetMaxMemory" does not work and should be removed
  - Resolves: rhbz#572146
  - after setvcpus, any virsh command will be hung
  - Resolves: rhbz#572193
  - virsh interactive terminal crash or hung
  - Resolves: rhbz#572376
  - virsh hangs after core dump
  - Resolves: rhbz#572544
  - Fix very slow file allocation on ext3


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100330
changelog:
  - preview #3 for 0.7.8 rebase
  - kvm hpet support
  - Resolves: rhbz#576973
  - hook scripts support
  - Resolves: rhbz#569965
  - Need to add time keeping abstraction
  - Resolves: rhbz#557285
  - notification of guest reboot
  - Resolves: rhbz#527572
  - Ability to preserve RTC clock adjustments across guest reboots
  - Resolves: rhbz#515273
  - Notifications of guest stopping due to disk I/O errors
  - Resolves: rhbz#515270
  - VNC ticketing support (524623) spice still needed
  - VNC client disconnect/connect events (515268) spice still needed


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-0.pre20100407
changelog:
  - preview #4 for 0.8.0 rebase
  - snapshot API
  - domain with disk on root-squashing nfs and security driver mismatch
  - Resolves: rhbz#578630
  - Fail to read xml when restore domain
  - Resolves: rhbz#577719
  - loop "virsh cd" in virsh interactive terminal generate unknown error
  - Resolves: rhbz#572380
  - support setting qemu's -drive werror=stop/enospc with configuration
  - Resolves: rhbz#526231


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - official 0.8.0 upstream release
  - Resolves: rhbz#558761
  - new patch set of patches for RHEL-6 SPICE and addons
  - Enable QMP/ JSON mode in the QEMU monitor
  - Resolves: rhbz#563189
  - Support configuration of SPICE as a graphics protocol
  - Resolves: rhbz#515265
  - vnc (and spice) ticketing
  - Resolves: rhbz#524623
  - enable spice tls encryption in domainXML, and which channels are encrypted
  - Resolves: rhbz#573382
  - notification of VNC/SPICE client disconnect/connect events
  - Resolves: rhbz#515268


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.0-2
changelog:
  - Refresh SPICE patches to fix test failures
  - Related: rhbz#515265, rhbz#524623, rhbz#573382
  - Enable test suite during build, disabling tests that don't work in mock
  - Related: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-3
changelog:
  - Build ESX support in
  - Resolves: rhbz#581966
  - a batch of network filter fixes, IBM request and upstream fixes
  - Resolves: rhbz#579993
  - couple of patchs to fix device handling with QMP
  - Related: rhbz#563189
  - fix python binding for snapshotting
  - spec file fixes for nwfiler build and RHEL-5 virt-v2v specific rebuild


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-4
changelog:
  - Fix libvirtd startup when avahi failed to look up local host name
  - CPU selection fixes
  - Resolves: rhbz#581627
  - fix migration poll value
  - Resolves: rhbz#584928
  - crash dump job caused libvirt hang
  - Resolves: rhbz#580853
  - Fix initial VCPU pinning in qemu driver
  - Resolves: rhbz#578434
  - fix cpu hotplug command names


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-2
changelog:
  - Don't wipe generated iface target in active domains (588046)
  - Fix LXC domain lookup and error handling (586361)
  - Fix a protocol breakage introduced in libvirt-0.8.0
  - Add support for nic hotplug in QEMU/KVM (589978)
  - Seemless migration of spice graphics clients (589989)
  - fix build with ESX support
  - Resolves: rhbz#581966
  - fix multilib problem (587231)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-3
changelog:
  - missing python bindings due to older XML api
  - Resolves: rhbz#589453
  - Fix two possible crashes in JSON event dispatch
  - Resolves: rhbz#586353
  - Fix handling of disk backing stores with cgroups
  - Resolves: rhbz#581476
  - virsh schedinfo --set error handling on unknow parameters
  - Resolves: rhbz#586632
  - Apply extra patches for nwfilter
  - Resolves: rhbz#588554
  - Fix hang during concurrent guest migrations
  - Resolves: rhbz#582278


author: Dave Allan <dallan@redhat.com> - 0.8.1-5
changelog:
  - Don't reset user/group/security label for any files on shared filesystems
  - Resolves: rhbz#578889
  - Make saved state labelling ignore the dynamic_ownership parameter
  - Resolves: rhbz#588562
  - Fix & protect against NULL pointer dereference in monitor code
  - Resolves: rhbz#591076
  - Fix virFileResolveLink return value
  - Resolves: rhbz#591363
  - Add support for SSE4.1 and SSE4.2 CPU features
  - Resolves: rhbz#592977


author: Dave Allan <dallan@redhat.com> - 0.8.1-6
changelog:
  - Support seamless migration of SPICE graphics clients (refresh)
  - Resolves: rhbz#591551
  - Fix swapping of PCI vendor & product names in udev backend
  - Resolves: rhbz#578419
  - Fix cgroup setup code to cope with root squashing NFS
  - Resolves: rhbz#593193
  - Fix startup error reporting race
  - Resolves: rhbz#591272


author: Dave Allan <dallan@redhat.com> - 0.8.1-7
changelog:
  - Fix sign extension error in libvirt's parsing of qemu options
  - Resolves: rhbz#592070
  - Graceful shutdown/suspend of libvirt guests on host shutdown
  - Resolves: rhbz#566647
  - Fix pci device hotplug
  - Resolves: rhbz#572867
  - Support 802.1Qbg and bh
  - Resolves: rhbz#532760, rhbz#570949, rhbz#590110, rhbz#570923


author: Dave Allan <dallan@redhat.com> - 0.8.1-8
changelog:
  - Ensure virtio serial has stable addressing
  - Resolves: rhbz#586665
  - SELinux socket labelling on QEMU monitor socket for MLS
  - Resolves: rhbz#593739
  - Fix enumeration of partitions in disks with a trailing digit in path
  - Resolves: rhbz#593785
  - Enable probing of VPC disk format type
  - Resolves: rhbz#597981
  - Delete UNIX domain sockets upon daemon shutdown
  - Resolves: rhbz#598163
  - Fix Migration failure 'canonical hostname pointed to localhost'
  - Resolves: rhbz#589864
  - Fix up the python bindings for snapshotting
  - Resolves: rhbz#591839
  - Sanitize pool target paths
  - Resolves: rhbz#593565
  - Prevent host network conflicts
  - Resolves: rhbz#594494
  - Support 802.1Qbg and bh (vnlink/VEPA) (refresh)
  - Resolves: rhbz#590110


author: Dave Allan <dallan@redhat.com> - 0.8.1-9
changelog:
  - Touch libvirt-guests lockfile
  - Resolves: rhbz#566647
  - Add qemu.conf option for clearing capabilities
  - Resolves: rhbz#593903
  - Add support for launching guest in paused state
  - Resolves: rhbz#589465
  - Add virsh vol-pool command
  - Resolves: rhbz#602217
  - Add vol commands to virsh man page
  - Resolves: rhbz#600640
  - Remove bogus migrate error messages
  - Resolves: rhbz#601575


author: Dave Allan <dallan@redhat.com> - 0.8.1-10
changelog:
  - Add multiIQN XML output
  - Resolves: rhbz#587700
  - Fix udev node device parent-child device relationships
  - Resolves: rhbz#593995
  - Fix leaks in udev device add/remove
  - Resolves: rhbz#595490
  - Fix device destroy return value
  - Resolves: rhbz#597998
  - Update nodedev scsi_host data before use
  - Resolves: rhbz#600048
  - Display wireless devices in nodedev list
  - Resolves: rhbz#604811
  - Show pool and domain persistence
  - Resolves: rhbz#603696
  - Fix cleanup after failing to hotplug a PCI device
  - Resolves: rhbz#605168
  - Add '-nodefconfig' command line arg to QEMU
  - Resolves: rhbz#602778
  - Switch to private redhat namespace for QMP I/O error reason
  - Resolves: rhbz#586353
  - Improve error messages for missing drivers & unsupported functions
  - Resolves: rhbz#595609
  - macvtap: get interface index if not provided
  - Resolves: rhbz#605187
  - Fix leaks in remote code
  - Resolves: rhbz#603442
  - Add an optional switch --uuid to the virsh vol-pool command
  - Resolves: rhbz#604929
  - Change per-connection hashes to be indexed by UUIDs
  - Resolves: rhbz#603494
  - Run virsh from libvirt-guests script with /dev/null on stdin
  - Resolves: rhbz#606314
  - Increase dd block size to speed up domain save
  - Resolves: rhbz#601775
  - Fix reference counting bugs on qemu monitor
  - Resolves: rhbz#602660
  - Add missing action parameter in IO error callback
  - Resolves: rhbz#607157


author: Dave Allan <dallan@redhat.com> - 0.8.1-11
changelog:
  - Do not block during incoming migration
  - Resolves: rhbz#579440
  - Label serial devices
  - Resolves: rhbz#585249
  - parthelper: fix compilation without optimization
  - Related: rhbz#593785
  - Fix name/UUID uniqueness checking in storage/network
  - Resolves: rhbz#593951
  - Don't squash file permissions when migration fails
  - Resolves: rhbz#607922
  - Properly handle 'usbX' sysfs files
  - Resolves: rhbz#603867
  - add pool support to vol-key command & improve vol commands help
  - Resolves: rhbz#598365
  - document attach-disk better
  - Resolves: rhbz#601143
  - Config iptables to allow tftp port if network <tftp> element exists
  - Resolves: rhbz#607294
  - Fix failure to generate python bindings when libvirt.h.in is updated
  - Related: rhbz#589465
  - Allow all interface names
  - Resolves: rhbz#593907
  - Fix nodedevice refcounting
  - Resolves: rhbz#608753
  - Move nwfilter functions inside extern C and fix a locking bug
  - Resolves: rhbz#597391
  - Fix failure to restore qemu domains with selinux enforcing
  - Resolves: rhbz#590975
  - Check for presence of qemu -nodefconfig option before using it
  - Resolves: rhbz#608859


author: Dave Allan <dallan@redhat.com> - 0.8.1-12
changelog:
  - Don't invoke destroy callback from qemuMonitorOpen() failure paths
  - Resolves: rhbz#609060
  - virFileResolveLink: guarantee an absolute path
  - Resolves: rhbz#608092
  - SPICE patches have translatable strings without format args
  - Resolves: rhbz#608917
  - No way to pass disk format type to pool-define-as nor pool-create-as
  - Resolves: rhbz#597790
  - Fix enforcement of direction of traffic for rules describing incoming traffic
  - Resolves: rhbz#606889
  - Clarify virsh help pool-create-as text
  - Resolves: rhbz#609044


author: Dave Allan <dallan@redhat.com> - 0.8.1-14
changelog:
  - Support virtio disk hotplug in JSON mode
  - Resolves: rhbz#573946
  - Fix QEMU monitor JSON crash
  - Resolves: rhbz#604585
  - CVE-2010-2237 CVE-2010-2238 CVE-2010-2239
  - Resolves: rhbz#607817
  - CVE-2010-2242 Apply a source port mapping to virtual network masquerading
  - Resolves: rhbz#608049
  - Fix hang if QEMU exits (almost) immediately
  - Resolves: rhbz#610056
  - Support new CPU models provided by qemu-kvm
  - Resolves: rhbz#605830
  - Fix comparison of two host CPUs
  - Resolves: rhbz#611401
  - Don't mess with the CPU returned by arch driver
  - Resolves: rhbz#613014
  - Fail when CPU type cannot be detected from XML
  - Resolves: rhbz#613760
  - Use -nodefconfig when probing for CPU models
  - Resolves: rhbz#613764
  - cpuCompare: Fix crash on unexpected CPU XML
  - Resolves: rhbz#613765
  - Properly report failure to create raw storage volume files
  - Related: rhbz#547543
  - Fix IOErrorReasonCallback python bindings
  - Related: rhbz#586353
  - Parthelper: canonicalize block device paths
  - Related: rhbz#593785


author: Dave Allan <dallan@redhat.com> - 0.8.1-16
changelog:
  - Make PCI device ordering consistent with older releases
  - Resolves: rhbz#592026
  - Fix libvirtd hang during concurrent bi-directional migration
  - Resolves: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-17
changelog:
  - Set a stable & high MAC addr for guest TAP devices
  - Resolves: rhbz#616517
  - Fix bogus commit of -16 patches
  - Related: rhbz#592026
  - Related: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j2
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-28.el6
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#561935)
  - Make SASL work over UNIX domain sockets (rhbz#641687)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#643407)
  - Fix save/restore on root_squashed NFS (rhbz#643884)
  - Fix race on multiple migration (rhbz#638285)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Support forcing a CDROM eject (rhbz#626305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-29.el6
changelog:
  - spec file cleanups (rhbz#649523)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#659310)
  - Fix funny error in clock-variable (rhbz#660194)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Ensure device is deleted from guest after unplug (rhbz#644015)
  - Distinguish between QEMU domain shutdown and crash (rhbz#656845)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-1.el6
changelog:
  - Rebased to upstream 0.8.7 (rhbz#653985)
  - The following bugs got fixed by the rebase:
      rhbz#586124, rhbz#595350, rhbz#611793, rhbz#611822, rhbz#617439,
      rhbz#620363, rhbz#626873, rhbz#627143, rhbz#628772, rhbz#639595,
      rhbz#639603, rhbz#656795, rhbz#658657, rhbz#659855, rhbz#660706,
      rhbz#664406, rhbz#665446


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-2.el6
changelog:
  - Fix spec file which was not fully rebased to 0.8.7 (rhbz#653985, rhbz#660706)
  - Skip IB700 watchdog device when assigning PCI slots (rhbz#667091)
  - Improve error reporting when parsing dhcp info (rhbz#653300)
  - Don't chown saved image back to root if dynamic_ownership=0 (rhbz#661720)
  - Fix core dumps if unix_sock_group is set (rhbz#623166)
  - Add support for Westmere CPU model (rhbz#656248)
  - Add XML config switch to enable/disable vhost-net support (rhbz#643050)
  - Enable tuning of qemu network tap device "sndbuf" size (rhbz#665293)
  - Support for explicit boot device ordering (rhbz#646895)
  - Avoid qemu holding migration fd indefinitely (rhbz#620363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-3.el6
changelog:
  - Report error if invalid type specified for character device (rhbz#638968)
  - Improve log for domain related APIs (rhbz#640202)
  - Reject SDL graphic if it's not supported by qemu (rhbz#633326)
  - Don't lose track of events when callbacks are slow (rhbz#624252)
  - Fail if per-device boot is used but deviceboot is not supported (rhbz#670399)
  - Avoid sending STOPPED event twice (rhbz#666158)
  - Fix issues introduced by dependency patches for rhbz#646895


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-4.el6
changelog:
  - Fix event-handling data race (rhbz#671567)
  - Add support for VNC over a unix domain socket (rhbz#651415)
  - Support intel 'ich6' model (rhbz#648486)
  - Do not use virtio-serial port 0 for generic ports (rhbz#670394)
  - Set SELinux context label of pipes used for qemu migration (rhbz#667756)
  - Support customizable x509 certificate paths for client (rhbz#629510)
  - Round up capacity for LVM volume creation (rhbz#670529)
  - Show error prompt when trying to managed save a shutoff domain (rhbz#672449)
  - Report more proper error for unsupported graphics (rhbz#671319)
  - Expand the man page text for virsh setmaxmem (rhbz#622534)
  - Fix event-handling allocation crash (rhbz#671564)
  - Require --mac to avoid detach-interface ambiguity (rhbz#671050)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-5.el6
changelog:
  - Docs for customizable x509 certificate paths for client (rhbz#629510)
  - Fix tests for VNC over a unix domain socket (rhbz#651415)
  - Fix problems with peer-to-peer migration (rhbz#673434)
  - Fix tunneled migration broken since 0.8.7-2 (rhbz#672199)
  - Update docs for cpu_shares setting (rhbz#641187)
  - Fix possible hang if SASL is used (rhbz#672226)
  - Cancel migration in progress when virsh gets Ctrl-C (rhbz#635353)
  - Enhance virsh migrate command (rhbz#619039)
  - Support for specifying AIO mode for qemu disks (rhbz#591703)
  - Don't leave domain paused after restore (rhbz#670278)
  - Fix possible deadlock/crash in qemu driver (rhbz#673588)
  - Add shortcut for qemu HMP pass through (rhbz#628940)
  - Fix error message when attach device fails (rhbz#675030)
  - Support for booting from assigned PCI devices (rhbz#646895)
  - Improve handling of unlimited value for memory tunables (rhbz#669069)
  - Add smartcard support (rhbz#641834)
  - Remove some RHEL-specific patches which are no longer required (rhbz#653985)
  - Support for disabling/enabling KSM per domain (rhbz#635419)
  - Add --all flag to virsh freecell command (rhbz#653530)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-6.el6
changelog:
  - Fix typo in parsing of spice 'auth' data (rhbz#676374)
  - Fix attach-interface regression (rhbz#676686)
  - Block I/O tunables via blkio cgroups controller (rhbz#632492)
  - Support SCSI RAID type & lower log level for unknown types (rhbz#675771)
  - Only initialize/cleanup libpciaccess once (rhbz#675698)
  - Imprint all logs with version + package build information (rhbz#673226)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-7.el6
changelog:
  - Properly escape special characters in domain names (rhbz#676908)
  - Fix enum type declaration (rhbz#628940)
  - Fix cleanup on VM state after failed QEMU startup (rhbz#673588)
  - Fix XML generation for smartcards (rhbz#677308)
  - Ignore failure of "qemu -M ?" on older qemu (rhbz#676563)
  - Fix typo in setting up SPICE passwords (rhbz#677709)
  - Avoid NULL dereference in virDomainMemoryStats (rhbz#677484)
  - Avoid NULL dereference on error in qemu driver (rhbz#677493)
  - Fix error message when saving a shutoff domain (rhbz#677547)
  - Create enough volumes for mpath pool (rhbz#677231)
  - Allow to delete device mapper disk partition (rhbz#611443)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-8.el6
changelog:
  - Fix --all flag of virsh freecell to really show all cells (rhbz#653530)
  - Add txmode attribute to interface XML for virtio backend (rhbz#629662)
  - Give each virtual network bridge its own fixed MAC address (rhbz#609463)
  - Fix virsh snapshot-list with --quiet option (rhbz#678833)
  - Delay IFF_UP'ing 802.1Qbh interface until migration final stage (rhbz#678826)
  - Fix several memory bugs (rhbz#679164)
  - Fix virt-pki-validate when CERTTOOL is missing (rhbz#679153)
  - Fix memory corruption in virFileAbsPath (rhbz#680281)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.1-1.el6
changelog:
  - Rebased to upstream 0.9.1 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#587276, rhbz#591058, rhbz#592170, rhbz#598792, rhbz#673814,
      rhbz#677228, rhbz#681458, rhbz#682237, rhbz#692745, rhbz#693932,
      rhbz#694382, rhbz#695653, rhbz#698071, rhbz#698197, rhbz#698208,
      rhbz#698490, rhbz#701305


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.2-1.el6
changelog:
  - Rebased to upstream 0.9.2 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#569567, rhbz#691830, rhbz#607526, rhbz#609650, rhbz#632495,
      rhbz#640603, rhbz#658713, rhbz#669549, rhbz#677229, rhbz#678548,
      rhbz#640603, rhbz#682237, rhbz#683005, rhbz#684848, rhbz#688859,
      rhbz#690695, rhbz#692355, rhbz#693203, rhbz#694516, rhbz#697650,
      rhbz#698133, rhbz#702044, rhbz#704124, rhbz#704144, rhbz#705405,
      rhbz#706869, rhbz#706883, rhbz#706966, rhbz#707173, rhbz#707257,
      rhbz#707298, rhbz#709576, rhbz#709776, rhbz#710150, rhbz#711151


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-1.el6
changelog:
  - Rebased to upstream 0.9.3 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#591974, rhbz#632499, rhbz#641087, rhbz#664629, rhbz#679668,
      rhbz#682121, rhbz#693648, rhbz#693650, rhbz#693661, rhbz#698340,
      rhbz#698825, rhbz#698861, rhbz#701394, rhbz#707439, rhbz#707530,
      rhbz#715355, rhbz#716826, rhbz#717203, rhbz#718143, rhbz#712050,
      rhbz#715184


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-2.el6
changelog:
  - Fix mistaken order of server cert/key parameters in constructor (rhbz#719838)
  - qemu: Don't chown files on NFS share if dynamic_ownership is off (rhbz#716478)
  - util: Don't try to fchown files opened as non-root (rhbz#707257)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-4.el6
changelog:
  - storage: Avoid memory leak on metadata fetching (rhbz#707155)
  - graphics: Add support for action_if_connected in qemu (rhbz#707212)
  - qemu: Save domain status ASAP after creating qemu process (rhbz#707894)
  - bios: Add support for SGA (rhbz#711598)
  - pci: Initialize state values on reattach (rhbz#713697)
  - Keep consistence between code and doc on log level and usage (rhbz#716888)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-8.el6
changelog:
  - libvirt crash when running domains and vdsm is restarted (rhbz#723811)
  - connect to hypervisor with unconfigured tls/tcp connection pbm (rhbz#723442)
  - virsh list produced segmentation fault when libvirtd is not up (rhbz#723843)
  - clientcert.pem validation failure cause libvirtd crash (rhbz#723881)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc1.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 1 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#603039, rhbz#632499, rhbz#632760, rhbz#643947, rhbz#678027,
      rhbz#697742, rhbz#697841, rhbz#704836, rhbz#707530, rhbz#720350,
      rhbz#720889, rhbz#721335, rhbz#722862


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc2.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 2 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#667624, rhbz#669586, rhbz#682084, rhbz#707155, rhbz#707212,
      rhbz#725322, rhbz#725935, rhbz#725950


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-1.el6
changelog:
  - Rebased to upstream 0.9.4 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#634653, rhbz#707212, rhbz#722806, rhbz#723862, rhbz#726304,
      rhbz#726398, rhbz#727047, rhbz#727094


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-2.el6
changelog:
  - daemon: Unlink unix socket paths on shutdown (rhbz#725702)
  - rpc:Fix sasl session relocking intead of unlocking it (rhbz#729198)
  - network: Eliminate lag in updating dnsmasq hosts files (rhbz#727982)
  - Don't mount /dev for application containers (rhbz#728835)
  - support connected parameter in set_password (rhbz#707212)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-3.el6
changelog:
  - Fix large files support (rhbz#728992)
  - qemu: Avoid overwriting errors from virGetHostname (rhbz#729567)
  - qemu: Fix -chardev udp if parameters are omitted (rhbz#689761)
  - managedsave: Prohibit use on transient domains (rhbz#729714)
  - nwfilter: Tolerate disappearing interfaces while instantiating filter (rhbz#729945)
  - docs: Describe new virtual switch configuration in network XML docs (rhbz#643947)
  - storage: Directory shouldn't be listed as type 'file' (rhbz#727088)
  - virsh: Add dir type for listing volumes with vol-list (rhbz#727088)
  - qemu: Avoid crash on process attach (rhbz#730615)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-4.el6
changelog:
  - Bugfix: Check stdoutWatch before removing the handler. (rhbz#730600)
  - daemon: Fix regression of libvirtd reloading support (rhbz#730428)
  - libvirtd.init.in: Stop/restart() - wrong return value in case of failure (rhbz#730510)
  - Add API for duplicating a socket/client file descriptor (rhbz#720269)
  - Add backlog parameter to virNetSocketListen (rhbz#720269)
  - Support changing UNIX socket owner in virNetSocketNewListenUNIX (rhbz#720269)
  - qemu: Refactor do{Tunnel, Native}Migrate functions (rhbz#720269)
  - qemu: Use virNetSocket for tunneled migration (rhbz#720269)
  - qemu: Use fd: protocol for migration (rhbz#720269)
  - qemu: Support event_idx parameter for virtio disk and net devices (rhbz#725448)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-5.el6
changelog:
  - patch problem for seamless SPICE migration (rhbz#730753)
  - macvtap: Fix getPhysfn to get the PF of a direct attach network interface (rhbz#732082)
  - SSL spice session can't be kept during migration (rhbz#729874)
  - Storage driver should flush host cache after cloning volumes (rhbz#689416)
  - Documentation for CFS bandwidth limiting cgroup (rhbz#692769)
  - libvirt error message should show the uri content but not (null) (rhbz#730244)
  - libvirtd.conf error causes libvirtd to exit silently (rhbz#728654)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-6.el6
changelog:
  - daemon: Move TLS initialization to virInitialize (rhbz#732893)
  - Fix command test wrt gnutls initialize & fix debugging (rhbz#732893)
  - qemu: Init reattaching related members pciDevice before reattach (rhbz#728203)
  - qemu: error if qemu monitor command not found for BlockJob (rhbz#727502)
  - virsh: error if specified bandwidth is invalid for blockjob (rhbz#727502)
  - util: Only fchown newly created files in virFileOpenAs (rhbz#534010)
  - screenshot: Implement multiple screen support (rhbz#710489)
  - security: Rename SetSocketLabel APIs to SetDaemonSocketLabel (rhbz#731243)
  - security: Introduce SetSocketLabel (rhbz#731243)
  - qemu: Correctly label migration TCP socket (rhbz#731243)
  - snapshot: Don't leak resources on qemu snapshot failure (rhbz#733499)
  - Fix memory leak while scanning snapshots (rhbz#674537)
  - qemu: Minor formatting cleanup (rhbz#674537)
  - Swap virDomain and virDomainSnapshot declaration (rhbz#674537)
  - snapshot: Only pass snapshot to qemu command line when reverting (rhbz#674537)
  - snapshot: Track current snapshot across restarts (rhbz#674537)
  - send-key: Fix scan keycode map (rhbz#733597)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-7.el6
changelog:
  - qemu: Properly label outgoing pipe for tunneled migration (rhbz#733998)
  - snapshot: Forbid snapshot on autodestroy domain (rhbz#733806)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-8.el6
changelog:
  - qemu: Fix a regression of domain save (rhbz#735011)
  - virsh: Improve send-key documentation (rhbz#699847)
  - start: Allow discarding managed save (rhbz#730750)
  - virsh: Support 'virsh start --force-boot' on older servers (rhbz#730750)
  - maint: Fix comment typos (rhbz#730750)
  - qemu: Refactor file opening (rhbz#730750)
  - qemu: Detect incomplete save files (rhbz#730750)
  - virsh: Avoid memory leak on cmdVolCreateAs (rhbz#735008)
  - snapshot: Fix corner case on OOM during creation (rhbz#674537)
  - Ensure stream is aborted when exiting console (rhbz#731673)
  - following for (rhbz#731583, rhbz#731579, rhbz#731584, rhbz#731673):
  - Ensure client streams are closed when marking a client for close
  - Fix race condition in abort of stream
  - Tweak debugging message in RPC client code
  - Don't attempt to read from a stream if it is closed
  - Ensure async packets never get marked for sync replies
  - Ignore unused streams in virStreamAbort
  - rpc: Don't close connection if program is unknown
  - rpc: Fix a typo in debugging log in virNetServerProgramSendStreamData
  - stream: Remove redundant reference to client while sending stream data
  - Fix memory leak dispatching domain events
  - Avoid use-after-free on streams, due to message callbacks
  - Fix tracking of RPC messages wrt streams
  - Fix parted sector size assumption (rhbz#735441)
  - Fix incorrect path length check in sanlock lockspace setup (rhbz#735443)
  - Fix sanlock socket security labelling (rhbz#735442)
  - Remove bogus virSecurityManagerSetProcessFDLabel method (rhbz#735442)
  - security: Fix build (rhbz#735442)
  - Fix keymap used to talk with QEMU (rhbz#632499)
  - virsh: Fix snapshot-create-as to handle arbitrary names (rhbz#735495)
  - virsh: Add virsh snapshot-current --name (rhbz#735495)
  - virsh: Add snapshot-parent (rhbz#735495)
  - virsh: Don't reject undefine on active domain (rhbz#735495)
  - virsh: Fix logic bug (rhbz#735495)
  - virsh: Fix dead store (rhbz#735495)
  - virsh: Tweak misleading wording (rhbz#735495)
  - virsh: Concatenate qemu-monitor-command arguments (rhbz#735495)
  - maint: Treat more libxml2 functions as free-like (rhbz#735495)
  - xml: Add another convenience function (rhbz#735495)
  - maint: Simplify lots of libxml2 clients (rhbz#735495)
  - virsh: Add list --managed-save (rhbz#735495)
  - virsh: Prefer unsigned flags (rhbz#735495)
  - snapshot: Add snapshot-list --parent to virsh (rhbz#735495)
  - qemu: Allow to undefine a running domain (rhbz#735498)
  - test: Allow to undefine a running domain (rhbz#735498)
  - build: Fix typo in recent test patch (rhbz#735498)
  - test: Rewrite test to match change in behavior (rhbz#735498)
  - virsh: Properly interleave shared stdout and stderr (rhbz#735498)
  - snapshot: Better events when starting paused (rhbz#733762)
  - snapshot: Fine-tune ability to start paused (rhbz#733762)
  - snapshot: Expose --running and --paused in virsh (rhbz#733762)
  - snapshot: Fine-tune qemu saved images starting paused (rhbz#733762)
  - snapshot: Improve reverting to qemu paused snapshots (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Speed up snapshot location (rhbz#733529)
  - snapshot: Avoid crash when deleting qemu snapshots (rhbz#733529)
  - snapshot: Track current domain across deletion of children (rhbz#733529)
  - snapshot: Simplify acting on just children (rhbz#733529)
  - snapshot: Allow deletion of just snapshot metadata (rhbz#735457)
  - snapshot: Let qemu discard only snapshot metadata (rhbz#735457)
  - snapshot: Identify which snapshots have metadata (rhbz#735457)
  - snapshot: Reflect new dumpxml and list options in virsh (rhbz#735457)
  - snapshot: Identify qemu snapshot roots (rhbz#735457)
  - snapshot: Allow recreation of metadata (rhbz#735457)
  - snapshot: Refactor virsh snapshot creation (rhbz#735457)
  - snapshot: Improve virsh snapshot-create, add snapshot-edit (rhbz#735457)
  - snapshot: Add qemu snapshot creation without metadata (rhbz#735457)
  - snapshot: Add qemu snapshot redefine support (rhbz#735457)
  - vbox, xenapi: Add virDomainUndefineFlags (rhbz#735457)
  - snapshot: Prevent stranding snapshot data on domain destruction (rhbz#735457)
  - snapshot: Teach virsh about new undefine flags (rhbz#735457)
  - snapshot: Refactor some qemu code (rhbz#735457)
  - snapshot: Cache qemu-img location (rhbz#735457)
  - snapshot: Support new undefine flags in qemu (rhbz#735457)
  - snapshot: Prevent migration from stranding snapshot data (rhbz#735457)
  - snapshot: Refactor domain xml output (rhbz#735553)
  - snapshot: Allow full domain xml in snapshot (rhbz#735553)
  - snapshot: Correctly escape generated xml (rhbz#735553)
  - snapshot: Update rng to support full domain in xml (rhbz#735553)
  - snapshot: Store qemu domain details in xml (rhbz#735553)
  - schedinfo: Update man page about virsh schedinfo command (unknown)
  - snapshot: Additions to domain xml for disks (rhbz#638510)
  - snapshot: Reject transient disks where code is not ready (rhbz#638510)
  - snapshot: Introduce new deletion flag (rhbz#638510)
  - snapshot: Expose new delete flag in virsh (rhbz#638510)
  - snapshot: Allow halting after snapshot (rhbz#638510)
  - snapshot: Expose halt-after-creation in virsh (rhbz#638510)
  - snapshot: Support extra state in snapshots (unknown)
  - snapshot: Add <disks> to snapshot xml (rhbz#638510)
  - snapshot: Also support disks by path (rhbz#638510)
  - snapshot: Add virsh domblklist command (rhbz#638510)
  - snapshot: Add flag for requesting disk snapshot (rhbz#638510)
  - snapshot: Wire up disk-only flag to snapshot-create (rhbz#638510)
  - snapshot: Reject unimplemented disk snapshot features (rhbz#638510)
  - snapshot: Make it possible to audit external snapshot (rhbz#638510)
  - snapshot: Wire up new qemu monitor command (rhbz#638510)
  - snapshot: Wire up live qemu disk snapshots (rhbz#638510)
  - snapshot: Use SELinux and lock manager with external snapshots (rhbz#638510)
  - daemon: Create priority workers pool (rhbz#692663)
  - qemu: Introduce job queue size limit (rhbz#692663)
  - qemu: Deal with stucked qemu on daemon startup (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-10.el6
changelog:
  - virterror: Fix error message for VIR_ERR_INVALID_ARG (rhbz#689388)
  - remote: Refuse connecting to remote socket (rhbz#689388)
  - Threadpool: Initialize new dynamic workers (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-11.el6
changelog:
  - blockinfo: Fix qemu regression in handling disk name (rhbz#736603)
  - doc: Fix incorrect option in send-key (rhbz#736297)
  - virsh: Fix typo in opts_send_key (rhbz#736297)
  - rpc: Avoid memory leak on virNetTLSContextValidCertificate (rhbz#735650)
  - tests: Avoid memory leak on testTLSSessionInit (rhbz#735650)
  - qemu: Fix seamless SPICE migration with older qemu (rhbz#730753)
  - snapshot: Fix regression with system checkpoints (rhbz#736682)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-12.el6
changelog:
  - selinux: Detect virt_use_nfs boolean set (rhbz#589922)
  - virnetsocket: Pass KRB5CCNAME env variable (rhbz#737176)
  - snapshot: Fix double free of qemuImgBinary (rhbz#737010)
  - qemu_api: Modify apibuild.py to generate docs for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile for subdir docs (rhbz#736040)
  - qemu_api: Add comments for API virDomainQemuMonitorCommand (rhbz#736040)
  - qemu_api: Add override XML and C files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Py binding generator to generate files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile to generate libvirtmod_qemu lib (rhbz#736040)
  - qemu_api: Update libvirt spec file (rhbz#736040)
  - Remove two references to files not generated (rhbz#736040)
  - qemu_api: Doc improvements (rhbz#736040)
  - python: Fix libvirt.py generation to include virterror info (rhbz#736040)
  - snapshot: New APIs for inspecting snapshot object (rhbz#735457)
  - snapshot: Use new API for less work (rhbz#735457)
  - snapshot: ABI stability must include memory sizing (rhbz#735553)
  - spec: Require augeas for sanlock (rhbz#738314)
  - sanlock: Add missing test command in virt-sanlock-cleanup.in (rhbz#738534)
  - snapshot: Tweak snapshot-create-as diskspec docs (rhbz#738411)
  - qemu: Hold conn open for all threads started by qemuProcessReconnectAll (rhbz#738778)
  - rpc: Convert unknown procedures to VIR_ERR_NO_SUPPORT (rhbz#738439)
  - Prevent crash from dlclose() of libvirt.so (rhbz#739167)
  - doc: Add statment about permissions needed to do a core dump (rhbz#738146)
  - snapshot: Affect persistent xml after disk snapshot (rhbz#738676)
  - snapshot: Allow disk snapshots of qcow2 disks (rhbz#738676)
  - qemu: Prevent disk corruption on domain shutdown (rhbz#734773)
  - qemu: Introduce shutdown reason for paused state (rhbz#734773)
  - qemu: Fix shutoff reason when domain crashes (rhbz#739641)
  - qemu: Properly detect crash of a rebooted domain (rhbz#739641)
  - qemu: Avoid memory leak (rhbz#739704)
  - remote: Avoid memory leak (rhbz#739704)
  - util: Avoid memory leak (rhbz#739704)
  - Fix memory leak parsing 'relabel' attribute in domain security XML (rhbz#739704)
  - Don't leak memory if a cgroup is mounted multiple times (rhbz#739704)
  - network: Eliminate potential memory leak on parse failure (rhbz#739704)
  - virsh: doc: Fix supported driver types for attach-disk command (rhbz#738970)
  - Do not log invalid operations in libvirtd logs (rhbz#590807)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-13.el6
changelog:
  - Fix crash on events due to allocation errors (rhbz#737881)
  - remote: Fix crash on OOM (rhbz#737881)
  - Fix persistent migration config save (rhbz#738148)
  - qemu: Transfer inactive XML among cookie (rhbz#738148)
  - storage: Ensure the device path exists before refreshing disk pool (rhbz#611442)
  - Store max migration bandwidth in qemuDomainObjPrivate struct (rhbz#740099)
  - Save migration speed in qemuDomainMigrateSetMaxSpeed (rhbz#740099)
  - Set qemu migration speed unlimited when migrating to file (rhbz#740099)
  - Use max bandwidth from qemuDomainObjPrivate struct when migrating (rhbz#740099)
  - build: Silence warning on 32-bit build (rhbz#740099)
  - conf: Assign newDef of active domain as persistent conf if it is NULL (rhbz#728428)
  - qemu: Avoid dereferencing a NULL pointer (rhbz#739704)
  - sanlock: Fix memory leak (rhbz#739704)
  - virsh: Fix regression in argv parsing (rhbz#740168)
  - snapshot: Fix logic bug in qemu undefine (rhbz#735457)
  - snapshot: Prepare to remove transient snapshot metadata (rhbz#735457)
  - snapshot: Remove snapshot metadata on transient exit (rhbz#735457)
  - snapshot: Also delete empty directory (rhbz#735457)
  - virsh: Do not ignore the specified flags for cmdSaveImageDefine (rhbz#740508)
  - selinux: Correctly report warning if virt_use_nfs not set (rhbz#589922)
  - qemu: Properly hot-unplug drives (rhbz#696596)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-14.el6
changelog:
  - Fix synchronous reading of stream data (rhbz#741337)
  - qemu: Add ability to set PCI device "rombar" on or off (rhbz#738095)
  - virsh: Better document --copy-storage migrate options (rhbz#677220)
  - virsh: Enhance documentation of commands starting jobs (rhbz#705237)
  - qemu: Always remove domain object if MigratePrepare fails (rhbz#741251)
  - security: Properly chown/label bidirectional and unidirectional fifos (rhbz#740478)
  - qemu: Check domain status details when reconnecting monitor (rhbz#617890)
  - qemu: Finish domain shutdown on reconnect (rhbz#617890)
  - qemu: Avoid loop of fake reboots (rhbz#617890)
  - qemu: Preserve fakeReboot flag in domain status (rhbz#617890)
  - snapshot: Fix man page typos (rhbz#740686)
  - docs: Document virsh nodedev-* commands (rhbz#740686)
  - docs: Document node device XML (rhbz#740686)
  - qemu: Add return value check (rhbz#739704)
  - qemu: Check for ejected media during startup and migration (rhbz#725673)
  - virsh: Update man page for cpu_shares parameter (rhbz#639591)
  - virsh: Describe attach-interface parameter target (rhbz#698899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-20.el6
changelog:
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747516)
  - storage: Plug iscsi memory leak (rhbz#747516)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-1.el6
changelog:
  - Rebase to upstream 0.9.10 (rhbz#752433)
  - Add support for sVirt in the LXC driver
  - block rebase: add new API virDomainBlockRebase
  - API: Add api to set and get domain metadata
  - virDomainGetDiskErrors public API
  - conf: add rawio attribute to disk element of domain XML
  - Add new public API virDomainGetCPUStats()
  - Introduce virDomainPMSuspendForDuration API
  - resize: add virStorageVolResize() API
  - Add a virt-host-validate command to sanity check HV config
  - Add new virDomainShutdownFlags API
  - QEMU guest agent support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-2.el6
changelog:
  - qemu: Set capabilities based on supported monitor commands (rhbz#766958)
  - qemu: Implement DomainPMSuspendForDuration (rhbz#766958)
  - snapshot: Fix snapshot deletion use-after-free (rhbz#790744)
  - storage: Allow runtime detection of scrub (rhbz#725013)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#783968)
  - qemu: Prevent crash of libvirtd without guest agent (rhbz#790745)
  - python: Expose virDomain{G,S}etInterfaceParameters APIs in python binding (rhbz#770971)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-3.el6
changelog:
  - storage: Allow runtime detection of scrub missing build dep (rhbz#725013)
  - daemon: Plug memory leak (rhbz#795978)
  - daemon: Fix logic bug with virAsprintf (rhbz#795978)
  - util: Fix virFileAccessibleAs return path from parent (rhbz#795093)
  - Add support for unsafe migration (rhbz#751631)
  - virsh: Add --unsafe option to migrate command (rhbz#751631)
  - Introduce virStorageFileIsClusterFS (rhbz#751631)
  - qemu: Forbid migration with cache != none (rhbz#751631)
  - qemu: Nicer error message on failed graceful destroy (rhbz#795656)
  - Error out when using SPICE TLS with spice_tls=0 (rhbz#790436)
  - Revert "spec: Mark directories in /var/run as ghosts" (rhbz#788985)
  - Fixed URI parsing (rhbz#785164)
  - virsh: Fix informational message in iface-bridge command (rhbz#797066)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-4.el6
changelog:
  - Improve error reporting when virsh console is run without a TTY (rhbz#729940)
  - pidfile: Make checking binary path in virPidFileRead optional (rhbz#729940)
  - Add flags for virDomainOpenConsole (rhbz#729940)
  - virsh: Add support for VIR_DOMAIN_CONSOLE_* flags (rhbz#729940)
  - fdstream: Emit stream abort callback even if poll() doesnt. (rhbz#729940)
  - fdstream: Add internal callback on stream close (rhbz#729940)
  - util: Add helpers for safe domain console operations (rhbz#729940)
  - qemu: Add ability to abort existing console while creating new one (rhbz#729940)
  - Fixed service handling in specfile (rhbz#786770)
  - qemu: Don't emit tls-port spice option if port is -1 (rhbz#798220)
  - docs: Comments wiping supported algorithms (rhbz#725013)
  - libvirt-guests: Add documentation and clean up to use virsh's improved list (rhbz#693758)
  - libvirt-guests: Don't try to do a managed-save of transient guests (rhbz#693758)
  - virsh: Enhance list command to ease creation of shell scripts (rhbz#693758)
  - libvirt-guests: Check if URI is reachable before launching commands (rhbz#720691)
  - hooks: Add support for capturing hook output (rhbz#795127)
  - qemu: Add pre-migration hook (rhbz#795127)
  - Support for cpu64-rhel* qemu cpu models (rhbz#768450)
  - util: Add netlink event handling to virnetlink.c (rhbz#693842)
  - Add de-association handling to macvlan code (rhbz#693842)
  - qemu: Add ibmvscsi controller model (rhbz#782034)
  - qemu: Add virtio-scsi controller model (rhbz#782034)
  - conf: Add helper function to look up disk controller model (rhbz#782034)
  - conf: Introduce new attribute for device address format (rhbz#782034)
  - qemu: New cap flag to indicate if channel is supported by scsi-disk (rhbz#782034)
  - qemu: Build command line for the new address format (rhbz#782034)
  - tests: Add tests for virtio-scsi and ibmvscsi controllers (rhbz#782034)
  - virsh: Two new helper functions for disk device changes (rhbz#713932)
  - virsh: Use vshFindDisk and vshPrepareDiskXML in cmdDetachDisk (rhbz#713932)
  - virsh: New command cmdChangeMedia (rhbz#713932)
  - qemu: Require json for block jobs (rhbz#799055)
  - qemu: Pass block pull backing file to monitor (rhbz#799055)
  - virsh: Expose partial pull (rhbz#799055)
  - libvirt-guests: Add parallel startup and shutdown of guests (rhbz#625362)
  - qemu: Shared or readonly disks are always safe wrt migration (rhbz#751631)
  - util: Eliminate crash in virNetDevMacVLanCreateWithVPortProfile (rhbz#693842)
  - rpc: Fix client crash on connection close (rhbz#800185)
  - conf: Add missing device types to virDomainDevice(Type|Def) (rhbz#691539)
  - conf: Relocate virDomainDeviceDef and virDomainHostdevDef (rhbz#691539)
  - conf: Reorder static functions in domain_conf.c (rhbz#691539)
  - qemu: Rename virDomainDeviceInfoPtr variables to avoid confusion (rhbz#691539)
  - conf: Add device pointer to args of virDomainDeviceInfoIterate callback (rhbz#691539)
  - conf: Make hostdev info a separate object (rhbz#691539)
  - conf: HostdevDef parse/format helper functions (rhbz#691539)
  - conf: Give each hostdevdef a parent pointer (rhbz#691539)
  - conf: Put subsys part of virDomainHostdevDef into its own struct (rhbz#691539)
  - conf: Hostdev utility functions (rhbz#691539)
  - qemu: Re-order functions in qemu_hotplug.c (rhbz#691539)
  - qemu: Refactor hotplug detach of hostdevs (rhbz#691539)
  - conf: Parse/format type='hostdev' network interfaces (rhbz#691539)
  - qemu: Support type='hostdev' network devices at domain start (rhbz#691539)
  - conf: Change virDomainNetRemove from static to global (rhbz#691539)
  - qemu: Use virDomainNetRemove instead of inline code (rhbz#691539)
  - qemu: Support type=hostdev network device live hotplug attach/detach (rhbz#691539)
  - util: Two new pci util functions (rhbz#691539)
  - util: Support functions for mac/portprofile associations on hostdev (rhbz#691539)
  - util: Changes to support portprofiles for hostdevs (rhbz#691539)
  - qemu: Install port profile and mac address on netdev hostdevs (rhbz#691539)
  - Fix build after commit e3ba4025 (rhbz#693842)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-5.el6
changelog:
  - Avoid global variable shadowed (rhbz#737726)
  - Add nodeGetCPUmap() for getting available CPU IDs in a cpumap. (rhbz#737726)
  - Qemu driver for virDomainGetCPUstats using cpuacct cgroup. (rhbz#737726)
  - Cpu-stats command shows cpu statistics information of a domain. (rhbz#737726)
  - Ensure max_id is initialized in linuxParseCPUmap() (rhbz#737726)
  - rpc: Allow truncated return for virDomainGetCPUStats (rhbz#737726)
  - qemu: Don't parse device twice in attach/detach (rhbz#770031)
  - sanlock: Fix condition left crippled while debugging (rhbz#785736)
  - sanlock: Use STREQ_NULLABLE instead of STREQ on strings that may be null (rhbz#785736)
  - qemu: Fix startupPolicy for snapshot-revert (rhbz#798938)
  - util: Don't overflow on errno in virFileAccessibleAs (rhbz#798938)
  - blockResize: Add flag for bytes (rhbz#796526)
  - docs: Use correct terminology for 1024 bytes (rhbz#796526)
  - api: Add overflow error (rhbz#796526)
  - util: New function for scaling numbers (rhbz#796526)
  - xml: Share 'unit' in RNG (rhbz#796526)
  - xml: Output memory unit for clarity (rhbz#796526)
  - storage: Support more scaling suffixes (rhbz#796526)
  - xml: Drop unenforced minimum memory limit from RNG (rhbz#796526)
  - xml: Use long long internally, to centralize overflow checks (rhbz#796526)
  - xml: Use better types for memory values (rhbz#796526)
  - xml: Allow scaled memory on input (rhbz#796526)
  - virsh: Add option aliases (rhbz#796526)
  - virsh: Use option aliases (rhbz#796526)
  - virsh: Add command aliases, and rename nodedev-detach (rhbz#796526)
  - virsh: Improve storage unit parsing (rhbz#796526)
  - virsh: Improve memory unit parsing (rhbz#796526)
  - qemuBuildCommandLine: Don't add tlsPort if none set (rhbz#801443)
  - Removed more AMD-specific features from cpu64-rhel* models (rhbz#768450)
  - qemu: Support disk filenames with comma (rhbz#801970)
  - cpustats: Collect VM user and sys times (miss python bindings) (rhbz#800366)
  - cpustats: Report user and sys times (rhbz#800366)
  - qemu: Fix (managed)save and snapshots with host mode CPU (rhbz#801160)
  - qemu: Make block io tuning smarter (rhbz#770683)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-6.el6
changelog:
  - cpu: Add new flag supported by qemu to the cpu definition (rhbz#767364)
  - Added support for AMD Bulldozer CPU (rhbz#767364)
  - graphics: Cleanup port policy (rhbz#801443)
  - qemu: Reverse condition in qemuDomainCheckDiskPresence (rhbz#798938)
  - cpu: Add cpu definition for Intel Sandy Bridge cpu type (rhbz#761005)
  - cpu: Disable tsc-deadline feature not supported in qemu on RHEL 6.3 (rhbz#761005)
  - qemu: Support numad (rhbz#769930)
  - numad: Fix typo and warning (rhbz#769930)
  - qemu: Use scsi-block for lun passthrough instead of scsi-disk (rhbz#782034)
  - util: Make virDomainLeaseDefFree global (rhbz#802851)
  - qemu: Don't 'remove' hostdev objects from domain if operation fails (rhbz#802851)
  - util: Eliminate device object leaks related to virDomain*Remove*() (rhbz#802851)
  - virsh: Fix invalid free (rhbz#803591)
  - qemu: Eliminate memory leak in qemuDomainUpdateDeviceConfig (rhbz#802854)
  - qemu: Support persistent hotplug of <hostdev> devices (rhbz#802856)
  - qemu: Fix segfault when detaching non-existent network device (rhbz#802644)
  - remote: Fix migration leaks (rhbz#798497)
  - virsh: Trim aliases from -h output (rhbz#796526)
  - Fix handling of blkio deviceWeight empty string (rhbz#804028)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-7.el6
changelog:
  - snapshot: Make quiesce a bit safer (rhbz#804210)
  - python: Avoid memory leaks on libvirt_virNodeGetMemoryStats (rhbz#770944)
  - qemu: Use unlimited speed when migrating to file (rhbz#740099)
  - qemu: Add support for domain cleanup callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#795305)
  - qemu: Add connection close callbacks (rhbz#795305)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#795305)
  - python: Avoid memory leaks on libvirt_virNodeGetCPUStats (rhbz#770943)
  - util: Consolidate duplicated error messages in virnetlink.c (rhbz#693842)
  - python: Add virDomainGetCPUStats python binding API (rhbz#800366)
  - snapshot: Add qemu capability for 'transaction' command (rhbz#782457)
  - snapshot: Add atomic create flag (rhbz#782457)
  - snapshot: Make offline qemu snapshots atomic (rhbz#782457)
  - snapshot: Rudimentary qemu support for atomic disk snapshot (rhbz#782457)
  - snapshot: Add support for qemu transaction command (rhbz#782457)
  - snapshot: Wire up qemu transaction command (rhbz#782457)
  - snapshot: Improve qemu handling of reused snapshot targets (rhbz#782457)
  - Clarify virsh freecell manpage entry (rhbz#698521)
  - Add support for event tray moved of removable disks (rhbz#575160)
  - docs: Add documentation for new attribute tray of disk target (rhbz#575160)
  - conf: Parse and for the tray attribute (rhbz#575160)
  - qemu: Do not start with source for removable disks if tray is open (rhbz#575160)
  - qemu: Prohibit setting tray status as open for block type disk (rhbz#575160)
  - qemu: Update tray status while tray moved event is emitted (rhbz#575160)
  - build: Fix incorrect enum declaration (rhbz#575160)
  - spec: Add missed dependancy for numad (rhbz#769930)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-9.el6
changelog:
  - qemu: Avoid entering monitor with locked driver (rhbz#803186)
  - snapshot: Don't pass NULL to QMP command creation (rhbz#807147)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-10.el6
changelog:
  - python: Add new helper functions for python to C conversion (rhbz#807751)
  - python: Make python APIs use these helper functions (rhbz#807751)
  - python: Improve conversion validation (rhbz#807751)
  - qemu_agent: Issue guest-sync prior to every command (rhbz#808527)
  - qemu: Fix memory leak in virDomainGetVcpus (rhbz#808979)
  - qemu: Reflect any memory rounding back to xml (rhbz#808522)
  - conf: Allow fuzz in XML with cur balloon > max (rhbz#808522)
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#803186)
  - virsh: Clarify escape sequence (rhbz#808652)
  - virsh: Plug memory leaks on failure path (rhbz#807555)
  - conf: Prevent crash of libvirtd without channel target name (rhbz#808371)
  - qemu: Don't leak temporary list of USB devices (rhbz#808459)
  - qemu: Delete USB devices used by domain on stop (rhbz#808459)
  - qemu: Build activeUsbHostdevs list on process reconnect (rhbz#808459)
  - qemu: Fix virtio+macvtap migration from 6.3 to older hosts (rhbz#806633)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-11.el6
changelog:
  - test: Fix segfault in networkxml2argvtest (rhbz#810100)
  - conf: Plug memory leaks on virDomainDiskDefParseXML (rhbz#575160)
  - qemu_ga: Don't overwrite errors on FSThaw (rhbz#808527)
  - Fix parallel build in docs/ directory (rhbz#810559)
  - qemu: Make migration fail when port profile association fails on the dst host (rhbz#811026)
  - Wire up <loader> to set the QEMU BIOS path (rhbz#811227)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-12.el6
changelog:
  - blockjob: Add qemu capabilities related to block pull jobs (rhbz#811683)
  - blockjob: Add API for async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Optimize JSON event handler lookup (rhbz#811683)
  - blockjob: Wire up qemu async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Allow for fast-finishing job (rhbz#811683)
  - virsh: Minor syntactic cleanups (rhbz#811683)
  - qemu: Use consistent error when qemu binary is too old (rhbz#811683)
  - blockjob: Add virsh blockpull --wait (rhbz#811683)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix mem leak in qemuProcessInitCpuAffinity (rhbz#810157)
  - numad: Convert node list to cpumap before setting affinity (rhbz#810157)
  - numad: Ignore cpuset if placement is auto (rhbz#810157)
  - conf: Do not parse cpuset only if the placement is auto (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.13-1.el6
changelog:
  - first rebase for 6.4 more to come
  - kvm-guest failed to start; double-close bug in libvirt (rhbz#823716)
  - potential to deadlock libvirt on EPIPE (rhbz#827234)
  - fix keepalive issues (rhbz#832081)
  - CPU topology parsing bug on special NUMA platform (rhbz#828729)
  - libvirtd will crash when tight loop of hotplug/unplug PCI device (rhbz#822373)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-0rc0.el6
changelog:
  - New build based on upstream snapshot 0.10.0-0rc0 (rhbz#836934)
  - Cleanup and rebase of the few RHEL-only patches


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-1.el6
changelog:
  - New build based on upstream release 0.10.0 (rhbz#836934)
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.2-1.el6
changelog:
  - New build based on upstream release 0.10.2 (rhbz#836934)
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-2.el6
changelog:
  - qemu: Wait for SPICE to migrate (rhbz#836135)
  - lxc: Correctly report active cgroups (rhbz#860907)
  - network: Backend for virNetworkUpdate of interface list (rhbz#844404)
  - Fix start of containers with custom root filesystem (rhbz#861564)
  - Correct checking of virStrcpyStatic() return value (rhbz#864122)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-3.el6
changelog:
  - conf: Rename life cycle actions to event actions (rhbz#832156)
  - conf: Add on_lockfailure event configuration (rhbz#832156)
  - locking: Add const char * parameter to avoid ugly typecasts (rhbz#832156)
  - locking: Pass hypervisor driver name when acquiring locks (rhbz#832156)
  - locking: Add support for lock failure action (rhbz#832156)
  - locking: Implement lock failure action in sanlock driver (rhbz#832156)
  - conf: Add support for startupPolicy for USB devices (rhbz#843560)
  - qemu: Introduce qemuFindHostdevUSBDevice (rhbz#843560)
  - qemu: Add option to treat missing USB devices as success (rhbz#843560)
  - qemu: Implement startupPolicy for USB passed through devices (rhbz#843560)
  - Add MIGRATABLE flag for virDomainGetXMLDesc (rhbz#843560)
  - qemu: Make save/restore with USB devices usable (rhbz#843560)
  - conf: Mark missing optional USB devices in domain XML (rhbz#843560)
  - security: Also parse user/group names instead of just IDs for DAC labels (rhbz#860519)
  - doc: Update description about security labels on formatdomain.html (rhbz#860519)
  - util: Extend virGetUserID and virGetGroupID to support names and IDs (rhbz#860519)
  - security: Update user and group parsing in security_dac.c (rhbz#860519)
  - doc: Update description about user/group in qemu.conf (rhbz#860519)
  - Fix kvm_pv_eoi with kvmclock (rhbz#860971)
  - Change qemuSetSchedularParameters to use AFFECT_CURRENT (rhbz#852260)
  - Fix handling of itanium arch name in QEMU driver (rhbz#863115)
  - Add a qemu capabilities cache manager (rhbz#863115)
  - Switch over to use cache for building QEMU capabilities (rhbz#863115)
  - Remove probing of flags when launching QEMU guests (rhbz#863115)
  - Remove probing of machine types when canonicalizing XML (rhbz#863115)
  - Remove probing of CPU models when launching QEMU guests (rhbz#863115)
  - Make qemuCapsProbeMachineTypes & qemuCapsProbeCPUModels static (rhbz#863115)
  - Remove xenner support (rhbz#863115)
  - Refactor guest init to support qemu-system-i386 binary too (rhbz#863115)
  - Add a qemuMonitorGetVersion() method for QMP query-version command (rhbz#863115)
  - Add a qemuMonitorGetMachines() method for QMP query-machines command (rhbz#863115)
  - Add a qemuMonitorGetCPUDefinitions method for QMP query-cpu-definitions command (rhbz#863115)
  - Add a qemuMonitorGetCommands() method for QMP query-commands command (rhbz#863115)
  - Add a qemuMonitorGetEvents() method for QMP query-events command (rhbz#863115)
  - Add a qemuMonitorGetObjectTypes() method for QMP qom-list-types command (rhbz#863115)
  - Add a qemuMonitorGetObjectProps() method for QMP device-list-properties command (rhbz#863115)
  - Add a qemuMonitorGetTargetArch() method for QMP query-target command (rhbz#863115)
  - Remove some unused includes in QEMU code (rhbz#863115)
  - Move command/event capabilities detection out of QEMU monitor code (rhbz#863115)
  - Fix regression starting QEMU instances without query-events (rhbz#863115)
  - Refactor qemuCapsParseDeviceStr to work from data tables (rhbz#863115)
  - Fix QEMU test with 1.2.0 help output (rhbz#863115)
  - Ignore error from query-cpu-definitions (rhbz#863115)
  - Fix potential deadlock when agent is closed (rhbz#859712)
  - Fix (rare) deadlock in QEMU monitor callbacks (rhbz#859712)
  - Convert virLXCMonitor to use virObject (rhbz#864336)
  - Remove pointless virLXCProcessMonitorDestroy method (rhbz#864336)
  - Simplify some redundant locking while unref'ing objects (rhbz#859712)
  - Fix deadlock in handling EOF in LXC monitor (rhbz#864336)
  - Avoid bogus I/O event errors when closing the QEMU monitor (rhbz#859712)
  - qemu: Fix parsing of x86 CPU models (rhbz#864097)
  - python: Keep consistent handling of Python integer conversion (rhbz#816609)
  - esx: Fix and improve esxListAllDomains function (rhbz#864384)
  - virsh: Block SIGINT while getting BlockJobInfo (rhbz#845448)
  - spec: Add support for libssh2 transport (rhbz#513363)
  - Revert "Use XDG Base Directories instead of storing in home directory" (rhbz#859331)
  - doc: Sort out the relationship between <vcpu>, <vcpupin>, and <emulatorpin> (rhbz#855218)
  - conf: Ignore vcpupin for not onlined vcpus when parsing (rhbz#855218)
  - conf: Initialize the pinning policy for vcpus (rhbz#855218)
  - qemu: Create or remove cgroup when doing vcpu hotpluging (rhbz#857013)
  - qemu: Initialize cpuset for hotplugged vcpu as def->cpuset (rhbz#855218)
  - conf: Ignore emulatorpin if vcpu placement is auto (rhbz#855218)
  - qemu: Ignore def->cpumask if emulatorpin is specified (rhbz#855218)
  - Avoid straying </cpuset> (rhbz#855218)
  - conf: Fix virDevicePCIAddressEqual args (rhbz#805071)
  - conf: VirDomainDeviceInfoCopy utility function (rhbz#805071)
  - qemu: Reorganize qemuDomainChangeNet and qemuDomainChangeNetBridge (rhbz#805071)
  - Add support for SUSPEND_DISK event (rhbz#839661)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-4.el6
changelog:
  - node_memory: Add new parameter field to tune the new sysfs knob (rhbz#840113)
  - daemon: Fix removing abstract namespaces (rhbz#859331)
  - tests: Fix domain-events python test (rhbz#839661)
  - conf: Fix crash with cleanup (rhbz#866288)
  - spec: Add runtime requirement for libssh2 (rhbz#866508)
  - spec: Require newer sanlock on recent distros (rhbz#832156)
  - spec: Require newer sanlock on recent distros 2 (rhbz#832156)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-5.el6
changelog:
  - qemu: Clear async job when p2p migration fails early (rhbz#867412)
  - qemu: Pin the emulator when only cpuset is specified (rhbz#867372)
  - qemu: Correctly wait for spice to migrate (rhbz#867724)
  - qemu: Fixed default machine detection in qemuCapsParseMachineTypesStr (rhbz#867764)
  - conf: Make tri-state feature options more universal (rhbz#864606)
  - conf: Add support for HyperV Enlightenment features (rhbz#864606)
  - qemu: Add support for HyperV Enlightenment feature "relaxed" (rhbz#864606)
  - network: Set to NULL after virNetworkDefFree() (rhbz#866364)
  - qemu: Always format CPU topology (rhbz#866999)
  - qemu: Don't fail without emulatorpin or cpumask (rhbz#867372)
  - qemu: Allow migration with host USB devices (rhbz#843560)
  - qemu: Do not require hostuuid in migration cookie (rhbz#863059)
  - network: Free/null newDef if network fails to start (rhbz#866364)
  - migrate: v2: Use VIR_DOMAIN_XML_MIGRATABLE when available (rhbz#856864)
  - qemu: Avoid holding the driver lock in trivial snapshot API's (rhbz#772088)
  - storage: List more file types (rhbz#772088)
  - storage: Treat 'aio' like 'raw' at parse time (rhbz#772088)
  - storage: Match RNG to supported driver types (rhbz#772088)
  - storage: Use enum for default driver type (rhbz#772088)
  - storage: Use enum for disk driver type (rhbz#772088)
  - storage: Use enum for snapshot driver type (rhbz#772088)
  - storage: Don't probe non-files (rhbz#772088)
  - storage: Get entire metadata chain in one call (rhbz#772088)
  - storage: Don't require caller to pre-allocate metadata struct (rhbz#772088)
  - storage: Remember relative names in backing chain (rhbz#772088)
  - storage: Make it easier to find file within chain (rhbz#772088)
  - storage: Cache backing chain while qemu domain is live (rhbz#772088)
  - storage: Use cache to walk backing chain (rhbz#772088)
  - blockjob: Remove unused parameters after previous patch (rhbz#772088)
  - blockjob: Manage qemu block-commit monitor command (rhbz#772088)
  - blockjob: Wire up online qemu block-commit (rhbz#772088)
  - blockjob: Implement shallow commit flag in qemu (rhbz#772088)
  - blockjob: Refactor qemu disk chain permission grants (rhbz#772088)
  - blockjob: Properly label disks for qemu block-commit (rhbz#772088)
  - blockjob: Avoid segv on early error (rhbz#772088)
  - blockjob: Accommodate early RHEL backport naming (rhbz#772088)
  - virsh: Fix segfault of snapshot-list (rhbz#837544)
  - network: Always create dnsmasq hosts and addnhosts files, even if empty (rhbz#868389)
  - network: Don't allow multiple default portgroups (rhbz#868483)
  - selinux: Use raw contexts (rhbz#851981)
  - selinux: Add security selinux function to label tapfd (rhbz#851981)
  - selinux: Use raw contexts 2 (rhbz#851981)
  - selinux: Fix wrong tapfd relablling (rhbz#851981)
  - selinux: Remove unused variables in socket labelling (rhbz#851981)
  - selinux: Relabel tapfd in qemuPhysIfaceConnect (rhbz#851981)
  - storage: Let format probing work on root-squash NFS (rhbz#856247)
  - snapshot: Sanity check when reusing file for snapshot (rhbz#856247)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#856247)
  - blockjob: React to active block copy (rhbz#856247)
  - blockjob: Return appropriate event and info (rhbz#856247)
  - blockjob: Support pivot operation on cancel (rhbz#856247)
  - blockjob: Make drive-reopen safer (rhbz#856247)
  - blockjob: Implement block copy for qemu (rhbz#856247)
  - blockjob: Allow for existing files in block-copy (rhbz#856247)
  - blockjob: Allow mirroring under SELinux and cgroup (rhbz#856247)
  - blockjob: Relabel entire existing chain (rhbz#856247)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-6.el6
changelog:
  - xml: Omit domain name from comment if it contains double hyphen (rhbz#868692)
  - cpu: Add recently added cpu feature flags. (rhbz#797283)
  - esx: Update version checks for vSphere 5.1 (rhbz#865670)
  - qemu: Add helper to prepare cpumap for affinity setting (rhbz#869096)
  - qemu: Keep the affinity when creating cgroup for emulator thread (rhbz#869096)
  - qemu: Prohibit chaning affinity of domain process if placement is 'auto' (rhbz#870099)
  - network: Fix networkValidate check for default portgroup and vlan (rhbz#868483)
  - qemu: Fix attach/detach of netdevs with matching mac addrs (rhbz#862515)
  - snapshot: Improve snapshot-list error message (rhbz#869100)
  - virsh: Remove --flags from nodesuspend (rhbz#869508)
  - virsh: Fix POD syntax (rhbz#870273)
  - xml: Print uuids in the warning (rhbz#868692)
  - blockjob: Support both RHEL and upstream qemu drive-mirror (rhbz#871055)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-7.el6
changelog:
  - sanlock: Introduce 'user' and 'group' conf variables (rhbz#820173)
  - esx: Fix connection to ESX 5.1 (rhbz#865670)
  - cpu: Fix definition of flag smap (rhbz#797283)
  - util: Do a better job of matching up pids with their binaries (rhbz#871201)
  - qemu: Fix EmulatorPinInfo without emulatorpin (rhbz#871312)
  - build: Fix RPM build for non-x86 platforms (rhbz#820173)
  - qemu: Report errors from iohelper (rhbz#866369)
  - build: Fix linking with systemtap probes (rhbz#866369)
  - iohelper: Fdatasync() at the end (rhbz#866369)
  - net-update docs: S/domain/network/ (rhbz#872104)
  - cpu: Add newly added cpu flags (rhbz#838127)
  - cpu: Add AMD Opteron G5 cpu model (rhbz#838127)
  - cpu: Add Intel Haswell cpu model (rhbz#843087)
  - snapshot: New XML for external system checkpoint (rhbz#638512)
  - snapshot: Improve disk align checking (rhbz#638512)
  - snapshot: Populate new XML info for qemu snapshots (rhbz#638512)
  - snapshot: Merge pre-snapshot checks (rhbz#638512)
  - qemu: Fix possible race when pausing guest (rhbz#638512)
  - qemu: Clean up snapshot retrieval to use the new helper (rhbz#638512)
  - qemu: Split out domain memory saving code to allow reuse (rhbz#638512)
  - snapshot: Add flag to enable creating checkpoints in live state (rhbz#638512)
  - snapshot: qemu: Add async job type for snapshots (rhbz#638512)
  - snapshot: qemu: Rename qemuDomainSnapshotCreateActive (rhbz#638512)
  - snapshot: qemu: Add support for external checkpoints (rhbz#638512)
  - snapshot: qemu: Remove restrictions preventing external checkpoints (rhbz#638512)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-8.el6
changelog:
  - iohelper: Don't report errors on special FDs (rhbz#866369)
  - esx: Yet another connection fix for 5.1 (rhbz#873538)
  - qemu: Don't corrupt pointer in qemuDomainSaveMemory() (rhbz#873537)
  - build: Place attributes in correct location (rhbz#873934)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#866388)
  - qemu: Emit event if 'cont' fails (rhbz#866388)
  - virsh: Make ,, escape parsing common (rhbz#874171)
  - virsh: Add snapshot-create-as memspec support (rhbz#874171)
  - qemu: Fix domain ID numbering race condition (rhbz#874330)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#873792)
  - AbortJob: Fix documentation (rhbz#873792)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-19
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#888503)
  - schema: Make the cpuset type reusable across schema files (rhbz#888503)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#888503)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#888503)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#888503)
  - capabilities: Add additional data to the NUMA topology info (rhbz#888503)
  - test: Add support for thread and core information for the test driver (rhbz#888503)
  - xen: Initialize variable before using (rhbz#888503)
  - xen: Actually fix the uninitialized variable (rhbz#888503)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913244)
  - qemu_agent: Ignore expected EOFs (rhbz#892079)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#882077)
  - qemu: Destroy domain on decompression binary error (rhbz#894723)
  - qemu: Run lzop with '--ignore-warn' (rhbz#894723)
  - Don't ignore return value of qemuProcessKill (rhbz#903238)
  - Fix race condition when destroying guests (rhbz#903238)
  - Log warning if storage magic matches, but version does not (rhbz#903248)
  - Add lots of debugging to storage file probing code (rhbz#903248)
  - Fix probing of QED file format (rhbz#903248)
  - util: Add virendian.h macros (rhbz#903248)
  - util: Use new virendian.h macros (rhbz#903248)
  - storage: Rearrange functions (rhbz#903248)
  - storage: Prepare for refactoring (rhbz#903248)
  - storage: Refactor metadata lookup (rhbz#903248)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#903248)
  - storage: Test backing chain traversal (rhbz#903248)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#896013)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#895882)
  - qemu: Add checking in helpers for sgio setting (rhbz#908073)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#908073)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#908073)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#908073)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#908073)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#908073)
  - qemu: Fix the memory leak (rhbz#908073)
  - Fix crash changing CDROM media (rhbz#908073)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#908073)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#914677)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#896604)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#896604)
  - qemu: Fix QMP detection of QXL graphics (rhbz#896604)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#896604)
  - conf: Add optional attribte primary to video <model> element (rhbz#896604)
  - qemu: Use newer -device video device in qemu commandline (rhbz#896604)
  - tests: Add one -device video device testcase (rhbz#896604)
  - qemu: Detect VGA_QXL capability correctly (rhbz#896604)
  - qemu: Support ram bar size for qxl devices (rhbz#896604)
  - conf: Don't leak 'primary' video property on error (rhbz#896604)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#912179)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#912179)
  - storage: Cleanup logical volume creation code (rhbz#912179)
  - docs: Clarify semantics of sparse storage volumes (rhbz#912179)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#906299)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#906299)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#906299)
  - locking: Resolve resource leaks on non error path (rhbz#906299)
  - selinux: Resolve resource leak using the default disk label (rhbz#906299)
  - storage: Resolve resource leaks with cmd processing (rhbz#906299)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#906299)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#906299)
  - storage: Need to add virCommandFree() (rhbz#906299)
  - qemu: Fix startupPolicy regression (rhbz#896013)
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#923963)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#923946)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#923946)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#923946)
  - security_manager.c: Append seclabel iff generated (rhbz#923946)
  - rpc: Fix client crash when server drops connection (rhbz#921538)
  - storage: Fix volume cloning for logical volume. (rhbz#948678)
  - qemu: Allow migration over IPv6 (rhbz#846013)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#846013)
  - remote: Don't call NULL closeFreeCallback (rhbz#911609)
  - libvirt: Increase connection reference count for callbacks (rhbz#911609)
  - virsh: Unregister the connection close notifier upon termination (rhbz#911609)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#911609)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#911609)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#911609)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951227)
  - Avoid use of free'd memory in auto destroy callback (rhbz#950286)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#950286)
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#922153)
  - Avoid spamming logs with cgroups warnings (rhbz#922153)
  - audit: Properly encode device path in cgroup audit (rhbz#922203)
  - qemu: Set correct migrate host in client_migrate_info (rhbz#920441)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#920441)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#961034)
  - cgroup: Be robust against cgroup movement races (rhbz#903433)
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#920441)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#920441)
  - virSocketAddrIsWildcard: Use IN6_IS_ADDR_UNSPECIFIED correctly (rhbz#920441)
  - libvirt: lxc: Don't mkdir when selinux is disabled (rhbz#915485)
  - Don't mount selinux fs in LXC if selinux is disabled (rhbz#915485)
  - virsh: Don't print --(null) in vol-name and vol-pool (rhbz#924571)
  - virsh: Fix docs for "virsh setmaxmem" (rhbz#924648)
  - qemu: Remove managed save flag from VM when starting with --force-boot (rhbz#917510)
  - qemu: Don't update count of vCPUs if hot-unplug has failed (rhbz#895424)
  - conf: net: Fix deadlock if assignment of network def fails (rhbz#921777)
  - RPC: Support up to 16384 cpus on the host and 4096 in the guest (rhbz#960683)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#895294)
  - conf: Allow for non-contiguous device boot orders (rhbz#889961)
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976401)
  - build: Fix build with -Werror (rhbz#976401)
  - qemuDomainBlockStatsFlags: Guard disk lookup with a domain job (rhbz#916315)
  - qemu: Don't fail to shutdown domains with unresponsive agent (rhbz#889635)
  - qemu: Wrap controllers code into dummy loop (rhbz#870003)
  - qemu: Add controllers in specified order (rhbz#870003)
  - tests: Add test for controller order (rhbz#870003)
  - bandwidth: Attach sfq to leaf node (rhbz#895340)
  - bandwidth: Create hierarchical shaping classes (rhbz#895340)
  - remote: Forbid default "/session" connections when using ssh transport (rhbz#847822)
  - remote: Fix client crash when URI path is empty when using ssh (rhbz#847822)
  - udev: Fix crash in libudev logging (rhbz#971904)
  - iscsi: Don't leak portal string when starting a pool (rhbz#975392)
  - storage: Avoid double virCommandFree in virStorageBackendLogicalDeletePool (rhbz#921387)
  - manual: Fix copy-paste errors (rhbz#923613)
  - esx: Support virtualHW version 9 (rhbz#955575)
  - manual: Add info about migrateuri in virsh manual (rhbz#878765)
  - conf: Fix cpumask leak in virDomainDefFree (rhbz#977430)
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#977961)
  - Document that runtime changes may be lost after S4 suspend (rhbz#872419)
  - virsh iface-bridge: Ignore delay if stp is turned off (rhbz#892403)
  - virsh: Obey pool-or-uuid spec when creating volumes (rhbz#970495)
  - Add method for checking if a string is (probably) a log message (rhbz#954248)
  - Convert QEMU driver to use virLogProbablyLogMessage (rhbz#954248)
  - util: Escapes special characters in VIR_LOG_REGEX (rhbz#954248)
  - qemu: Move QEMU log reading into a separate function (rhbz#954248)
  - qemu: Ignore libvirt logs when reading QEMU error output (rhbz#954248)
  - logging: Make log regexp more compact (and readable) (rhbz#954248)
  - qemu: Do not report unsafe migration for local files (rhbz#913363)
  - Plug leak in virCgroupMoveTask (rhbz#978352)
  - Fix invalid read in virCgroupGetValueStr (rhbz#978356)
  - pci: Initialize virtual_functions array pointer to avoid segfault (rhbz#980339)
  - Node device driver: update driver name during dumpxml (rhbz#979330)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Dan Smith <danms@us.ibm.com> - 0.1-2
changelog:
  - Cleaned up Release
  - Removed unnecessary Requires
  - After install, condrestart pegasus
  - Updated to latest source snapshot


author: Dan Smith <danms@us.ibm.com> - 0.3-4
changelog:
  - Fixed loader config for 64-bit systems
  - Added missing root/interop schema install
  - Added RegisteredProfile.registration to install


author: Dan Smith <danms@us.ibm.com> - 0.4-2
changelog:
  - Fixed schema registration to pick up ECTP in root/virt properly
  - Fixed schema registration to include ReferencedProfile in interop
  - Added RASD namespace fix


author: Dan Smith <danms@us.ibm.com> - 0.5.1-3
changelog:
  - Added infostore_trunc patch to fix infostore corruption
  - Added vsss_paramname patch to fix VSSS parameter name
  - Added vsss_logic patch to fix terminal memory snapshot logic
  - Added /etc/libvirt/cim directory for infostore


author: Kaitlin Rupert <kaitlin@us.ibm.com> - 0.5.1-4
changelog:
  - Added nostate patch to consider XenFV no state guests as running guests
  - Added createsnap_override patch to add vendor defined values to CreateSnapshot
  - Added add_shutdown_rsc patch to add support for shutdown operation
  - Added vsmc_add_remove patch to expose Add/Remove resources via VSMC
  - Added override_refconf patch to fix dup devs where ID matches refconf dev ID


author: Kaitlin Rupert <kaitlin@us.ibm.com> - 0.5.1-5
changelog:
  - Added vsmigser_schema patch to remove dup method name from VSMigrationService
  - Added mem_parse patch to set proper mem max_size and mem values
  - Added mig_prof_ver patch to report the proper Migration Profile version
  - Added hyp_conn_fail patch to fix when not connecting to hyp returns a failure
  - Added rm_def_virtdev patch to remove default DiskRADSD virtual device
  - Added rm_eafp_err patch to remove error status when EAFP no pool link exists
  - Added sdc_unsup patch to make SDC not return unsup for RASD to AC case


author: Daniel Veillard <veillard@redhat.com> - 0.5.11-1.el6
changelog:
  - Rebase to 0.5.11 for RHEL-6.1
  - needed to bump libcmpiutil requirement to 0.5.4 due to incompatibilities
  - Resolves: rhbz#633336
  - Resolves: rhbz#633331


author: Daniel Veillard <veillard@redhat.com> - 0.6.0-1.el6
changelog:
  - Rebase to libvirt-cim 0.6.0 rhbz#739154
  - Support libvirt domain events rhbz#739153
  - Network QoS support rhbz#633338
  - cpu cgroup support rhbz#739156


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Daniel Veillard <veillard@redhat.com> 2.6.27-1
changelog:
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream


author: Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
changelog:
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups


author: Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
changelog:
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.0-1
changelog:
  - resolves: #658734
    setacl(1) man page bug (package acl)
  - resolves: #651120
    setfattr(1) man page bug (package attr)
  - resolves: #615905
    ospfclient(8) and watchquagga(8) man pages added (package quagga)
  - resolves: #633701
    expect(1) man page is bad formatted (package expect)
  - resolves: #650162
    useradd(8) man page bug (package shadow-utils)
  - resolves: #657563
    Manual page corrections for find(1) (package findutils)
  - resolves: #632081
    man(1) for Japanese manual page contains duplicated lines in PAGER explanation
    (package man)
  - resolves: #604626
    yum-verify man page uses 'pretty' quotes in examples (package yum-utils)
  - resolves: #622451
    Author info is wrong in man page (package logrotate)
  - resolves: #638625
    Ambiguity in logrotate man page (package logrotate)
  - resolves: #644308
    manpage not in sync with options logrotate actually recognizes (package logrotate)
  - resolves: #613979
    dftest and randpkt does not have a man page (package wireshark)
  - resolves: #619779
    lftp(1) option xfer:auto-rename not documented (package lftp)
  - resolves: #673968
    logrotate(8) manpage typo patch (package logrotate)


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.1-1
changelog:
  - resolves: #615873
    Man w3m is stating incorrect program version (package w3m)
  - resolves: #675213
    userpasswd(1) manpage fix (package usermode)
  - resolves: #675688
    pcretest(1) manpage fixes (package pcre)
  - resolves: #675682
    pcregrep(1) manpage fixes (package pcre)
  - resolves: #636785
    "semanage module" is not mentioned in semanage man page (package policycoreutils)
  - resolves: #540492
    8 options are not described in semanage man page (package policycoreutils)


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.4-1
changelog:
  - related: #604626
    add forgotten patch
  - related: #632081
    fix the encoding
  - related: #644308
    fix the typo
  - related: #650162
    fix the patch text
  - related: #676483


author: Ivana Hutarova Varekova <varekova@redhat.com> 6.2.0-1
changelog:
  - resolves: #712256
    Typo in volume_key manpage
  - resolves: #709274
    ntpq(8) manpage fixes
  - resolves: #709058
    ntp-keygen(8) manpage fixes
  - resolves: #615897
    Added missing man page for/usr/sbin/lsmsr in x86info package
  - resolves: #690187
    New man pages for cciss + hpsa modules


author: Ivana Hutarova Varekova <varekova@redhat.com> 6.2.1-1
changelog:
  - resolves: #698151
    Remove documentation for "order" keyword in /etc/host.conf manpage
  - resolves: #688543
    Several lsvpd tools options not documented in man page
  - resolves: #674423
    man page for recvmmsg added
  - resolves: #656245
    add fattach.2 link to uninplemented
  - resolves: #719902
    Remove bug fixed in original component: #674870
    Remove bug fixed in original component: #674878
    Remove bug fixed in original component: #677541
    Remove bug fixed in original component: #677542
    Remove bug fixed in original component: #690801
    Remove bug fixed in original component: #674883


author: Peter Schiffer <pschiffe@redhat.com> 6.2.2-1
changelog:
  - resolves: #727526
    Typo in man curl manpage
  - resolves: #730042
    Add missing man page for cpufreq-aperf and fixed cpufreq-set man page
  - resolves: #602228
    bridge-utils missing documentation in manpage for RFE 574461
  - resolves: #731690
    Man ecryptfs contains invalid link in SEE ALSO section
  - resolves: #734836
    Document that realtime clock functions need to link with -lrt
  - resolves: #656245
    Fixed incorrect link from previous release
  - resolves: #690187
    Added license file for man pages from man-pages package
    Removed bug fixed in original component: #659740
    Added license file for man page from x86info package


author: Peter Schiffer <pschiffe@redhat.com> 6.2.3-1
changelog:
  - resolves: #740670
    vsftpd: documentation for 'max_per_ip' default setting is wrong
  - resolves: #717770
    Need single-request-reopen option documented for resolv.conf
  - resolves: #742098
    Update description of timeo in nfs(5) manpage
  - resolves: #694860
    No mention of sssd in nsswitch.conf man page
  - resolves: #723791
    Lack of UMOUNT_NOFOLLOW flag description in umount(2)
  - resolves: #728416
    [RFE] net: backport sendmmsg syscall [Manpage request]


author: Peter Schiffer <pschiffe@redhat.com> 6.3.1-1
changelog:
  - resolves: #605521
    added manual page for urlgrabber
  - resolves: #768949
    updated info about trapt in bash manual page
  - resolves: #528879
    added missing pages: mksquashfs.1 and unsquashfs.1
  - Removed bug fixed in original component: #659646
  - Removed bug fixed in original component: #659705
  - Removed bug fixed in original component: #659713
  - Removed bug fixed in original component: #659720
  - Removed bug fixed in original component: #674864
  - Removed bug fixed in original component: #674866
  - Removed bug fixed in original component: #676636
  - Removed bug fixed in original component: #676643
  - Removed bug fixed in original component: #714086
  - Removed bug fixed in original component: #745133


author: Peter Schiffer <pschiffe@redhat.com> 6.3.2-1
changelog:
  - resolves: #745467
    added manual page for pkcs_slot
  - resolves: #801742
    fixed redundant "works" word in request-key.conf man page
  - resolves: #695363
    added description of auditing support to the iptables and ip6tables man pages
  - resolves: #801784
    fixed typo in the yum man page
  - resolves: #747970
    added description of -D option to the lsblk man page
  - resolves: #769566
    fixed description of --group-info option in the wbinfo man page
  - resolves: #766341
    removed -s option from cgcreate man page
  - resolves: #801783
    added description of auditing support to the ebtables man page
  - resolves: #800256
    added description of EIDRM error to the shmop man page
  - resolves: #653908
    added missing options to the replcon man page
  - Removed bug fixed in original component: #737990


author: Peter Schiffer <pschiffe@redhat.com> 6.3.3-1
changelog:
  - related: #528879
    fixed name section in the unsquashfs.1 man page
  - resolves: #529335
    added missing pages: fusermount.1, ulockmgr_server.1 and mount.fuse.8
  - resolves: #810910
    mount(8) man page should include relatime in defaults definition


author: Peter Schiffer <pschiffe@redhat.com> 6.4.0-1
changelog:
  - resolves: #866386
    mpo remove tracker
  - removed bug fixed in original component: #676355
  - removed bug fixed in original component: #714073
  - removed bug fixed in original component: #714074
  - removed bug fixed in original component: #714075
  - removed bug fixed in original component: #714078
  - removed bug fixed in original component: #729984
  - removed bug fixed in original component: #735789
  - removed bug fixed in original component: #745152
  - removed bug fixed in original component: #745501
  - removed bug fixed in original component: #745521
  - removed bug fixed in original component: #745733
  - removed bug fixed in original component: #799958
  - removed bug fixed in original component: #809108
  - removed bug fixed in original component: #809117
  - removed bug fixed in original component: #809139
  - removed bug fixed in original component: #809144
  - removed bug fixed in original component: #809564
  - removed bug fixed in original component: #820183
  - removed bug fixed in original component: #690800
  - renamed all patches to include bug id


author: Peter Schiffer <pschiffe@redhat.com> 6.4.1-1
changelog:
  - resolves: #872526
    mentioned ext4 support in dump(8) man page
  - resolves: #853959
    added missing --no-tpm option in rngd(8) man page
  - resolves: #867332
    mentioned that groupmems command is not setuid in groupmems(8) man page
  - resolves: #849201
    added missing alsaunmute(1) man page
  - resolves: #806845
    updated dmidecode(8) man page
  - resolves: #845657
    updated description of localalloc option on the numactl(8) man page
  - resolves: #814417
    updated vnc documentation for -SecurityTypes option
  - resolves: #846591
    added missing options to the ipmitool(1) man page


author: Peter Schiffer <pschiffe@redhat.com> 6.5.0-1
changelog:
  - resolves: #996478
    mpo remove tracker
  - removed bug fixed in original component: #659661
  - removed bug fixed in original component: #714079
  - removed bug fixed in original component: #714084
  - removed bug fixed in original component: #809550


author: Peter Schiffer <pschiffe@redhat.com> 6.5.1-1
changelog:
  - related: #996478
    mpo remove tracker
  - removed bug fixed in original component: #881779
  - resolves: #896700
    fixed missing text in auditd.conf(5) man page
  - resolves: #1002071
    updated description of extglob behavior in bash(1) man page
  - resolves: #807323
    added description of webm format to byzanz-record(1) man page
  - resolves: #885625
    fixed typo on cupsctl(8) man page
  - resolves: #905066
    fixed documentation regarding CA certificates in curl package
  - resolves: #896544
    fixed typos in curl package man pages
  - resolves: #913088
    fixed typo in security_compute_av(3) man page
  - resolves: #913191
    updated selinux(8) man page
  - resolves: #979460
    added clarification about setting variables on mailx(1) man page
  - resolves: #960281
    documented missing values in clock_getres(2) man page
  - resolves: #974697
    updated description of LD_PRELOAD variable in ld.so(8) man page
  - resolves: #953753
    documented /proc/[pid]/oom_score_adj on proc(5) man page
  - resolves: #953750
    documented /proc/sys/kernel/dmesg_restrict on proc(5) man page
  - resolves: #953539
    documented /proc/sys/kernel/kptr_restrict on proc(5) man page
  - resolves: #908295
    fixed typo on syslog(3) man page
  - resolves: #974685
    removed incorrect example from sched_setaffinity(2) man page
  - resolves: #988125
    documented MADV_DONTDUMP and MADV_DODUMP on madvise(2) man page
  - resolves: #903258
    documented FALLOC_FL_PUNCH_HOLE flag on fallocate(2) man page
  - resolves: #957010
    fixed return type of strtoul(3) and strtoull(3)
  - resolves: #928917
    updated description of O_DIRECT on open(2) man page
  - resolves: #979318
    described ipv6 on netstat(8) man page
  - resolves: #951826
    updated default settings of inet_protocols variable on postconf(5) man page
  - resolves: #872144
    backported fix for top(1) man page
  - resolves: #983066
    removed deprecated example from rhnreg_ks(8) man page
  - resolves: #904970
    fixed typos on rsync(1) man page
  - resolves: #907837
    fixed description of -u option on useradd(8) man page
  - resolves: #884699
    fixed typo in usb-devices(1) man page
  - resolves: #972764
    removed superfluous dots after "via" preposition in yum man pages


author: Peter Schiffer <pschiffe@redhat.com> 6.5.2-1
changelog:
  - related: #807323
    fixed typo on byzanz-record(1) man page
  - related: #896700
    fixed even more missing text in auditd.conf(5) man page
  - related: #913191
    fixed typo on selinux(8) man page
  - resolves: #1020432
    properly documented -Z option for passing principal
    list on ssh-keygen(1) man page
  - resolves: #1020417
    removed incorrect default values of KexAlgorithms on ssh_config(5) man page
  - resolves: #833868
    fixed dig(1) man page
  - resolves: #1018622
    updated description of "new station" message on arpwatch(8) man page


author: <gleblanc@localhost.localdomain>
changelog:
  - beautification
  - made mdadm.conf non-replaceable config
  - renamed Copyright to License in the header
  - added missing license file
  - used macros for file paths


author: Doug Ledford <dledford@redhat.com> 1.5.0-2
changelog:
  - Add a default MAILADDR line to the mdadm.conf file installed by default
    (Bugzilla #92447)
  - Make it build with gcc-3.4


author: Doug Ledford <dledford@redhat.com> 1.5.0-4
changelog:
  - Update mdmonitor script to start daemon more cleanly
  - Repackage mdmpd tarball to include gcc-3.4 changes and to make
    mdmpd properly daemonize at startup instead of forking and leaving
    the child attached to the terminal.


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> 1.11.0-2.fc4
changelog:
  - Change the default auto= mode so it need not be on the command line to
    work with udev, however it is still supported on the command line (#132706)
  - Add a man page (from Luca Berra) for mdassemble


author: Doug Ledford <dledford@redhat.com> 1.11.0-4.fc4
changelog:
  - Make the mdmonitor init script use the pid-file option, major cleanup
    of the script now possible (#134459)


author: Warren Togami <wtogami@redhat.com> 2.2-1
changelog:
  - 2.2 upgrade (#167897)
  - disable diet because we don't ship it anymore
    and we don't actually use mdassemble now


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Doug Ledford <dledford@redhat.com> - 2.6-1
changelog:
  - Update to latest upstream version
  - Remove the mdmpd daemon entirely.  Now that multipath tools from the lvm/dm
    packages handles multipath devices well, this is no longer needed.
  - Various cleanups in the spec file


author: Doug Ledford <dledford@redhat.com> - 2.6.2-1
changelog:
  - Update to latest upstream
  - Remove requirement for /usr/sbin/sendmail - it's optional and not on by
    default, and sendmail isn't *required* for mdadm itself to work, and isn't
    even required for the monitoring capability to work, just if you want to
    have the monitoring capability do the automatic email thing instead of
    run your own program (and if you use the program option of the monitor
    capability, your program could email you in a different manner entirely)


author: Doug Ledford <dledford@redhat.com> - 2.6.2-2
changelog:
  - Fix a file leak issue when mdadm is in monitor mode
  - Update mdadm init script so that status will always run and so
    return codes are standards compliant
  - Fix assembly of version 1 superblock devices
  - Make the attempt to create an already running device have a clearer
    error message
  - Allow the creation of a degraded raid4 array like we allow for raid5
  - Make mdadm actually pay attention to raid4 devices when in monitor mode
  - Make the mdmonitor script use daemon() correctly
  - Fix a bug where manage mode would not add disks correctly under certain
    conditions
  - Resolves: bz244582, bz242688, bz230207, bz169516, bz171862, bz171938
  - Resolves: bz174642, bz224272, bz186524


author: Doug Ledford <dledford@redhat.com> - 2.6.2-3
changelog:
  - Oops, had to update the file leak patch, missed one thing
  - Minor tweak to return codes in init script and add LSB header
  - Resolves: bz244582, bz246980


author: Doug Ledford <dledford@redhat.com> - 2.6.2-4
changelog:
  - Oops, if we call -C -e1, minor_version is no longer properly set, fix that
    up
  - Related: bz230207


author: Bill Nottingham <notting@redhat.com> - 2.6.4-4
changelog:
  - make /dev/md if necessary in incremental mode (#429604)
  - open RAID devices with O_EXCL to avoid racing against other --incremental processes (#433932)


author: Doug Ledford <dledford@redhat.com> - 2.6.7-1
changelog:
  - Update to latest upstream version (should resolve #444237)
  - Drop incremental patch as it's now part of upstream
  - Clean up all the open() calls in the code (#437145)
  - Fix the build process to actually generate mdassemble (#446988)
  - Update the udev rules to get additional info about arrays being assembled
    from the /etc/mdadm.conf file (--scan option) (#447818)
  - Update the udev rules to run degraded arrays (--run option) (#452459)


author: Doug Ledford <dledford@redhat.com> - 2.6.7.1-1
changelog:
  - Updated to latest upstream stable release (#466803)
  - Change udev rule to not assemble degraded arrays (#453314)
  - Fix metadata matching in config file (#466078)
  - Fix assembly of raid10 devices (#444237)
  - Fix incremental assembly of partitioned raid devices (#447818)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.1
changelog:
  - Update to latest upstream devel release
  - Use the udev rules file included with mdadm instead of our own
  - Drop all the no longer relevant patches
  - Fix a build error in mdopen.c
  - Fix the udev rules path in Makefile
  - Fix a compile issue with the __le32_to_cpu() macro usage (bad juju to
    to operations on the target of the macro as it could get executed
    multiple times, and gcc now throws an error on that)
  - Add some casts to some print statements to keep gcc from complaining


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.2
changelog:
  - Readd our old mdadm rules file that does incremental assembly
  - Remove the new mdadm rules file from upstream as we already have this in
    our udev package (and the one in the udev package already has a bug fixed)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.1
changelog:
  - Update to latest devel release
  - Remove the no longer necessary udev patch
  - Remove the no longer necessary warn patch
  - Remove the no longer necessary alias patch
  - Update the mdadm.rules file to only pay attention to device adds, not
    changes and to enable incremental assembly
  - Add a cron job to run a weekly repair of the array to correct bad sectors
  - Resolves: bz474436, bz490972


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.3
changelog:
  - Slightly tweak the udev rules to make sure we don't start arrays
    while running in rc.sysinit...leave array starting to it instead
  - Modify mdadm to put its mapfile in /dev/md instead of /var/run/mdadm
    since at startup /var/run/mdadm is read-only by default and this
    breaks incremental assembly
  - Change how mdadm decides to assemble incremental devices using their 
    preferred name or a random name to avoid possible conflicts when plugging
    a foreign array into a host


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.5
changelog:
  - Fix a few issues with the new code to determine when a device gets to
    keep its name and when it doesn't


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.6
changelog:
  - Only check raid devices automatically, do not attempt to repair them
    during the weekly data scrubbing


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.7
changelog:
  - Move the mdadm.map file from /dev/md/ to /dev/ so the installer doesn't
    need to precreate the /dev/md/ directory in order for incremental
    assembly to work


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Remove stale patches already accepted by upstream
  - Fix the raid-check script to only try and check a device if it is
    checkable
  - Update to official mdadm-3.0 version
  - Resolves: bz505587, bz505552


author: Doug Ledford <dledford@redhat.com> - 3.0-2
changelog:
  - Improved raid-check script as well as the ability to configure what devices
    get checked
  - Endian patch for uuid generation


author: Doug Ledford <dledford@redhat.com> - 3.0-3
changelog:
  - Update to current head of upstream git repo for various imsm related fixes
    (fixes bz523262)
  - Fix display of metadata version in output of Detail mode
  - Add UUID output to --detail --export (bz523314)


author: Hans de Goede <hdegoede@redhat.com> - 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - Add a patch fixing mdadm --detail -export segfaults (bz526761, bz523862)
  - Add a patch making mdmon store its state under /dev/.mdadm for initrd
    mdmon, rootfs mdmon handover
  - Restart mdmon from initscript (when running) for rootfs mdmon handover


author: Doug Ledford <dledford@redhat.com> - 3.0.3-1
changelog:
  - New upstream release 3.0.3 (bz523320, bz527281)
  - Update a couple internal patches
  - Drop a patch in that was in Neil's tree for 3.0.3 that we had pulled for
    immediate use to resolve a bug
  - Drop the endian patch because it no longer applied cleanly and all attempts
    to reproduce the original problem as reported in bz510605 failed, even up
    to and including downloading the specific package that was reported as
    failing in that bug and trying to reproduce with it on both ppc and ppc64
    hardware and with both ppc and ppc64 versions on the 64bit hardware.
    Without a reproducer, it is impossible to determine if a rehashed patch
    to apply to this code would actually solve the problem, so remove the patch
    entirely since the original problem, as reported, was an easy to detect DOA
    issue where installing to a raid array was bound to fail on reboot and so
    we should be able to quickly and definitively tell if the problem resurfaces.
  - Update the mdmonitor init script for LSB compliance (bz527957)
  - Link from mdadm.static man page to mdadm man page (bz529314)
  - Fix a problem in the raid-check script (bz523000)
  - Fix the intel superblock handler so we can test on non-scsi block devices


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.1
changelog:
  - Update to head of upstream git repo, which contains a significant number
    of bug fixes we need (bz543746)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.3
changelog:
  - Don't run the raid-check script if the kernel doesn't support
    md devices (bz557053)
  - Don't report any mismatch_cnt issues on raid1 devices as there are
    legitimate reasons why the count may not be 0 and we are getting enough
    false positives that it renders the check useless (bz554217, bz547128)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.4
changelog:
  - Fix problem with booting multiple imsm containers when they aren't listed
    "just so" in the mdadm.conf file (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.5
changelog:
  - The uuid patch cause a different problem during assembly, so use a gross
    hack to work around the uuid issue that won't break assembly until fixed
    properly upstream (bz567132)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.6
changelog:
  - Newer version of imsm patch that leaves warning, but only when there
    actually are too many devices on the command line (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-1
changelog:
  - Grab latest upstream release instead of git repo snapshot (bz552344, bz572561)
  - The lack of /dev/md is causing problems, so add code to mapfile.c to cause
    us to create /dev/md if it doesn't exist (bz569019)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-2
changelog:
  - Add a little more paranoia checking to the RebuildMap code to avoid ever
    having the same infinite loop as in bz569019 again even if we change file
    locations to somewhere where we can't create a mapfile


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, bz617280)
  - Remove mdadm.static as its no longer used in initrd creation
  - Remove glibc-static buildreq
  - Resolves: bz617280


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)
  - Resolves: bz604023


author: Doug Ledford <dledford@redhat.com> - 3.1.3-1
changelog:
  - Update to official 3.1.3 release instead of a git snapshot
  - Add patch for return code in the case that a container is not assembled
    due to insufficient drives (bz622408)
  - Add patch to allow the deprecated --no-degraded option to be passed in,
    just not honored (bz622408)
  - Resolves: bz622408


author: Doug Ledford <dledford@redhat.com> - 3.2-1
changelog:
  - Update to latest upstream release
  - Related: bz633306, bz633667, bz633671, bz633688, bz633690, bz633692
  - Fix mdadm udev rules file
  - Resolves: bz605710
  - Process the Y option
  - Resolves: bz636883


author: Doug Ledford <dledford@redhat.com> - 3.2.1-1
changelog:
  - Update to latest upstream release
  - Don't report mismatch counts on either raid1 or raid10 devices
  - Check both active and idle arrays during raid check runs
  - Move raid-check script to /usr/sbin, add a crontab entry to /etc/cron.d
    and mark it config(noreplace) so that users can select their own
    raid check frequency and it will be preserved across updates
  - Allow the raid check script to set both the cpu and io priority on the
    raid check process in an effort to minimize the impact to users on the
    system
  - Related: bz633306


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz716413, bz694083, bz694092, bz694103,
    bz694121, bz694779, bz695336, bz702270)
  - Correct typo in /etc/sysconfig/raid-check file (bz708280)
  - Fix a bug related to readding devices into an array (bz706500)
  - Resolves: bz716413, bz694083, bz694092, bz694103, bz694121, bz694779
  - Resolves: bz695336, bz702270, bz708280, bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-2
changelog:
  - When using writemostly on a raid1 array, if you remove a device that
    is readwrite and then readd it, it can end up being listed as writemostly
    if the device used to pull the superblock info from was writemostly.
    Properly clear the writemostly bit when adding/readding a device.
  - Related: bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Be robust when running on a version 3.0 kernel
  - Properly set the default chunk size on orom devices
  - Fix getinfo_super_imsm so a hack in create.c can be dropped
  - Make the output of --detail more accurately communicate the state of
    a device that is waiting on a resync because another resync is
    already running
  - A few tweaks to the man page for mdadm to clarify usage in relation to
    imsm arrays
  - Resolves: bz727216, bz727207, bz727210, bz727212, bz727203


author: Doug Ledford <dledford@redhat.com> - 3.2.2-4
changelog:
  - Minor tweaks to wording in the comments of the /etc/sysconfig/raid-check
    file
  - Resolves: bz708280


author: Doug Ledford <dledford@redhat.com> - 3.2.2-5
changelog:
  - Fix multiple issues in the udev incremental assembly rules file.  We should
    now properly support:
    1) Nested md raid arrays
    2) md raid arrays built on top of dm device (like LUKS encrypted devices)
    3) md raid arrays build on top of dm multipath devices (we should no longer
      attempt to grab the path device instead of waiting for the logical
      multipath device to come live and grabbing it for our md raid usage)
  - Resolves: bz598513, bz609122


author: Doug Ledford <dledford@redhat.com> - 3.2.2-6
changelog:
  - Fix several new coverity issues introduced by changes between the rhel6.1
    and rhel6.2 mdadm package (this does not attempt to address coverity
    issues that also exist in rhel6.1)
  - Resolves: bz734716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-7
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz692261


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-8
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-9
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings. Additional fix being extra cautious from -8.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Really enable fix for problem where a device fails to remove from
  - an IMSM container
  - Resolves: bz771332


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz730052


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz790394


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Adam Jackson <ajax@redhat.com> 8.1-0.19
changelog:
  - Fix pthread linkage of glapi and osmesa
  - Drop llvmpipe-related patches
  - Don't require mesa-dri1-drivers on s390{,x}


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Rob Crittenden <rcritten@redhat.com> 1.0.6-2
changelog:
  - Patch to properly detect the Apache model and set up NSS appropriately
  - Patch to punt if a bad password is encountered
  - Patch to fix crash when password.conf is malformatted
  - Don't enable ECC support as NSS doesn't have it enabled (3.11.4-0.7)


author: Rob Crittenden <rcritten@redhat.com> 1.0.7-1
changelog:
  - Update to 1.0.7
  - Remove Requires for nss and nspr since those are handled automatically
    by versioned libraries
  - Updated URL and Source to reference directory.fedoraproject.org


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-4
changelog:
  - Apply patch so that mod_nss calls NSS_Init() after Apache forks a child
    and not before. This is in response to a change in the NSS softtokn code
    and should have always been done this way. (444348)
  - The location of libnssckbi moved from /usr/lib[64] to /lib[64]
  - The NSS database needs to be readable by apache since we need to use it
    after the root priviledges are dropped.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-6
changelog:
  - Update the patch for FIPS to include fixes for nss_pcache, enforce
    the security policy and properly initialize the FIPS token.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-7
changelog:
  - Don't inherit the MP cache in multi-threaded mode (454701)
  - Don't initialize NSS in each child if SSL isn't configured


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-3
changelog:
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4
changelog:
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Add file Requires on libnssckbi.so so symlink can't fail
  - Use _sysconfdir macro instead of /etc


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-9
changelog:
  - Add man page for gencert (#605376)
  - Fix hang when handling large POST under some conditions (#634687)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-13
changelog:
  - Fix array overrun when launching nss_pcache (#714154)
  - For FakeBasicAuth retrieve the entire subject, not just CN. Prefix this
    with "/" to be compatible with OpenSSL.
    Always retrieve the client certificate, not just on the first request
    it is needed. (#702437)
  - Don't try to shut down NSS if it wasn't initialized. (#691502)


author: Robert Relyea <rrelyea@redhat.com> - 1.0.8-14
changelog:
  - Fix 'Bugzilla Bug #797358 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #797326 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-15
changelog:
  - Fixes Bugzilla Bug #749408 - PK11_ListCerts called to retrieve all user
    certificates for every server (mod_nss-PK11_ListCerts.patch)
  - Fixes Bugzilla Bug #749409 - Add '--enable-ecc' option to %configure
    line under %build section of RHEL 6 spec file


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-16
changelog:
  - Fixes Bugzilla Bug #769906 - mod_nss insists on Required value
    NSSCipherSuite not set. (mod_nss-proxyvariables.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-17
changelog:
  - Fixes Bugzilla Bug #816394 - [RFE] Provide Apache 2.2 support for TLS v1.1
    via NSS through mod_nss . . .
  - Bumped version build/runtime requirements for NSPR and NSS


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-18
changelog:
  - Fixes Bugzilla Bug #835071 - [RFE] Support ability to share mod_proxy with
    other SSL providers (w/jorton, nkinder, & rcritten)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-19
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030265 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.5.z]


author: Joe Orton <jorton@redhat.com> 2.0.3-2
changelog:
  - update to 2.0.3
  - remove droplet in buildroot from multilib patch
  - drop build-related ModPerl:: modules and Apache::Test (#197841)
  - spec file cleanups


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Resolves: #549327
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.42-4
changelog:
  - Sync with current Fedora build, including:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Disable symbolic links by default in /etc/my.cnf
  Resolves: #553653
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.
  Resolves: #553632
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
    (see 547485)
  - Stop waiting during "service mysqld start" if mysqld_safe exits
  Resolves: #544095


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953085


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055880


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1058719


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


